Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/fbe0054f-c4aa-35a8-a7bf-dfbeb61f629e.roa
File:                     fbe0054f-c4aa-35a8-a7bf-dfbeb61f629e.roa (raw, json)
Hash identifier:          XFpTZS5Oyg/lQKBtHFYLwQGLV0SlgOHiht3KJngFO04=
Subject key identifier:   46:37:20:10:A8:3F:C5:ED:A0:E8:A0:7D:5B:93:D8:F6:72:3F:31:D6
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F43285845AF536CE9D3DC0FF2DFF89F00
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/fbe0054f-c4aa-35a8-a7bf-dfbeb61f629e.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     26506
IP address blocks:        68.142.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:6c:e9:d3:dc:0f:f2:df:f8:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=dfafff54-e9fc-438d-905f-bc2dc236601e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:05:be:0a:be:67:b4:7b:62:cd:73:8b:47:
                    f6:3d:eb:07:8d:00:f6:e3:09:b2:47:b9:bb:6d:5e:
                    47:9b:0f:79:e9:f0:b6:a8:97:cd:a6:ce:ca:47:be:
                    04:ae:a0:33:2f:f5:fa:61:c9:49:47:d0:35:11:b2:
                    a4:ed:57:87:1a:dd:12:90:d7:e0:bb:88:13:e3:49:
                    7f:f1:df:79:8b:fc:d3:7e:5f:7f:e0:2c:01:f8:6c:
                    19:3b:78:af:3c:bc:b2:e4:e6:bc:d2:5f:ea:e5:90:
                    d3:e0:a5:83:68:74:11:d1:58:68:ee:e6:58:4e:aa:
                    c9:bf:93:18:c4:f4:3b:73:7e:eb:1f:61:6e:ba:b7:
                    82:1f:aa:8d:46:c6:e3:c9:65:60:4d:3e:3b:07:36:
                    2c:28:13:b7:bc:03:a4:dc:34:80:17:84:b4:43:fc:
                    b4:19:a2:b6:4e:84:48:96:f4:d7:12:5c:7a:ce:2c:
                    39:3c:47:a7:64:ff:8a:c3:3c:f1:9f:33:2d:f0:b7:
                    12:4d:d0:56:ae:8f:a0:9d:14:33:a1:0b:49:dd:13:
                    51:83:7f:45:b0:d0:9a:8a:a9:c8:bf:ed:7a:62:13:
                    be:47:4e:a6:bc:c4:4d:e3:17:be:78:8e:5d:0f:86:
                    82:52:aa:a0:78:90:d8:9d:c6:45:1c:be:4e:7d:11:
                    dd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:37:20:10:A8:3F:C5:ED:A0:E8:A0:7D:5B:93:D8:F6:72:3F:31:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/fbe0054f-c4aa-35a8-a7bf-dfbeb61f629e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:36:3c:9c:29:6c:85:0e:7f:72:7c:9c:a2:63:d7:99:bd:8b:
         c6:49:1c:18:c3:38:f4:e7:4a:90:10:95:43:34:88:62:4d:29:
         46:87:c6:30:b9:5a:44:29:a2:ee:f2:d4:89:60:9b:f0:b8:d6:
         e7:94:df:6e:f9:5b:49:40:59:f8:a4:31:26:a9:02:e3:32:6b:
         94:9a:ea:66:79:49:71:f5:7d:39:5c:05:3e:1e:7a:9f:4e:c5:
         bd:d8:ba:d9:60:2f:f8:1c:21:92:b1:13:21:6b:01:b0:48:cb:
         f0:d0:47:45:d1:93:8e:54:bf:cf:28:c4:cf:a2:20:1b:1c:a1:
         11:1b:c6:dd:46:94:a9:2b:5f:55:3a:7a:05:3a:37:a2:f0:c5:
         ff:ce:a3:96:5e:96:14:b6:7c:82:73:0d:02:16:89:af:36:dc:
         f4:ec:17:9d:d8:69:db:f7:ec:b0:32:2c:40:f3:ef:d6:18:d2:
         26:f5:cc:ed:26:9b:63:77:e3:f3:86:aa:e1:dd:31:25:6a:e4:
         62:83:23:48:8e:e2:af:e8:5e:ce:f0:5d:bc:e4:f9:0d:06:13:
         2f:e3:40:ab:32:66:37:69:61:be:ed:06:ab:5c:f5:f8:8f:07:
         8e:95:6b:21:e5:39:ba:59:3b:4a:83:d2:61:9f:af:29:32:42:
         65:8e:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:35:28 2024 by rpki-client on console-fra.rpki-client.org