Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/ee7ce86e-3919-39a7-9193-a27eaf247f05.roa
File:                     ee7ce86e-3919-39a7-9193-a27eaf247f05.roa (raw, json)
Hash identifier:          acC1KcB1DcKfpR8RV+JNrW0meSmetYSW1BrArEHKC7s=
Subject key identifier:   79:3A:65:16:2E:2A:DE:CA:E3:AF:BE:C0:94:DE:A9:04:FA:E2:93:13
Certificate issuer:       /CN=e5a67b98-1c41-438b-b404-8142d67c6476
Certificate serial:       010D0C9F43285847299B239C637E26B62F628E40
Authority key identifier: 81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/ee7ce86e-3919-39a7-9193-a27eaf247f05.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     14618
IP address blocks:        192.69.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:23:9c:63:7e:26:b6:2f:62:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a67b98-1c41-438b-b404-8142d67c6476
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=15ed89f9-6817-4af6-a9ea-4955d93f0efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:74:10:b2:96:bb:03:da:c9:bd:aa:46:5b:
                    d3:b5:7a:77:26:6b:b8:fb:87:11:21:b8:14:e2:54:
                    07:9a:af:28:ea:41:f7:84:5a:68:29:e8:09:f6:ac:
                    94:54:30:3e:75:3e:3b:18:0d:6b:92:2a:df:29:cb:
                    14:49:27:e9:58:29:a5:c0:3d:44:76:16:73:2b:26:
                    9c:d8:20:3e:b7:14:bf:d4:a2:a9:b8:6e:c8:97:22:
                    d0:78:8d:89:6c:7c:1c:4f:13:c4:27:2a:cd:42:45:
                    c8:02:23:47:c6:c7:d9:99:12:06:95:cd:41:65:3d:
                    ac:4b:40:b7:d2:7c:83:fa:34:ff:eb:45:a1:8c:d2:
                    74:ba:50:4d:2a:1a:c6:9e:76:d6:20:25:1c:cb:e2:
                    4c:18:0e:fb:32:e5:54:10:c0:7c:bb:3c:5f:e8:f3:
                    6f:61:19:d9:74:c2:84:b3:88:53:65:e7:4c:66:3c:
                    9a:de:7d:80:8a:67:d1:81:a9:0c:ba:02:0d:d9:1a:
                    d4:01:99:c4:76:0b:01:27:f1:f6:d4:1a:66:2a:f9:
                    74:02:d7:64:9a:b8:95:d2:0d:8e:16:32:1f:78:89:
                    90:0d:5b:98:f5:10:7e:4d:61:12:56:da:bc:19:23:
                    44:11:9b:76:f7:f8:94:ee:23:45:fb:fa:e7:c6:0c:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3A:65:16:2E:2A:DE:CA:E3:AF:BE:C0:94:DE:A9:04:FA:E2:93:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/ee7ce86e-3919-39a7-9193-a27eaf247f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.crl

            X509v3 Authority Key Identifier:
                keyid:81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:57:ce:3d:2b:ab:0c:b5:1a:e9:51:e9:9d:12:d0:5b:96:be:
         be:88:33:a3:ec:de:af:d8:bf:e7:ed:13:cd:35:11:fb:64:af:
         fc:a0:5e:93:1f:c6:3e:18:6b:15:46:f4:dc:f4:6c:a2:b6:0a:
         dc:0f:71:8b:8b:c8:d5:15:15:a9:05:50:45:3c:6d:10:08:92:
         1d:e6:ed:99:3b:14:6a:f8:9d:92:04:5e:c1:0d:51:75:02:f5:
         96:90:a1:b5:64:7c:58:f4:b6:ef:e0:ee:27:b4:d7:a4:f4:03:
         09:49:3f:9e:e9:d8:dd:96:6c:d5:d8:ae:5a:a4:63:bc:29:79:
         fb:77:4a:46:25:dc:b6:c5:0e:68:0d:b8:02:66:98:f3:03:5d:
         8c:70:28:34:c1:fb:4f:70:2b:16:15:5b:35:5b:20:d1:55:58:
         d4:84:68:b4:68:97:b4:58:56:a7:f2:94:23:2a:ae:f9:69:58:
         e1:5b:20:db:c8:c5:47:29:e1:de:0a:6a:b6:71:28:dd:b6:29:
         e3:ce:23:b8:29:8e:d0:f7:33:44:ff:b3:6f:c2:20:cc:3a:4f:
         0e:11:64:b0:d6:5d:53:4f:c8:c4:20:08:15:ba:11:f4:28:68:
         5b:12:2e:db:7a:a4:7d:25:34:5f:a3:93:a8:6a:72:f9:a0:32:
         f5:d0:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:56 2024 by rpki-client on console-ams.rpki-client.org