Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa
File:                     712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa (raw, json)
Hash identifier:          PYk+/2lYbY9nddV9SH4rPghakxzH7TRIJHoMVf76itM=
Subject key identifier:   10:31:18:33:05:1B:12:FE:E5:AC:EC:02:94:54:2B:13:2E:93:83:EF
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F43285844F0354E40C47A56D903FA76C0
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     19905
IP address blocks:        69.89.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:4e:40:c4:7a:56:d9:03:fa:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=cdce291a-9f09-4094-b275-f1a63c15cce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:be:c6:a4:51:48:c6:50:48:b0:4b:80:83:67:
                    ed:f8:41:5b:d0:3e:1b:4e:25:48:fb:b8:44:56:aa:
                    5a:4c:1e:af:9d:3d:d4:d1:f7:57:62:92:f6:44:fd:
                    de:58:e4:0a:b8:30:2a:4d:55:b9:58:15:49:cc:58:
                    8f:78:e4:5b:f7:d7:9c:b8:57:cc:81:9e:b7:a3:48:
                    64:10:cb:3f:73:ec:a9:b6:06:6c:92:dd:7d:96:02:
                    f9:44:72:62:8c:fb:d9:d5:0d:fa:50:00:c2:9c:d2:
                    cc:18:6d:cb:89:3d:67:b3:b7:de:d6:2b:3d:38:91:
                    99:06:cd:b7:79:c0:d7:58:84:41:d0:f6:9c:2e:29:
                    93:b1:fb:d8:e9:23:50:7c:d8:b2:6a:a5:91:e2:41:
                    73:0f:db:c2:90:f6:08:7b:63:2a:ab:7d:18:de:ea:
                    f3:d4:66:41:c3:a8:3d:2a:2b:f5:a2:f0:ee:94:3e:
                    24:d0:cc:45:59:f6:41:0a:1e:24:8d:43:0a:a0:09:
                    1c:07:e9:95:ba:75:5b:73:ee:5a:3b:11:eb:92:5b:
                    03:b6:f2:ca:cf:8d:96:3d:37:df:88:3a:82:ec:46:
                    d5:05:be:99:cb:b7:17:fa:8b:87:b1:3a:06:a2:ea:
                    84:94:ad:33:8a:1d:bd:b1:4e:17:60:e9:ab:f1:0f:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:31:18:33:05:1B:12:FE:E5:AC:EC:02:94:54:2B:13:2E:93:83:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8a:7f:62:ea:50:71:99:3f:52:3b:1c:98:bf:1f:f1:7c:98:
         27:87:78:aa:bc:3c:1b:72:7b:d9:c0:e7:01:2a:67:10:4f:a2:
         6e:65:bd:31:35:e0:e8:6e:5a:83:a7:3d:a2:d3:83:1c:0a:26:
         fd:44:52:81:af:58:85:1d:25:5d:18:a3:5c:da:19:bf:e0:b0:
         18:16:ed:b4:3c:c9:70:c6:e6:f7:13:29:e5:25:2a:e6:57:08:
         07:15:a7:91:5f:f0:f2:36:6b:9b:fd:13:b5:aa:03:91:14:6a:
         20:71:f4:0c:ee:51:ba:ea:9f:1e:0c:93:61:63:d2:26:88:c0:
         b8:b6:87:17:8b:bd:f7:00:1b:a3:74:86:10:9b:14:5c:47:70:
         bc:b9:cd:47:8e:cf:db:47:cc:e4:86:2a:6e:3e:ed:fa:13:35:
         81:00:a5:07:80:75:ff:bf:35:54:41:f4:c5:04:5a:71:aa:80:
         a9:db:e8:2b:fa:e4:86:e3:9c:3d:56:96:33:37:fb:da:98:e1:
         b6:bf:79:5d:7a:9a:36:c4:fe:ca:58:44:b3:55:d3:3d:ee:37:
         09:09:4c:40:4f:1a:25:39:65:96:a7:58:7b:55:e8:72:a1:27:
         10:e0:ad:13:30:fa:c4:65:0d:3b:a5:94:a1:43:18:bf:f8:39:
         36:4d:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:55:47 2024 by rpki-client on console-fra.rpki-client.org