Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa
File:                     aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa (raw, json)
Hash identifier:          9iw+FJo66PieyH7uaPdiWUQ1uHdat9pZ4SsY97uU2f0=
Subject key identifier:   86:39:AC:E9:A8:21:6E:72:67:31:63:94:6A:BD:02:E9:CD:A7:17:26
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285846275ED8A59E168101B13E99E0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa
Signing time:             Sun 09 Jun 2024 13:00:34 +0000
ROA not before:           Sun 09 Jun 2024 13:00:34 +0000
ROA not after:            Sat 07 Sep 2024 13:00:34 +0000
asID:                     64267
IP address blocks:        68.234.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:27:5e:d8:a5:9e:16:81:01:b1:3e:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  9 13:00:34 2024 GMT
            Not After : Sep  7 13:00:34 2024 GMT
        Subject: CN=2bb7bb3c-eec0-4f08-b415-cb97dbc3dac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:90:d3:cc:49:31:3d:b4:03:98:a0:d9:98:
                    f8:9f:f6:e9:50:b3:c8:86:0e:6c:f7:aa:ca:1d:e7:
                    dc:e2:ee:9a:59:b9:d7:1d:b3:40:9c:52:b8:4e:ed:
                    ac:f4:72:e5:df:34:dd:af:27:2f:d6:cb:4e:ee:a8:
                    8e:70:fb:75:fd:fa:8b:09:bd:78:a8:83:c6:c7:18:
                    24:f7:5b:c3:fa:6f:c3:3f:fb:6b:90:c8:35:b3:b0:
                    6d:4a:71:67:10:c4:05:e6:de:58:73:e3:3c:c3:f0:
                    a8:c9:05:b2:7b:ea:47:4a:c4:2f:88:48:ce:99:54:
                    c5:7e:6b:81:e8:d5:ad:bc:4d:00:48:cd:13:8c:12:
                    d0:e9:9c:cc:83:51:8d:1a:8c:85:06:dc:e1:18:d2:
                    68:42:c9:44:24:60:29:2c:25:88:33:96:68:6e:68:
                    69:54:7b:27:44:6b:e0:45:9c:3a:ec:20:8e:92:4d:
                    93:fb:8a:5a:a3:db:48:1a:30:80:98:a1:cc:2a:20:
                    42:70:c4:52:2a:c7:9d:e0:50:18:c1:b0:1b:84:38:
                    97:69:1b:f1:45:4f:7f:54:bc:bc:99:d2:98:aa:b2:
                    8b:b6:af:c7:f7:12:7a:73:48:f0:d8:3c:51:da:74:
                    f1:eb:93:eb:3d:34:a8:b4:36:58:eb:0a:d8:e1:50:
                    fc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:39:AC:E9:A8:21:6E:72:67:31:63:94:6A:BD:02:E9:CD:A7:17:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:43:47:c1:4e:64:77:d0:c1:ae:46:8d:45:7c:d5:c6:ab:de:
         ce:cf:49:91:e5:1c:d3:40:5a:06:9e:69:a4:aa:9c:ad:e4:73:
         f9:94:b6:c2:24:03:61:67:c9:ea:19:96:22:62:ee:6e:a6:20:
         45:7f:d9:9a:da:c6:d8:92:f1:4d:26:bc:cd:0a:08:c1:85:f0:
         b2:ce:57:53:c5:42:db:a8:9b:7a:09:c2:7e:a2:6c:97:5a:71:
         b6:7d:97:eb:81:ac:df:94:e1:db:34:f4:e8:b5:10:0c:ca:de:
         8f:70:3f:2b:d9:70:ad:da:e0:f2:92:0f:21:9c:e5:bc:29:52:
         88:d5:62:07:8d:1a:53:1f:3e:c7:9c:41:b6:fe:32:3a:69:12:
         44:07:2b:28:93:76:a0:ca:4b:67:fc:64:96:c1:04:59:ea:d4:
         2e:5b:b8:f2:29:7c:ed:2c:95:5f:e9:6e:90:ae:9d:f1:cf:82:
         de:47:7f:57:ea:8b:23:ce:df:89:e9:f1:09:eb:5a:99:ae:e7:
         9d:d2:dd:42:2a:d7:cf:b0:c1:d1:33:31:51:50:5c:82:fc:e4:
         b9:3b:8b:79:21:94:66:c5:d6:6e:1c:a0:da:5b:98:e6:3a:c3:
         ff:9e:d3:2c:e6:52:b9:1d:c5:0a:a8:8c:5f:41:2c:4b:b1:70:
         94:37:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 16:07:49 2024 by rpki-client on console-fra.rpki-client.org