Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/191a70b1-24a9-3920-bc11-9aabd486fc13.roa
File:                     191a70b1-24a9-3920-bc11-9aabd486fc13.roa (raw, json)
Hash identifier:          sYUGvAKhvA2M+bMOqe2nkzNUMn+hsr+Cll7f/2WOoyM=
Subject key identifier:   D9:FF:F6:B5:F6:93:37:C3:32:91:BE:90:BF:55:29:C7:F4:63:A2:6B
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F43285845AF536CC94A646C582D3A65E0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/191a70b1-24a9-3920-bc11-9aabd486fc13.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     60261
IP address blocks:        68.142.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:6c:c9:4a:64:6c:58:2d:3a:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=a63bc76e-6663-42a4-be47-809ef7a5cf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:8a:51:2d:e9:de:9b:69:51:7d:0d:75:ff:
                    6e:93:f8:57:4b:9a:58:09:0c:2e:c7:7e:e6:e8:02:
                    28:d7:19:ce:63:0e:e3:8d:4f:62:3e:be:8e:ff:93:
                    b1:59:cc:86:ba:01:37:cb:01:6a:50:c3:3f:6e:40:
                    0f:96:b8:a0:49:3a:2d:f1:5e:78:c4:94:c8:b0:07:
                    2f:35:21:c0:75:8d:68:9c:d2:67:66:63:c4:17:78:
                    c3:95:4b:35:86:c1:c1:9c:fc:7a:b2:8b:e4:b2:95:
                    ac:e9:6a:21:dd:07:ce:bb:3c:2b:35:63:d0:87:20:
                    f2:cb:d2:68:51:d3:d5:d3:cc:74:0c:26:e8:4e:80:
                    5d:45:d6:24:45:46:46:2b:02:fb:0c:0a:8c:ab:4b:
                    57:6a:62:0b:40:a9:84:7c:a7:92:f4:c5:9c:99:4a:
                    9a:bf:d2:fd:2e:10:92:38:b2:76:a9:ae:1b:8c:53:
                    da:0f:17:4f:50:6b:3c:0b:b9:10:ac:db:ed:14:89:
                    3d:bd:f3:8a:40:25:f8:fc:75:61:7d:6a:01:2f:7b:
                    24:91:cf:59:ee:3f:3a:cc:81:bd:c3:fa:01:4e:e4:
                    bd:59:2a:c3:15:d5:30:42:62:fa:9d:e0:25:a4:eb:
                    26:31:50:2f:fd:7e:12:1e:6e:02:cc:e9:9f:84:e6:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FF:F6:B5:F6:93:37:C3:32:91:BE:90:BF:55:29:C7:F4:63:A2:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/191a70b1-24a9-3920-bc11-9aabd486fc13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:73:99:67:18:a0:ad:32:25:f1:82:71:96:81:41:61:c0:19:
         56:1c:f2:43:88:d0:72:56:4a:7c:3f:30:30:30:81:7a:5d:16:
         a3:66:b8:ea:23:e9:ba:f4:49:49:90:0c:80:32:fc:cb:b0:9e:
         d5:63:a7:4c:6e:3d:7e:b7:67:29:57:60:74:fa:de:6f:6f:20:
         80:ab:9a:30:f8:6f:85:c1:8c:91:2b:70:7a:31:f9:69:02:74:
         85:e8:61:e9:94:a3:bb:75:85:28:86:4d:b7:94:11:66:d5:ca:
         31:f1:80:cd:bb:6b:b0:e0:6d:c5:84:e2:57:a5:e2:4a:c3:de:
         e7:04:34:57:da:11:de:90:a2:cf:00:7e:3d:b7:d3:23:32:79:
         ee:3c:66:7a:dd:7b:c8:a7:ee:c0:e9:3e:54:56:f9:53:d6:9d:
         83:59:4e:06:05:71:6e:bf:cf:79:24:45:f4:3b:11:84:bc:15:
         72:1c:79:46:73:16:f0:38:71:e1:c1:7f:ab:42:c2:b8:f9:f3:
         13:36:f1:16:a0:6c:f8:92:fc:13:7b:d0:da:39:bb:f6:2b:dc:
         59:81:5e:14:93:05:b9:47:73:dc:4c:23:c3:cf:ab:58:2f:65:
         76:73:98:38:79:bb:60:12:16:42:32:11:91:93:83:8d:77:2d:
         05:3e:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:31:04 2024 by rpki-client on console-fra.rpki-client.org