Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/9e14c3a0-69d3-3777-bed5-c7cdf9344cfa.roa
File:                     9e14c3a0-69d3-3777-bed5-c7cdf9344cfa.roa (raw, json)
Hash identifier:          Bxx8rkmpLGIb1ffq+WJYoWCDyIAgqjOTBaCNNKpFREI=
Subject key identifier:   F0:CF:DF:20:5E:C7:13:EF:2E:5A:50:9C:2B:BA:2C:4E:DE:5B:86:7B
Certificate issuer:       /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial:       010D0C9F432858473A5B8E22008E2066793ACB00
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/9e14c3a0-69d3-3777-bed5-c7cdf9344cfa.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     22438
IP address blocks:        68.168.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8e:22:00:8e:20:66:79:3a:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=ba491f28-2efb-47e1-9b5f-cafc28bf4c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:ad:d6:58:12:09:53:d8:28:46:c6:00:f4:
                    e4:68:af:df:41:20:a4:ce:d3:cc:3c:7f:fc:6e:57:
                    b1:4f:e8:41:1e:b6:b5:4f:42:10:f8:94:87:4d:d4:
                    4d:1f:1b:0c:f3:c2:19:12:e7:cc:c8:e8:21:87:3a:
                    90:96:8f:35:dc:78:17:3d:c0:be:dc:ba:ee:1d:35:
                    37:14:b1:0b:97:3c:c2:99:cb:0e:2c:18:91:12:1c:
                    e0:a7:bd:53:74:7d:5a:9f:89:0f:e1:f4:11:23:be:
                    12:12:9c:9b:93:9f:00:4f:70:e4:f8:14:b8:30:56:
                    94:02:21:94:0c:16:ae:52:bd:9d:1c:1e:f8:18:b5:
                    c8:37:6a:b8:b1:36:81:a8:ad:11:fe:4b:fa:41:83:
                    84:c0:be:fe:7d:07:88:15:2b:37:43:bc:f4:d7:a9:
                    9e:cb:8b:f3:45:3b:04:b6:4d:33:cb:eb:9d:c3:9f:
                    9e:c7:e2:b3:05:c4:36:f7:9f:e8:87:98:2d:73:70:
                    22:e0:44:d9:f0:d9:83:ae:30:ec:60:78:36:86:b6:
                    d4:d4:7b:1b:a2:00:9b:9f:d2:ec:15:0e:c8:bb:08:
                    db:e4:e9:52:8d:d1:5b:fd:ca:5e:0f:2c:48:2c:6d:
                    db:2b:12:13:18:67:11:39:b0:c8:83:88:c9:86:5b:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CF:DF:20:5E:C7:13:EF:2E:5A:50:9C:2B:BA:2C:4E:DE:5B:86:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/9e14c3a0-69d3-3777-bed5-c7cdf9344cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:92:7d:bc:36:4d:ff:89:70:7a:d3:73:7f:c4:d1:13:43:90:
         05:90:fd:96:f1:7b:84:f6:65:08:83:69:9f:22:3b:ed:6b:c4:
         89:19:4e:13:27:a7:8e:49:e0:5e:c5:76:54:97:9c:2e:c1:95:
         e5:49:52:6c:9f:e5:b4:d4:65:6b:74:e5:0c:3e:e1:db:c9:8f:
         b8:fe:dc:23:3d:de:14:d6:89:6d:b1:4b:29:7b:f3:38:f1:d3:
         ae:7b:7e:03:68:b2:9a:85:66:5b:55:a4:ee:08:35:20:e9:72:
         e8:4e:11:21:20:ba:69:ac:c6:e4:a5:70:f5:4e:97:18:38:09:
         a1:cf:05:5a:6b:d4:75:db:bc:27:57:35:9b:fa:3e:9b:33:0a:
         e3:0f:c6:80:87:1e:75:48:25:35:10:2c:60:8d:05:2e:0a:93:
         aa:75:51:85:c5:9b:8f:6d:10:59:d2:fe:d6:2b:90:73:69:6b:
         19:54:2b:55:42:10:45:47:aa:62:83:16:82:37:91:fd:6c:3b:
         7f:9a:0b:f4:57:5c:9b:9f:e5:5b:41:26:6f:9c:bb:cf:5f:a4:
         05:43:b0:ae:2b:23:de:9d:65:ce:df:ca:95:a4:14:9e:50:48:
         ff:5b:4d:14:35:18:f0:ab:ae:a9:b4:41:75:55:aa:90:21:95:
         11:f6:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:02 2024 by rpki-client on console-fra.rpki-client.org