Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/f1f80a7a-4e42-3e7f-b3f2-c76032fced54.roa
File:                     f1f80a7a-4e42-3e7f-b3f2-c76032fced54.roa (raw, json)
Hash identifier:          0GCRQp5GoURN1wdJmhXtqASs9L1ChCVshzqC/gW8DoI=
Subject key identifier:   53:CD:12:EB:DF:56:2F:F2:34:F2:31:00:4B:F4:A7:A0:ED:33:1C:D5
Certificate issuer:       /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Certificate serial:       010D0C9F432858478E1BBC6A05262527B9128440
Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/f1f80a7a-4e42-3e7f-b3f2-c76032fced54.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     21803
IP address blocks:        69.39.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:bc:6a:05:26:25:27:b9:12:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=e71c80f4-c2f5-4f70-96c4-1b98ab481d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:a9:e8:3b:94:20:02:b1:26:1f:f1:91:40:
                    89:e7:00:3a:c3:bb:4d:63:2c:17:29:b6:10:75:fa:
                    6e:03:8c:d0:a7:80:66:80:fd:72:db:ec:da:17:85:
                    84:71:cc:a3:bd:50:f1:f0:86:f5:3d:14:e1:78:61:
                    f0:54:02:cb:d5:7a:3d:d8:96:55:e8:c0:dd:4f:34:
                    5d:c2:22:38:ff:c0:13:ac:d0:57:e4:bf:58:57:57:
                    00:f5:12:d5:67:a0:a9:f6:33:44:a2:58:24:d8:4e:
                    fb:a2:83:a1:28:21:98:11:db:67:05:57:19:60:82:
                    d1:82:d5:a5:1a:a5:6a:c3:d9:81:75:2a:5d:7e:65:
                    0b:84:12:83:3b:7d:0e:72:b3:d1:45:e0:b6:d9:b6:
                    ab:4f:0d:64:08:95:ee:a5:53:20:97:7c:45:dc:da:
                    44:90:68:92:e9:dd:a8:9a:2f:d5:b4:a0:81:bf:66:
                    20:f9:97:95:d3:28:41:1b:9a:19:1f:ee:29:27:21:
                    46:fa:c6:88:04:36:12:f3:37:47:a1:d3:1a:81:fd:
                    e8:b8:4a:78:ea:94:49:1c:7e:7a:8b:b6:15:54:a7:
                    37:ab:35:7b:25:3d:b9:16:b3:9b:36:ea:fb:e8:be:
                    01:57:8c:62:7b:9a:ee:4c:e7:19:18:cc:1d:df:09:
                    fd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CD:12:EB:DF:56:2F:F2:34:F2:31:00:4B:F4:A7:A0:ED:33:1C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/f1f80a7a-4e42-3e7f-b3f2-c76032fced54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl

            X509v3 Authority Key Identifier:
                keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.39.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:34:4c:81:c7:8b:32:05:3a:60:06:aa:a3:1f:d0:61:e1:91:
         48:58:85:75:bb:ca:f0:45:ed:39:b7:8d:d8:9d:9b:08:5c:1e:
         bc:85:97:bf:03:ac:af:a6:51:4f:97:fa:48:b7:aa:e1:ed:1d:
         87:a3:1c:b5:ad:54:26:f6:d1:84:d2:13:26:46:85:d3:ab:15:
         da:06:7f:2c:2c:61:f3:26:aa:fb:19:2d:22:e3:9d:74:c2:b3:
         8e:2a:9c:3f:7b:b7:f5:ce:59:25:8d:25:86:4d:88:55:2f:c4:
         95:b6:92:03:25:1f:14:ff:e2:99:f4:20:43:5b:52:5c:cf:dc:
         23:fc:01:1d:27:18:db:9b:31:80:c3:b6:6c:56:8a:fb:84:45:
         72:e9:88:5f:b4:ae:6b:a7:5b:5c:22:1c:fd:fa:4a:7d:30:fa:
         79:5c:d1:52:33:d8:dc:61:6e:45:7e:0a:8f:29:de:73:23:cd:
         33:61:6f:3b:63:99:08:bd:ca:a9:99:59:a9:3d:43:bd:b8:a2:
         53:9e:56:10:c6:69:a3:6d:db:bc:c6:08:26:0a:28:be:f5:a7:
         b4:5c:96:87:1c:e7:4f:04:35:c5:39:7b:84:57:c0:44:f7:4e:
         50:8a:98:00:75:fd:e2:2d:df:1b:fb:96:8d:f3:0d:15:54:d0:
         11:45:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:18 2024 by rpki-client on console-ams.rpki-client.org