Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdec5b5e-9a7b-33af-b8f7-2e2c9cf539ab.roa
File:                     bdec5b5e-9a7b-33af-b8f7-2e2c9cf539ab.roa (raw, json)
Hash identifier:          y1GBl8aW3ArWoL3zFhNfQMRawpvvO+FucVuWCc1pemg=
Subject key identifier:   04:78:3C:8A:D2:67:E5:38:A4:3D:B3:D5:81:63:F2:A7:44:D8:E2:E6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B33F9DD0C83F1C1AAE500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdec5b5e-9a7b-33af-b8f7-2e2c9cf539ab.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33666
IP address blocks:        68.85.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:33:f9:dd:0c:83:f1:c1:aa:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=e94f372f-5ac3-4cf6-99c0-61d28ddfe0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:9a:ce:99:f2:49:b7:aa:6a:41:07:79:97:
                    bb:f8:9a:e3:5c:aa:96:c8:75:cd:17:85:ca:72:a8:
                    76:aa:dd:1e:e8:f5:0e:5b:bd:ab:c7:6d:04:96:d1:
                    0a:26:9c:f9:ed:89:3a:9d:33:40:f5:d1:62:f0:f1:
                    1c:f9:19:cd:6c:b9:83:0a:28:a8:7b:c2:f8:49:bc:
                    af:98:95:fa:7f:ce:9b:db:87:90:cb:cc:11:0b:bb:
                    af:a8:37:f7:17:c4:b8:42:9c:25:93:17:72:d3:2b:
                    b1:93:e3:8a:8a:79:1d:a8:9f:e1:28:d3:32:d4:6a:
                    5a:e0:10:1f:05:c4:08:db:a2:4b:02:d9:f0:80:cc:
                    0c:61:3c:c5:71:73:96:fe:ee:8d:ef:b2:b0:a1:e3:
                    d9:6e:16:79:49:14:0a:bd:aa:aa:bc:c3:ec:bf:e6:
                    00:3e:c7:73:90:18:00:a0:8b:9d:3f:20:72:8c:88:
                    32:3d:5f:cc:80:2a:01:6c:25:84:b7:55:1c:06:6a:
                    62:2a:38:af:1d:67:88:a4:74:12:5a:d9:31:d2:5c:
                    18:b2:44:95:6c:a7:56:3d:3a:b1:25:cf:18:ec:c0:
                    f6:53:4d:a5:8d:5a:3c:88:4f:9f:dc:55:59:6a:a2:
                    f4:7e:6d:c9:6e:91:7f:75:03:a6:bd:55:81:bf:13:
                    0d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:78:3C:8A:D2:67:E5:38:A4:3D:B3:D5:81:63:F2:A7:44:D8:E2:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdec5b5e-9a7b-33af-b8f7-2e2c9cf539ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:03:f3:0c:48:bd:80:3d:3d:66:3d:6d:6c:ee:03:90:02:a5:
         66:db:13:89:db:ae:ab:3c:89:28:8a:a5:62:f2:bb:88:d4:34:
         f0:9e:de:50:af:b3:36:79:d0:b6:d1:0e:e3:96:d8:e0:68:51:
         08:17:28:ba:3c:70:47:34:d4:b2:92:9c:ce:db:e4:95:22:cc:
         45:0e:0e:c4:8a:08:7f:20:5e:d3:a7:bc:6e:a2:fe:ca:fe:87:
         62:2b:64:51:62:4b:63:6a:a2:e2:f4:da:43:06:6a:d6:cd:af:
         0a:76:80:de:f4:6b:e6:21:a4:d4:77:78:fb:9c:ab:2f:ba:b5:
         85:06:26:3b:b6:2e:cd:3b:a4:83:fe:65:8d:dc:16:16:a4:00:
         1c:3b:91:01:a4:50:fa:f7:39:95:9f:15:3f:4e:7a:50:86:a6:
         bf:2a:02:01:58:f9:70:4d:45:11:18:97:20:14:55:c3:24:91:
         aa:61:29:f1:2f:de:06:9c:82:b5:94:db:ea:2f:a0:fe:af:ac:
         00:f2:2b:95:1f:31:97:c3:c4:e2:7b:23:d0:a3:f2:b5:5d:c4:
         22:71:3e:f7:75:2d:b7:72:67:35:09:3c:3b:d0:fb:67:84:f0:
         30:f4:65:70:6d:bd:a4:58:43:af:f2:c5:16:ac:78:a7:39:72:
         08:4e:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:44:21 2024 by rpki-client on console-fra.rpki-client.org