Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa
File:                     ceeaa841-ed82-33d1-843a-3a411e6fee58.roa (raw, json)
Hash identifier:          gZOJu8IAjpXMeuysMneSdVoCLBA/AAFy1i0CqWPjkVE=
Subject key identifier:   45:7F:F3:B4:90:B6:6E:33:74:76:56:38:D1:82:15:A7:8F:C1:6F:EF
Certificate issuer:       /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Certificate serial:       010D0C9F43285845280AEEAF76D7F36C8CC81300
Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     394195
IP address blocks:        68.64.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:ee:af:76:d7:f3:6c:8c:c8:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=657a6768-4b9f-4da7-81e2-3737f0d65a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:42:98:cc:ad:d4:68:9f:37:8d:a2:67:26:f4:
                    93:76:1d:83:8f:5d:43:b1:9a:3f:e5:6c:db:44:8c:
                    c4:e8:99:fe:11:72:98:e9:02:e2:c1:a3:2c:d0:87:
                    46:b7:aa:ce:63:45:0c:3e:ac:80:0b:6f:f3:0e:2d:
                    3e:0a:ed:53:6a:4b:ba:35:55:0f:ef:bd:f4:01:f2:
                    e7:29:51:7d:10:2a:93:46:a5:e8:12:16:67:48:80:
                    4a:cc:70:1c:2c:eb:84:38:fc:84:86:ba:52:d0:9e:
                    47:e7:d0:c4:5e:82:d6:21:97:26:42:be:a9:e6:b6:
                    f3:3d:d9:53:d7:b6:10:fb:68:1b:5a:a3:65:77:e9:
                    b2:81:55:05:dd:f0:7f:10:39:d0:7e:df:8d:4d:7a:
                    a5:67:8e:7a:c7:bf:38:3e:e6:d0:fa:5e:9e:e6:9e:
                    90:87:18:c2:ed:ec:ab:d1:4e:eb:f7:7f:1f:2d:84:
                    64:ab:4a:aa:cc:83:3d:b9:06:12:d0:3b:70:1f:fe:
                    bc:b9:4d:18:2a:95:07:34:ae:84:bd:5e:d1:a1:6d:
                    5c:cf:8e:90:6b:12:7c:3c:90:ff:dc:3b:29:38:95:
                    09:17:28:b3:b2:2c:cd:8d:19:57:fa:80:9c:26:e4:
                    46:ce:4b:7b:1f:58:c8:86:cc:eb:69:6c:d4:ec:fe:
                    2a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7F:F3:B4:90:B6:6E:33:74:76:56:38:D1:82:15:A7:8F:C1:6F:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl

            X509v3 Authority Key Identifier:
                keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:85:91:33:52:35:07:38:44:bb:48:18:2d:3a:a1:2a:d9:ca:
         16:ee:2b:2a:50:4d:fa:c0:b2:8f:eb:e6:65:80:84:95:df:5c:
         58:72:c0:94:cb:c4:82:4a:cf:94:f1:ea:b2:3c:f3:7a:48:ff:
         e5:88:87:f5:84:3f:5a:cc:92:56:44:0e:4d:9b:9b:90:5f:d1:
         4c:e2:d1:bb:c9:f4:e4:93:f4:b5:59:d9:96:11:df:69:e9:d2:
         d4:88:b4:ef:5c:35:35:b3:6e:c3:9c:cc:54:cf:6a:37:b6:d0:
         69:9c:16:c2:2a:60:39:e5:36:68:5c:f6:fc:51:c8:53:6a:6f:
         ee:7d:2b:32:f7:4c:8d:1e:23:40:84:73:de:97:66:aa:e5:ce:
         50:a9:b8:d7:9a:d5:92:83:b4:8e:9f:32:9b:56:b1:d1:67:2c:
         2e:89:88:9f:e6:30:f0:92:41:59:4d:e4:be:e7:67:02:bf:78:
         a9:71:6f:cd:fd:94:57:a1:0e:5b:d3:64:ce:ca:05:c1:ce:c1:
         97:75:ec:84:37:c2:ba:51:d2:fd:cb:14:83:69:8b:60:06:08:
         28:27:b4:00:02:61:16:62:15:fb:d3:5c:95:13:f7:12:2b:07:
         e1:52:30:73:6c:83:a3:59:9d:b8:07:5f:13:72:49:4d:00:ba:
         8a:f9:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:56:33 2024 by rpki-client on console-fra.rpki-client.org