Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdc55f68-f327-3ab9-95b4-73d77fa2a4b1.roa
File:                     fdc55f68-f327-3ab9-95b4-73d77fa2a4b1.roa (raw, json)
Hash identifier:          A0i++uOGNEcXWckHVGB7Rn+GjSs+Y6tWxRAOVymeaM8=
Subject key identifier:   CD:C3:2F:BE:18:C4:C7:39:68:D5:C8:55:A4:6B:60:0C:8B:8F:44:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049BA5BB776E736CFAC5E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdc55f68-f327-3ab9-95b4-73d77fa2a4b1.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     20214
IP address blocks:        68.85.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:ba:5b:b7:76:e7:36:cf:ac:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=5d422ecd-fa92-4061-9cab-774b556480ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:fc:ee:57:57:00:23:e9:fd:a1:f9:b0:8c:
                    20:95:78:86:53:f8:ce:a0:05:e8:84:4f:10:8a:48:
                    32:4b:6c:74:5b:17:34:24:43:50:13:0d:14:a2:bd:
                    17:17:fc:18:93:52:2d:c3:15:fb:de:24:5f:91:6e:
                    8d:a7:e5:49:a8:3f:5f:89:63:8e:a7:e9:72:83:9b:
                    9d:0a:df:15:10:09:fd:2a:e5:2b:fc:9c:e2:1f:7d:
                    c8:71:70:58:67:64:5b:f6:5c:5f:02:83:ed:ce:08:
                    90:98:ae:0d:4f:6a:f8:15:7b:c2:c5:27:d2:2d:b2:
                    5d:2c:ac:91:84:32:6c:aa:7d:bf:33:15:11:cb:45:
                    ea:1b:65:72:fd:53:ac:78:7e:fc:2d:8d:c9:bb:b2:
                    2c:a2:5b:61:e7:29:b6:09:bb:39:0c:f1:64:f0:70:
                    89:09:aa:d6:3a:ae:94:68:14:ff:0d:99:33:55:06:
                    7f:18:4c:49:2b:a6:7c:d3:7b:f3:5a:fe:1a:36:19:
                    58:cf:4d:39:3b:c3:e6:7a:0f:5a:cb:ab:c1:ef:88:
                    35:62:64:1a:b8:4b:9b:00:1e:b5:39:29:06:88:50:
                    b2:a3:ec:1e:47:11:a7:d5:5c:73:0f:eb:0c:aa:19:
                    03:5d:f9:17:41:76:34:dc:4d:17:e8:91:ff:8d:88:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C3:2F:BE:18:C4:C7:39:68:D5:C8:55:A4:6B:60:0C:8B:8F:44:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdc55f68-f327-3ab9-95b4-73d77fa2a4b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:97:db:3f:56:54:98:d5:1c:73:62:94:86:92:87:12:0f:4a:
         b4:6f:d6:fa:13:f2:e7:56:56:2e:db:69:8a:01:08:42:97:74:
         d7:e9:e2:1e:f8:f3:a1:fb:7e:43:16:11:95:61:d9:81:01:62:
         ed:ad:05:1f:f1:bb:5e:30:5f:d7:df:6d:57:af:20:43:62:9f:
         43:ee:d4:b4:10:90:9c:2d:15:b8:0d:fe:36:03:fe:e7:25:ee:
         f0:59:e4:5b:27:cf:54:50:0e:c7:35:76:35:2a:12:58:36:48:
         d1:35:94:35:9a:64:a6:3c:e3:d1:e1:70:41:5a:d0:4a:fa:4f:
         51:53:9c:6b:ee:ff:bb:8e:b4:6f:69:e9:e6:6d:62:11:98:15:
         ef:20:cb:2c:31:33:a3:f5:87:8f:a9:0a:ef:0f:db:63:ef:91:
         2a:ed:de:5d:be:ab:be:87:6d:9c:45:c4:2a:be:ee:2c:87:df:
         bd:71:61:e9:c1:2a:f2:cb:01:9d:dc:8b:c3:65:18:cf:fa:e6:
         43:b6:ae:1d:83:06:b9:95:f3:1f:e0:09:ed:36:5f:99:c6:14:
         68:9a:29:27:f9:65:49:93:0c:19:84:8d:29:3d:37:42:5a:b8:
         4a:8a:a6:b8:fb:e5:e7:9b:3f:2b:e5:e0:0e:a1:da:6c:01:83:
         0f:45:4c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:57:58 2024 by rpki-client on console-fra.rpki-client.org