Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7337cf82-d1df-3dfc-bc63-8f9d2d2ba191.roa
File:                     7337cf82-d1df-3dfc-bc63-8f9d2d2ba191.roa (raw, json)
Hash identifier:          ztHO1tJpgyOpYxTiR3GM/eDrk8no4DWvLqWmvod/Obs=
Subject key identifier:   EB:FD:12:2E:CE:32:B5:38:70:25:FB:15:94:4A:B9:55:63:76:69:85
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285845AF53687C4B5513190D1B2000
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7337cf82-d1df-3dfc-bc63-8f9d2d2ba191.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     1239
IP address blocks:        68.67.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:68:7c:4b:55:13:19:0d:1b:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=78e499d0-97e2-48f7-9945-b2d04075922a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:29:bf:df:dc:61:70:d2:25:82:d5:4d:f5:
                    32:23:69:6b:2b:3a:a0:94:bd:6b:2a:27:84:ea:11:
                    d6:0d:22:b5:a5:33:c1:17:62:40:57:a3:a3:57:57:
                    a5:0e:db:89:67:0f:3f:d2:4c:6f:6d:03:b0:e3:0e:
                    96:d3:f7:4a:6f:e1:45:b7:d8:53:ec:59:c8:35:e9:
                    31:ef:99:15:07:7a:47:bc:d9:b8:76:38:46:87:93:
                    b8:46:a6:6a:22:a2:9e:4d:87:cb:00:17:77:8a:53:
                    fa:b1:02:04:71:65:95:ac:59:6c:d2:3f:30:f1:81:
                    03:07:b5:ef:2f:83:4a:b9:46:f6:a0:ac:dd:d8:cc:
                    87:a1:c7:6a:c9:c8:37:9e:4f:ef:a4:9c:b9:49:2e:
                    4e:36:ff:66:c0:83:1f:71:4a:dc:a0:27:b7:41:45:
                    b4:9d:a7:5d:8f:ad:4c:27:2e:cc:4f:56:d0:e0:6f:
                    79:c9:7a:43:2c:ef:1b:30:ff:0d:37:28:80:1d:b7:
                    22:ec:ce:cc:b3:c5:20:76:2d:2c:34:f5:1c:cf:f9:
                    a2:b8:41:45:bd:8c:a0:a1:38:b6:e4:80:9d:24:93:
                    db:d8:f5:e0:10:26:3b:f3:a8:2b:49:51:a4:39:15:
                    5c:50:70:03:7a:53:f0:cb:76:7b:4a:fd:f9:d2:58:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FD:12:2E:CE:32:B5:38:70:25:FB:15:94:4A:B9:55:63:76:69:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7337cf82-d1df-3dfc-bc63-8f9d2d2ba191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:cf:f2:c8:21:60:3d:57:04:c8:ad:40:ea:f7:71:2f:5d:8d:
         ab:fc:94:4f:34:db:5b:a1:41:7b:96:a7:fd:85:bc:9b:7c:97:
         f5:79:b5:1c:b5:f1:cd:e2:7d:dc:77:6c:54:fb:15:15:e8:1a:
         0c:94:72:dd:1e:eb:cc:8c:16:85:42:48:4d:79:99:5a:1e:b8:
         b2:07:7f:3e:38:18:dc:e4:5c:2b:77:fc:98:7a:0a:2a:41:7e:
         d3:ef:1c:3d:c9:91:3f:62:63:0d:f7:07:97:f8:a4:01:1e:44:
         25:4f:c3:22:0a:a0:7e:18:47:8b:b1:94:7a:14:7c:f9:c0:09:
         f3:69:68:81:46:60:a8:01:fe:f8:02:e2:c0:ac:ac:84:66:79:
         74:56:d7:df:f6:8e:46:f3:1d:ba:7b:52:4d:7b:30:fa:fb:77:
         26:b7:e9:7e:13:2d:c2:8d:53:ee:f8:3c:1e:07:97:ff:a2:54:
         62:d0:bf:ec:e4:18:05:23:03:39:a0:9c:02:62:34:8b:9e:05:
         41:15:96:e4:5f:03:f7:96:32:63:43:78:44:7b:2c:fe:0e:2f:
         ce:d6:1b:d0:f9:bb:c2:58:45:bd:42:b0:2d:2f:28:f8:9f:f8:
         f1:e6:5e:7e:a5:04:0e:c1:99:7c:20:66:54:de:5b:13:ab:1b:
         df:92:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:10:12 2024 by rpki-client on console-fra.rpki-client.org