Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa
File:                     eb314902-c439-3a6d-b09b-293e9d9bacc7.roa (raw, json)
Hash identifier:          sCPr1ARdoOIUiUGnBMu58dys86GGK2XND/H7DInV6Ik=
Subject key identifier:   AD:92:70:AA:7A:F5:BE:08:2E:D5:E7:29:50:34:81:8B:44:66:C6:A9
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F432858455A2D84C9439370869BB870C0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     834
IP address blocks:        68.67.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:84:c9:43:93:70:86:9b:b8:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=55bb38d5-3617-4f65-af29-70017f5cf1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5f:6b:48:6f:59:ad:11:d4:ac:91:f1:a5:6c:
                    e8:9f:c4:1d:e2:31:74:2e:ce:6d:d0:82:c6:c2:e3:
                    ec:3b:93:ac:ac:41:c4:1b:d9:32:65:60:b5:83:96:
                    15:4b:48:fa:20:39:d0:e5:b0:31:b5:b2:95:b2:aa:
                    fc:25:1e:e1:5e:f3:5d:0a:5d:13:b3:7a:98:24:1c:
                    cb:55:64:c4:69:cc:df:6c:ab:be:dd:97:dc:ba:70:
                    cf:3c:79:f4:82:a8:df:2e:01:0a:f9:65:8a:21:e0:
                    dc:d0:22:6a:6d:f0:29:0e:6f:f7:df:5d:56:0f:20:
                    3a:c3:1f:fa:ab:d2:66:b6:35:23:f2:30:30:28:3a:
                    40:db:de:fd:2e:90:46:33:cf:a8:77:e6:6e:8d:97:
                    ba:65:90:4d:91:a3:0a:73:de:f4:83:85:7c:61:80:
                    b4:1c:08:ce:ed:08:83:71:9e:11:80:48:01:2c:39:
                    a7:e6:b8:68:72:85:5f:59:3c:38:42:7e:4d:9b:af:
                    a8:c9:43:a5:c3:df:35:59:2c:72:0a:0a:ce:20:40:
                    e4:db:04:5a:a6:9c:a4:40:eb:50:d4:2c:b0:4c:4e:
                    be:2a:6a:4f:24:9b:02:bf:45:3c:83:4a:8e:db:76:
                    9e:18:ad:d8:aa:70:fb:c1:bd:83:d3:d1:c8:be:a0:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:92:70:AA:7A:F5:BE:08:2E:D5:E7:29:50:34:81:8B:44:66:C6:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:0b:06:5b:9d:09:6b:5f:61:e5:cb:a9:2f:1e:df:21:49:35:
         73:26:b2:bc:2e:2f:3b:bd:54:79:a5:d0:13:e2:0b:51:ae:4d:
         67:85:d2:a6:84:e6:c9:2b:c5:f1:27:44:b1:07:eb:84:7f:18:
         ae:3c:05:33:da:1d:7a:70:d9:d2:78:c0:5c:f4:dc:99:31:c8:
         13:3e:b6:f5:7a:ec:37:bd:0a:ae:81:39:6c:b6:02:87:42:b9:
         76:9f:72:ec:3a:47:20:39:6c:4d:a0:1a:fc:00:df:9b:e4:40:
         99:2e:5f:38:ea:71:ab:c8:c8:30:b1:bb:a8:08:c1:b8:cc:6b:
         c3:fc:86:27:39:63:dd:c7:8e:a2:4c:1b:a0:87:a4:c8:6d:1f:
         03:0f:9a:f8:7a:4e:7b:20:9c:ee:3f:21:89:e0:5d:cb:1b:e4:
         50:bf:a1:c2:c9:f3:83:7e:49:2c:b9:b0:7c:3e:f2:78:44:a8:
         b3:89:c0:5f:7e:dc:ac:13:99:9f:90:df:1d:ef:9d:50:f3:eb:
         6d:f9:8e:46:16:2c:e9:f2:66:ea:2c:7c:5e:b8:ac:66:05:0c:
         9f:cf:41:b7:39:58:b8:69:d2:87:02:b4:6f:76:6d:d8:49:82:
         2f:e2:db:f6:e5:39:7f:b4:00:4d:26:b7:5b:86:2b:1a:90:b2:
         7b:e9:8e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:56 2024 by rpki-client on console-fra.rpki-client.org