Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/a3f07b56-eec9-37b7-ad92-ca847a17047b.roa
File:                     a3f07b56-eec9-37b7-ad92-ca847a17047b.roa (raw, json)
Hash identifier:          9oNYAnokY6OD+9Zp2CINMItqFZFSerMMRvLbrEYx3Ik=
Subject key identifier:   CB:37:9F:F6:F3:3E:10:74:D6:93:24:12:AC:AE:02:39:4E:3C:26:31
Certificate issuer:       /CN=5402024b-7d23-4041-8713-daddd547282a
Certificate serial:       010D0C9F4328584572972CC4AAA336CFF07388B8
Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/a3f07b56-eec9-37b7-ad92-ca847a17047b.roa
Signing time:             Fri 05 Apr 2024 18:52:50 +0000
ROA not before:           Fri 05 Apr 2024 18:52:50 +0000
ROA not after:            Thu 04 Jul 2024 18:52:50 +0000
asID:                     2914
IP address blocks:        68.170.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:72:97:2c:c4:aa:a3:36:cf:f0:73:88:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5402024b-7d23-4041-8713-daddd547282a
        Validity
            Not Before: Apr  5 18:52:50 2024 GMT
            Not After : Jul  4 18:52:50 2024 GMT
        Subject: CN=9179868d-d9cf-4cfa-abc9-443380dd578f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:16:19:02:c4:f7:dc:e2:26:be:66:eb:24:
                    10:f3:62:75:6a:db:19:7e:75:59:8c:3a:0a:80:ad:
                    db:1a:2e:76:27:37:b7:4d:a2:80:c9:08:87:c8:5c:
                    41:4b:81:8e:05:8d:d0:51:72:22:db:78:6f:01:39:
                    e0:33:13:ae:af:4d:3e:6b:9f:9e:85:74:69:a5:31:
                    40:fc:f1:04:13:d9:82:3e:9e:4e:b6:b8:b0:0e:62:
                    98:01:00:00:5f:6c:50:59:f5:ad:09:12:0f:22:b9:
                    5e:7f:e4:36:65:e1:bd:fa:9a:48:79:51:c2:3c:c8:
                    94:70:93:ef:51:1c:63:21:8f:7f:d9:6b:ce:36:5d:
                    30:08:f5:4c:9c:2f:f9:8c:57:bc:ae:98:3d:03:26:
                    ca:c7:bb:d3:16:a4:ac:e3:e5:30:1e:82:d8:42:e8:
                    25:41:72:9d:08:fc:b4:07:f9:08:1a:59:46:62:50:
                    d4:ef:19:0f:7b:ce:d7:ea:55:a2:df:17:77:19:d1:
                    e7:b7:45:e4:e1:8b:50:55:46:ea:90:af:79:5a:fc:
                    1a:38:8a:06:a5:b5:10:f0:f1:01:f7:12:b3:0e:79:
                    0e:6d:c7:a4:b8:53:0b:f5:de:2e:40:41:ce:f4:9a:
                    3b:04:06:0e:44:87:e5:ca:68:38:87:75:4c:a8:e9:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:9F:F6:F3:3E:10:74:D6:93:24:12:AC:AE:02:39:4E:3C:26:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/a3f07b56-eec9-37b7-ad92-ca847a17047b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:93:07:75:a0:0f:df:69:d8:57:1e:99:a0:9c:2e:20:41:21:
         11:0d:b0:0a:2b:28:a5:62:45:6e:de:37:ed:7d:8a:c2:29:a2:
         a2:fd:cd:80:41:7b:b0:65:a4:bd:3f:86:6c:9b:a1:7b:ea:45:
         9c:86:0a:d4:ce:da:bf:bb:c1:0d:b9:01:58:99:52:1f:b9:7b:
         18:29:95:7e:74:f7:45:ab:72:f0:00:d9:d2:15:85:32:04:77:
         42:19:cb:29:50:c1:4e:88:7f:1c:22:0c:34:b4:65:6b:ec:c0:
         6a:9e:a1:f1:57:89:c3:d8:2d:33:45:76:74:13:79:62:06:1c:
         fb:83:d2:84:45:8c:48:2b:4a:2f:a3:b8:a5:74:eb:b4:7c:7b:
         8d:2f:6b:2a:3a:ce:56:af:e4:99:6a:84:7a:2c:ca:c9:17:81:
         65:1d:b1:22:34:3d:76:ea:0e:30:99:39:d8:19:d3:45:95:f6:
         70:4a:fe:5a:0c:e8:90:1e:69:2f:c9:e6:34:2d:af:6e:5b:75:
         fd:a2:45:37:35:34:8b:18:b0:11:0a:be:75:8f:7b:65:48:9e:
         c7:26:88:ae:9e:f4:9e:5a:10:89:d0:15:06:27:df:b3:78:3d:
         aa:48:ba:00:fb:40:d5:ad:77:3e:85:37:06:97:6f:06:db:8f:
         4d:55:75:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:47:39 2024 by rpki-client on console-ams.rpki-client.org