Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/7e596f8d-e7fa-32ea-8040-ecbfad2c8863.roa
File:                     7e596f8d-e7fa-32ea-8040-ecbfad2c8863.roa (raw, json)
Hash identifier:          cnXgkvv9V05XW4FKD+jXbF2bX5xjtD9rHn+hNE8PIsM=
Subject key identifier:   A4:09:95:11:C0:2D:A9:9E:35:F2:5C:20:E0:FD:5F:07:4C:8B:E3:B6
Certificate issuer:       /CN=960e110b-8a58-4e15-a2f1-8d907656427c
Certificate serial:       010D0C9F432858472C65C9CA0DDD45D508A33000
Authority key identifier: 1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/7e596f8d-e7fa-32ea-8040-ecbfad2c8863.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        69.10.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:c9:ca:0d:dd:45:d5:08:a3:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960e110b-8a58-4e15-a2f1-8d907656427c
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=17d26e92-f1aa-4c8a-89b5-094faf2ed41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d0:79:5a:39:c0:5c:44:8f:e3:ea:15:eb:4b:
                    e2:cd:57:a0:aa:78:2e:d7:49:0d:07:2b:45:f6:cc:
                    c4:32:35:1d:6e:53:11:6b:c3:4a:60:5a:9d:39:a5:
                    3e:af:95:33:c8:a9:88:6d:0b:9a:ec:f1:08:d0:ab:
                    32:08:87:18:15:06:31:39:ba:fb:33:11:d7:1a:76:
                    86:8e:a5:33:d8:f3:08:00:62:01:cd:45:5b:72:62:
                    ed:27:4d:81:b1:ad:13:48:03:69:aa:62:49:3e:10:
                    6a:ac:cf:4e:79:d3:03:da:e6:6e:ac:73:b4:ac:93:
                    e5:37:85:d2:90:5a:d5:12:12:b7:71:5a:33:63:b2:
                    dc:6b:31:7c:1e:90:c8:aa:6b:ec:78:09:48:60:49:
                    d2:27:35:09:c2:a7:b7:4c:8d:e8:75:7a:a1:d5:57:
                    d4:c5:8d:b4:0d:43:29:58:8b:95:5f:31:5c:bc:ad:
                    04:a6:0c:bf:57:85:66:1a:b0:b4:a2:1e:e1:1d:a5:
                    09:00:12:ec:b7:b3:02:0e:24:dc:7e:81:c6:95:fb:
                    69:6c:bc:77:7c:89:4a:14:5c:b6:9d:21:7a:e3:3c:
                    d6:af:b6:36:30:19:f7:5b:56:a6:b6:70:61:05:31:
                    55:4d:ad:c2:bf:f1:0b:a3:d4:9b:af:95:e7:f7:18:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:09:95:11:C0:2D:A9:9E:35:F2:5C:20:E0:FD:5F:07:4C:8B:E3:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/7e596f8d-e7fa-32ea-8040-ecbfad2c8863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.10.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ce:ea:72:9c:fa:e0:96:20:22:93:98:10:01:80:43:b6:45:
         2f:48:0e:fc:cf:2e:a5:fd:bf:0e:91:40:aa:01:eb:da:a4:1d:
         f2:8f:ef:7a:57:40:9b:62:37:d2:0e:0f:43:4c:58:de:b7:0a:
         fa:1f:a6:09:e6:59:e5:2a:4d:e5:00:97:c9:0f:26:35:f4:2a:
         77:35:04:f6:73:12:8f:9c:fe:5d:58:f7:97:0c:24:ce:95:88:
         d1:d2:f5:52:c0:f7:9b:8f:39:9f:b5:89:88:26:b9:8b:02:6e:
         bf:95:22:9a:98:db:63:47:62:9c:59:ce:4a:84:f0:80:35:36:
         99:e1:95:82:9c:3c:38:83:f9:da:54:ac:13:70:e0:ee:aa:3f:
         93:37:04:74:8d:9f:d9:3f:99:bd:d8:0f:e0:c9:5a:f2:3f:3e:
         f1:a5:5a:ec:43:e3:10:18:51:de:a2:76:e9:20:1c:76:f7:05:
         f4:4f:40:d6:27:9c:df:10:e2:c4:64:e1:8a:94:ab:ea:70:1d:
         d3:08:31:fc:3a:55:a6:07:f1:27:81:45:3c:11:9e:8f:46:c2:
         c3:69:4f:0d:01:16:98:20:db:4c:52:ca:aa:08:e3:85:50:e4:
         0e:4b:04:cf:81:21:d2:db:30:fb:a9:af:41:21:52:9c:dd:54:
         f5:e2:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:11 2024 by rpki-client on console-fra.rpki-client.org