Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/a6a1c456-f3c1-3ef8-a926-e55881541742.roa
File:                     a6a1c456-f3c1-3ef8-a926-e55881541742.roa (raw, json)
Hash identifier:          /n0sW6T/dD9rDX14rifxrR05MqLnyvgf3knzo/MpwyE=
Subject key identifier:   10:16:25:87:D7:4B:DC:8C:09:11:F1:C8:B4:05:D2:38:68:17:F0:46
Certificate issuer:       /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
Certificate serial:       010D0C9F432858453CDD5D2F720E4BE06BA07840
Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/a6a1c456-f3c1-3ef8-a926-e55881541742.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     25830
IP address blocks:        68.234.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:5d:2f:72:0e:4b:e0:6b:a0:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=347ecda1-07f3-48e0-8ee6-eafa76c8e1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:17:1f:2e:94:f6:dd:f7:ac:42:65:13:cf:
                    98:7e:d7:a3:d0:e7:21:1e:bc:46:4f:7f:8f:41:6f:
                    19:75:26:d1:16:a8:db:9e:cf:e1:f2:83:f0:20:e5:
                    2f:00:f7:e4:07:9f:2c:66:e0:a7:18:0b:11:c0:ec:
                    be:c7:bd:ea:2c:f1:f4:fb:df:40:64:9f:c4:bb:69:
                    94:3f:39:61:6d:8d:8e:e3:d6:09:71:7d:72:d2:02:
                    b3:69:c7:c6:33:ba:c4:e6:58:e1:3e:91:16:52:01:
                    10:81:ea:35:79:c6:8c:bb:05:da:e5:8d:b8:a1:34:
                    7c:ec:07:fe:a7:42:d6:1c:bf:fd:06:24:17:67:39:
                    56:ea:3b:9b:39:77:cc:45:b5:1b:c8:29:40:76:70:
                    23:af:fc:9d:6a:10:0b:3a:8d:7d:41:00:e4:1e:60:
                    61:b1:9d:1f:6d:23:72:49:dd:86:dd:71:f4:8e:2b:
                    ed:c3:bb:8e:32:e3:09:92:57:9c:f7:9d:68:1d:e3:
                    21:15:74:5e:ee:9f:e7:ed:ee:1f:21:8e:d9:c8:63:
                    73:5c:24:75:fe:2d:03:79:bc:42:59:65:63:dc:84:
                    ad:9c:f0:75:66:17:1c:a8:f3:5f:11:61:5b:ec:4d:
                    3c:ac:98:02:1d:0d:17:e8:20:c2:46:fa:d8:68:c2:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:16:25:87:D7:4B:DC:8C:09:11:F1:C8:B4:05:D2:38:68:17:F0:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/a6a1c456-f3c1-3ef8-a926-e55881541742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl

            X509v3 Authority Key Identifier:
                keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:38:bd:6c:cf:b6:54:7e:ad:cb:4a:71:ac:6d:f3:73:12:
         aa:a6:ad:fb:e1:9e:d0:6b:50:25:8b:2e:bf:d9:22:6e:41:b2:
         d8:21:00:d0:1f:2b:cf:14:a4:0b:c4:f6:ab:58:3a:d9:d5:59:
         92:e9:31:0b:a4:13:92:05:a0:84:43:34:83:3e:68:ab:08:dc:
         85:a1:8c:5f:17:d8:9f:bd:d0:9b:aa:51:14:bd:04:f8:51:08:
         2d:56:53:0d:ec:bb:de:a3:0c:19:16:dc:87:b3:a7:d3:43:1d:
         8f:1d:10:09:3f:42:d0:66:90:ad:31:86:32:1a:9f:e3:1d:37:
         56:0e:69:f2:d6:d8:76:72:8f:e6:43:5d:5b:0b:23:d9:62:8f:
         25:ff:42:48:54:b4:0a:75:ca:4a:4f:3f:d1:6b:8a:8a:cc:81:
         75:f1:e2:93:95:5a:c2:fd:76:6d:7d:94:18:bd:72:6c:ee:e5:
         fa:9e:f2:76:7f:40:3f:53:e1:af:a6:79:4a:57:f6:d6:cc:68:
         a0:09:1e:61:de:58:19:0c:12:5b:1b:51:ba:19:40:e4:c3:26:
         1c:39:e5:24:db:43:f8:2d:31:18:9c:37:7c:91:56:ed:2a:54:
         8a:60:f0:69:b2:6a:00:c5:93:4f:3f:41:04:1f:86:af:57:4f:
         36:6b:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:34 2024 by rpki-client on console-fra.rpki-client.org