Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72ce9db8-9956-3ad2-bb09-3728877ede9e.roa
File:                     72ce9db8-9956-3ad2-bb09-3728877ede9e.roa (raw, json)
Hash identifier:          DQqYDMLxm+42nphTjcMzvUs8aGsDXvwaehpKSNur8zk=
Subject key identifier:   10:84:D8:C3:B1:6E:37:47:E8:F7:DA:07:3D:B9:B3:A5:F5:73:10:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584762D66DBB5F060B99CE1D8200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72ce9db8-9956-3ad2-bb09-3728877ede9e.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     36733
IP address blocks:        68.85.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:6d:bb:5f:06:0b:99:ce:1d:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=0161842b-daac-4046-8d97-d8f27cf4dbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c4:86:2f:6d:38:a1:ad:69:e4:34:09:84:25:
                    b6:de:aa:e1:20:19:67:08:8b:3a:e2:08:cd:70:ab:
                    48:28:76:96:73:f1:f5:ea:f6:9f:3e:1a:da:aa:15:
                    ac:63:7d:ff:b6:ae:72:21:3e:a6:fd:58:69:69:c0:
                    5b:2a:b0:34:c6:45:2a:ee:37:76:4f:63:00:ce:00:
                    81:81:16:ef:47:b4:c0:40:c2:44:07:0e:3a:fc:45:
                    ec:8f:ec:63:8a:50:75:b8:74:9e:05:b9:bf:8f:49:
                    e0:2c:92:63:6e:6e:79:24:a3:e4:1a:a5:e1:50:68:
                    37:20:42:e5:7f:81:f5:84:12:69:b4:74:2d:78:f9:
                    a6:68:9b:7d:87:64:09:65:f1:80:75:ec:b4:d1:9b:
                    49:ec:d6:53:8a:b9:1e:ed:41:96:2d:ac:db:50:f0:
                    df:50:9a:27:14:d7:12:bc:53:72:c1:0c:e2:7b:7b:
                    6f:fd:ce:e7:1b:88:a7:20:3c:30:e1:0e:74:ba:93:
                    46:33:30:6c:bb:6a:09:23:11:f3:3a:da:46:ce:61:
                    7c:70:3c:a9:01:a3:6b:3c:0a:4d:e5:fd:74:39:b4:
                    63:80:89:bc:55:65:29:d1:80:74:14:44:97:a8:fe:
                    f3:43:3e:de:43:3e:97:d2:b3:53:62:5e:ee:bc:55:
                    43:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:84:D8:C3:B1:6E:37:47:E8:F7:DA:07:3D:B9:B3:A5:F5:73:10:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72ce9db8-9956-3ad2-bb09-3728877ede9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:35:ed:56:f0:4a:67:ae:54:4b:61:c5:43:78:b2:81:6d:1c:
         49:09:ce:99:73:29:26:3f:72:9d:3f:95:9a:f2:f2:0c:6f:8c:
         1d:4a:0d:d7:9e:26:b5:72:cb:e2:9e:29:4a:fd:2e:fc:c5:0a:
         9a:ef:68:2a:ab:67:e7:54:da:1a:d9:d1:36:9f:98:55:89:c0:
         aa:8b:a5:90:1d:8b:94:3b:89:b5:7e:86:75:2d:d9:b1:d5:bb:
         ac:1b:d6:47:19:63:27:bb:7b:35:36:cf:f2:94:1a:41:74:62:
         6a:0f:c8:fc:41:46:16:00:f9:f3:b7:33:bc:d9:9d:b7:fc:90:
         45:f3:06:eb:ae:3d:bb:34:13:74:ce:e2:4b:a6:4f:32:45:4f:
         4e:e6:50:f1:5b:60:48:5d:27:ec:0b:02:71:14:30:72:dc:37:
         be:45:c6:3c:97:a2:d5:c0:60:3a:86:4c:27:34:0d:70:12:e9:
         48:70:5c:dc:1d:16:8b:c9:7d:7d:b8:1d:d5:3e:ca:4d:d7:b2:
         8e:98:df:ba:8b:6a:5c:60:c0:85:51:8d:f3:aa:e1:aa:32:cc:
         ad:de:3f:9d:17:ba:b6:d1:47:9b:b0:aa:e3:23:15:75:6a:d9:
         97:98:27:29:2f:2d:25:f4:6e:c6:92:dc:57:97:9d:74:ae:fc:
         74:a8:99:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:07:47 2024 by rpki-client on console-fra.rpki-client.org