Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c819456b-aeb0-3b9d-b38a-af74afafb008.roa
File:                     c819456b-aeb0-3b9d-b38a-af74afafb008.roa (raw, json)
Hash identifier:          wDpEtCEjf6dV2OenNqSO8VJI5+1Xj0ToeTfJ7yYc3d8=
Subject key identifier:   5B:07:24:B8:60:10:DD:96:2A:54:15:DF:D7:91:71:40:07:A6:B1:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C00C1C602F1C858EA2900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c819456b-aeb0-3b9d-b38a-af74afafb008.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        68.86.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:00:c1:c6:02:f1:c8:58:ea:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=61f721ae-7b57-4078-8c67-4b95b2d8dbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1c:22:b4:21:f3:07:b5:04:51:84:30:ef:64:
                    27:de:32:cb:f8:5b:7a:6e:c1:46:35:2e:9d:de:c8:
                    a3:8e:c1:03:05:59:89:e5:af:a9:fd:27:90:d4:d4:
                    58:64:9e:e6:b5:70:10:5b:a7:bc:a7:c1:cf:a4:29:
                    24:04:c3:34:d8:81:22:4a:82:46:17:a3:c5:08:0d:
                    ea:23:77:0b:0e:a0:19:3a:ba:de:df:5c:bc:87:b5:
                    97:f5:3c:fc:e8:a0:32:38:60:94:53:49:a1:92:e6:
                    47:73:48:b5:9d:29:8f:e8:54:79:45:16:91:32:ef:
                    17:91:65:77:37:f7:63:94:e4:3d:51:94:39:59:cf:
                    09:00:98:d5:02:a0:98:4f:41:23:9e:f0:ca:0b:d3:
                    37:a9:b3:c4:9e:8e:47:7f:41:a5:f0:92:d0:0f:40:
                    21:67:c6:32:e6:16:3c:a4:ce:e9:6f:99:b7:58:18:
                    57:f1:42:76:22:37:05:00:f6:0e:2d:51:d7:9d:36:
                    33:be:51:93:87:f9:bf:e0:e4:9c:27:39:e4:e5:58:
                    ad:95:3d:b9:15:07:14:da:7b:25:00:0c:ff:37:0c:
                    0e:90:a6:4f:00:8f:ba:22:56:5e:3f:37:ff:73:0d:
                    41:7a:54:ff:b0:40:95:31:39:49:52:a5:7f:6b:59:
                    e0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:07:24:B8:60:10:DD:96:2A:54:15:DF:D7:91:71:40:07:A6:B1:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c819456b-aeb0-3b9d-b38a-af74afafb008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:1c:e2:f3:9a:3a:35:47:42:1e:ef:bd:46:35:3a:36:30:16:
         27:65:62:fe:48:3d:3a:27:14:71:b7:78:d7:fd:02:be:6d:4a:
         48:59:52:0d:9b:47:d7:d8:73:7f:b4:be:75:f9:fd:ed:96:c1:
         66:44:3d:1a:af:cc:40:65:ad:9b:78:3a:f2:31:7b:78:13:3a:
         39:32:ad:85:71:86:eb:ce:d1:5f:28:9a:a8:01:7e:6a:22:b0:
         88:ad:97:7b:28:72:22:d6:26:62:e3:97:d0:5d:ea:8a:8b:b9:
         47:df:6a:be:51:17:73:fc:0a:f0:2f:23:d9:51:2a:3e:fe:31:
         31:4e:f6:ae:ec:d0:38:64:00:9b:57:ef:7a:91:3f:8e:27:7d:
         86:cb:81:aa:35:c3:cb:04:d4:e1:e2:dd:c6:41:3e:1e:76:cc:
         63:e0:85:73:d9:70:70:53:cb:93:fb:70:34:0d:42:42:cb:9f:
         a4:05:ff:8d:f0:53:0d:81:c6:db:f9:15:6d:19:f4:9f:11:8b:
         05:58:da:74:3f:c3:4b:e2:90:32:cf:67:17:ac:e5:7d:d8:1c:
         7b:b0:63:bc:e7:56:f0:1f:f1:95:d9:41:a5:74:22:64:0a:d4:
         0b:7c:39:b0:8f:a2:bf:6e:28:54:fd:77:7a:d5:14:6e:77:ac:
         95:f2:30:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:04:02 2024 by rpki-client on console-ams.rpki-client.org