Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfca6a85-ad0c-3c66-81f4-cb321cd40426.roa
File:                     dfca6a85-ad0c-3c66-81f4-cb321cd40426.roa (raw, json)
Hash identifier:          d5+1TpPIJwmxa2nniO+JWfydfBExmwvmPWGK6XmO9eA=
Subject key identifier:   FC:D0:C0:1C:09:D4:D7:F3:F7:43:58:41:BB:79:1A:4C:F9:44:99:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7711B31ACE65539D8D280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfca6a85-ad0c-3c66-81f4-cb321cd40426.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33652
IP address blocks:        68.86.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:71:1b:31:ac:e6:55:39:d8:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=80653f36-1715-4d39-8034-4ea642a48c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f1:ed:9e:4a:3f:08:ac:dd:c9:5e:0c:80:b1:
                    19:aa:6c:8d:03:23:99:a4:7e:e1:94:3d:33:98:2c:
                    d2:5b:02:8b:14:8e:00:8e:15:fd:2c:40:3a:e2:0d:
                    e5:a5:dd:2c:a9:f5:79:15:05:5e:37:ac:8e:0a:cb:
                    cc:18:d6:f7:ed:4b:09:1b:46:64:f5:9f:4e:65:20:
                    a5:31:c6:0c:5b:23:0e:4a:d5:f9:ee:29:cd:d9:2c:
                    ad:cf:ad:a0:e7:47:06:e9:43:0a:97:30:2a:cd:4c:
                    90:2d:4e:3c:50:b4:9e:7e:b5:bd:c4:18:80:86:6f:
                    2e:38:50:0e:b0:78:1c:97:eb:34:60:41:2d:1a:a7:
                    1b:eb:26:9d:ab:83:60:4e:c2:e7:49:4e:d6:73:ec:
                    92:33:c7:eb:d9:da:2e:2f:cb:47:57:8a:f6:53:0a:
                    e0:12:a1:a5:55:b3:1a:68:7d:0b:2d:41:09:ed:50:
                    24:df:e9:9b:7f:a2:96:37:33:13:46:1e:51:19:03:
                    e1:d8:d6:72:0a:a5:10:7d:6b:05:72:e8:f6:f3:c8:
                    f0:c8:f5:c9:20:3d:00:d8:0e:47:68:ad:dd:6c:d9:
                    18:62:20:7a:70:bf:cd:8a:99:e4:38:9f:71:f3:fd:
                    6e:0d:63:c9:23:cd:82:95:2a:b8:0e:6e:4e:8f:25:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D0:C0:1C:09:D4:D7:F3:F7:43:58:41:BB:79:1A:4C:F9:44:99:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfca6a85-ad0c-3c66-81f4-cb321cd40426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:25:86:43:9e:aa:3a:a5:71:08:2e:38:fd:36:90:f4:bb:06:
         65:6e:4f:56:48:4c:ee:fa:ad:17:32:d1:e3:14:68:65:6c:fa:
         47:dd:76:4c:4d:8e:2d:a3:fb:2e:31:64:b9:c2:e6:10:ed:0d:
         21:f7:06:97:d5:e0:e4:cc:11:5a:1e:a4:c1:64:18:d4:9b:da:
         d3:19:e5:53:d2:c3:52:f7:95:e2:12:9c:69:e3:08:06:9c:c8:
         c6:93:a7:45:dc:e5:f1:85:82:1c:55:57:7c:ae:38:9e:5f:18:
         d2:f7:72:59:94:ac:bf:63:80:db:10:e0:68:e9:8f:4a:2c:9c:
         55:df:ca:8e:1b:d6:a4:62:8e:ee:31:ac:3c:9f:c8:a2:d8:94:
         c0:5d:6d:93:13:c0:a7:10:a8:f7:6d:2a:d5:ac:45:c7:73:fc:
         3e:ea:8b:fd:86:5a:0c:72:fc:13:b7:72:ef:60:fe:19:bf:d0:
         9c:95:81:0e:69:58:7c:87:22:3c:22:1d:4a:e4:bf:24:3f:84:
         53:65:65:1b:47:b7:9f:4f:73:cb:ba:79:cf:32:7e:d6:f5:c4:
         32:73:f4:5b:0a:be:44:c2:60:ef:b1:0f:f0:17:41:63:87:c3:
         8a:f1:b7:c7:fb:6d:e3:4f:88:d0:5f:c3:dd:c7:b9:2e:b5:c6:
         da:15:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:14:36 2024 by rpki-client on console-ams.rpki-client.org