Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa
File:                     3af553af-3e25-340a-8320-484a9fc606f9.roa (raw, json)
Hash identifier:          PZsTVhlYWgmLY9YevUAcszLT740ozjiOH50LqyVCv/Q=
Subject key identifier:   6B:0E:E1:A2:26:64:3A:B4:B6:3C:CC:D6:4C:74:A6:53:3C:E6:0A:DA
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F43285845AF536C8FD36FFF8C76070750
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     37277
IP address blocks:        68.142.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:6c:8f:d3:6f:ff:8c:76:07:07:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=7a3726bc-456d-405c-bbc7-baa431a43b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:09:8d:f5:55:61:8c:8e:b2:13:27:45:f1:29:
                    4c:e5:bd:31:77:01:24:5f:eb:b3:e6:d8:fc:73:60:
                    fd:22:45:e0:6f:07:ef:9d:ee:03:1f:ad:37:36:70:
                    95:9c:ec:ee:c6:fa:cc:7b:a7:86:69:8e:41:27:3f:
                    14:62:43:48:5d:32:fa:03:e4:44:1c:e6:42:b2:5a:
                    b2:45:7e:f9:ac:f4:03:14:75:74:6a:fa:7f:d5:ce:
                    2d:c7:c1:ca:05:d3:6f:a0:c1:4f:e8:a0:56:c9:43:
                    09:6b:21:3b:b8:2c:16:7f:e6:e0:d1:cc:31:64:51:
                    45:4f:b5:69:ce:54:d6:0a:b0:ff:cf:98:a7:4f:c0:
                    82:8e:e3:36:fd:c4:8a:e3:e3:83:18:8a:20:ba:9d:
                    f9:83:ad:91:a1:53:90:7c:87:ee:40:f5:d4:d0:05:
                    47:7c:e6:e7:09:bc:c9:2b:36:53:b8:99:46:5b:24:
                    0b:b4:0f:bd:91:f2:65:aa:fd:62:af:c4:88:43:51:
                    66:e7:2e:de:7a:9f:2f:be:df:6a:3d:93:7c:40:b4:
                    08:57:d2:c8:6a:2c:6a:b8:21:ea:aa:22:83:80:dd:
                    f9:bf:75:0f:4f:39:d6:fd:fe:7d:aa:09:3d:a8:aa:
                    f4:08:3a:62:63:de:db:08:4d:32:89:81:6f:76:e9:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0E:E1:A2:26:64:3A:B4:B6:3C:CC:D6:4C:74:A6:53:3C:E6:0A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e1:b8:87:a4:93:2c:72:41:bc:10:d6:1e:6f:da:91:a5:61:
         9f:e6:a5:4b:b7:c9:a6:60:c8:4c:e7:ac:5f:dc:bc:ec:8d:e9:
         1d:63:53:17:bf:35:ef:1e:66:9f:4f:6b:ec:9e:7c:d8:4c:2f:
         2e:09:37:5f:0f:93:01:70:a8:51:82:5e:78:f2:b5:10:d6:0c:
         6a:12:79:dc:4c:c9:a1:51:56:25:46:01:18:31:2a:c3:2d:30:
         44:12:7c:82:2d:01:62:93:c0:fc:82:24:b5:c3:f2:9e:9a:64:
         93:a6:09:a9:1b:53:63:91:f1:8c:72:a4:32:36:91:9e:67:41:
         e4:5f:88:32:8e:3c:53:aa:eb:5f:17:16:81:2a:63:e9:cd:86:
         eb:b3:6b:65:0a:3c:35:91:c5:5d:61:cd:e5:3e:0c:b9:de:1c:
         43:00:e6:d2:f0:24:27:7c:e5:6d:2c:33:e7:fe:0f:d1:f5:b7:
         6e:80:8f:e1:49:45:6c:40:b8:a0:cd:3f:ea:cc:2a:d1:cc:a1:
         27:5c:e9:e9:8b:2a:ce:01:ea:c5:6a:4e:65:86:68:5d:07:7e:
         7b:65:1e:b4:46:13:9c:07:eb:07:6f:c2:01:91:40:a4:f2:03:
         5a:40:3b:f4:f7:a1:06:0b:05:74:b1:a7:dc:66:36:39:84:13:
         1f:6c:a4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:49:40 2024 by rpki-client on console-fra.rpki-client.org