Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa
File:                     9b513f9d-f758-3993-b0d1-85f2305add2d.roa (raw, json)
Hash identifier:          Z2x+62ipC/Ll9YsRPb2YJ4YT+YMShm0QYMZz6DjWdNY=
Subject key identifier:   85:65:49:B0:23:16:92:11:A7:F0:9E:A9:65:A4:8A:18:10:67:46:37
Certificate issuer:       /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
Certificate serial:       010D0C9F43285845E57110B566228A2A28D39980
Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa
Signing time:             Thu 16 May 2024 22:14:00 +0000
ROA not before:           Thu 16 May 2024 22:14:00 +0000
ROA not after:            Wed 14 Aug 2024 22:14:00 +0000
asID:                     53486
IP address blocks:        68.71.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e5:71:10:b5:66:22:8a:2a:28:d3:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
        Validity
            Not Before: May 16 22:14:00 2024 GMT
            Not After : Aug 14 22:14:00 2024 GMT
        Subject: CN=62d8053b-c9bd-4ccd-962a-6e2454202f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ef:40:12:39:5e:52:92:ce:0e:10:23:a2:63:
                    fb:27:91:e4:ce:f1:72:5f:ea:21:67:f2:f6:bc:f0:
                    ab:d1:a0:75:59:ad:0d:5f:dd:b1:9c:bf:1c:65:cc:
                    73:a4:ac:5b:01:ec:d8:00:3b:f4:1b:0a:c5:61:37:
                    41:76:93:62:ab:9a:c5:31:14:a6:e7:1a:dc:98:66:
                    cc:43:2f:03:44:80:f4:eb:d1:3c:98:53:0a:00:1c:
                    40:09:16:9a:01:d5:f7:cc:3c:43:97:3d:ed:91:3e:
                    ca:79:5c:ce:39:1d:51:94:ba:b0:c2:eb:d2:24:f0:
                    2c:7d:b7:47:91:01:aa:92:f2:2d:94:78:b9:b6:f5:
                    95:6f:a8:22:53:06:10:d4:38:3f:18:48:1e:27:09:
                    8c:64:ec:6e:30:4b:c0:83:dd:cd:56:96:d9:b8:db:
                    57:ec:df:5b:76:6b:18:15:15:7e:9b:92:a3:49:24:
                    e5:c0:f2:17:fb:97:b5:45:3e:e5:f4:0f:a3:01:4a:
                    93:21:b5:fa:ec:49:d1:3e:09:2b:b5:b9:c0:17:68:
                    2e:99:fc:96:8a:ab:b7:f7:1d:0e:6d:78:23:1c:c4:
                    93:cb:94:68:4a:e7:18:02:bd:2c:92:52:4e:05:89:
                    1a:9b:58:e4:d7:83:fe:0d:90:f9:12:80:4e:5d:be:
                    a7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:65:49:B0:23:16:92:11:A7:F0:9E:A9:65:A4:8A:18:10:67:46:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:dc:93:40:1c:31:16:fc:ae:42:cf:23:8b:30:6d:eb:53:96:
         59:0c:82:e7:eb:5b:25:3e:0b:8c:26:89:a2:fd:64:f4:56:60:
         9f:6e:63:fa:eb:ee:ac:f7:92:82:97:b1:a4:23:98:ab:6a:2c:
         04:ce:ce:ca:de:a0:58:4d:d1:c6:da:70:0b:69:88:f7:84:81:
         64:88:bc:48:95:c9:d1:8b:a5:2a:d5:41:92:cc:ef:4c:3f:14:
         6a:c5:56:de:8c:fb:2b:cb:e7:9d:66:2f:26:d0:4d:2c:94:de:
         d5:cb:67:fc:d3:ef:91:35:b0:fe:36:e9:f4:c5:7c:b6:bd:8b:
         24:d5:82:7d:b5:d9:d1:fe:48:b1:c5:64:f6:df:08:be:fa:ac:
         f9:93:d6:9e:4c:5e:84:11:1b:aa:3a:56:26:a3:0e:2c:bc:0f:
         16:af:d3:16:43:6d:df:b0:e8:23:5c:26:0a:c4:0b:63:88:ee:
         1c:f2:2f:25:72:39:f6:59:96:ff:bd:8f:d0:01:7f:cc:4f:a5:
         aa:7a:2c:24:7d:83:5a:2b:65:08:a1:54:90:53:8b:89:cd:ca:
         1a:79:a0:dc:4f:4f:fc:53:e4:77:33:8e:c5:7d:76:5c:ce:16:
         89:81:8c:19:3d:08:1f:ba:8f:e8:a0:37:3e:5b:ac:8e:c7:e5:
         e0:1f:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:36:58 2024 by rpki-client on console-fra.rpki-client.org