Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa
File:                     ebce2800-71e6-302f-a9a7-77ba35072652.roa (raw, json)
Hash identifier:          y+7kBmV1EZcXFNyI4NPsMd8WAy2jZGRjwEZ34cV0OCA=
Subject key identifier:   07:A2:8D:FA:5C:E8:DE:AB:DB:C1:42:1C:2B:67:C1:26:5D:C2:89:C5
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F43285847B3CC08E75AE39E1A2B3EB810
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     15267
IP address blocks:        68.69.224.0/19 maxlen: 19
                          68.69.224.0/20 maxlen: 20
                          68.69.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:08:e7:5a:e3:9e:1a:2b:3e:b8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=141f123b-afcd-4dd9-a717-580e5268a17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:31:f0:5d:fd:82:ac:15:f5:ac:08:47:de:
                    85:fc:d3:86:0b:0d:c5:23:77:f0:51:c0:b7:9c:e8:
                    42:fd:ad:75:0e:f4:96:cf:3e:c2:a9:37:5b:4c:7a:
                    01:68:2b:20:4d:4f:26:90:c9:f9:ae:b3:a0:40:84:
                    b9:fa:9d:0b:1d:9d:ed:72:31:d9:8d:94:d7:84:90:
                    92:66:18:19:70:9b:51:48:0f:2f:2c:89:f2:5f:6d:
                    ab:24:9c:8a:63:7f:d5:4b:79:49:7c:ce:41:ec:40:
                    43:9c:56:66:0b:8e:52:34:7e:61:a6:c5:88:ca:7d:
                    40:26:11:d2:1c:ae:37:77:11:a3:83:e7:c2:61:55:
                    88:ec:ab:64:a0:33:af:3e:8b:72:f8:0c:fa:1d:50:
                    2e:6a:70:af:8a:db:44:00:00:a5:8a:7b:a2:1c:68:
                    b5:18:92:6e:c6:60:da:2d:be:d1:2a:a5:00:e5:a3:
                    dc:45:3b:c9:39:93:1c:a3:61:11:9f:78:ce:9e:26:
                    a2:b1:06:9c:c7:40:50:d5:f9:db:69:f4:c7:21:b2:
                    cd:c6:d9:aa:2d:25:c9:6d:56:c6:59:3f:02:e2:41:
                    8f:2e:09:78:3c:46:b7:0c:7f:7f:36:8a:eb:95:36:
                    76:c0:f1:2e:07:06:ec:74:e4:35:8c:6f:d8:e9:88:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A2:8D:FA:5C:E8:DE:AB:DB:C1:42:1C:2B:67:C1:26:5D:C2:89:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:4b:1f:56:2e:4d:fd:0a:08:1b:9f:5c:d7:c4:ad:2b:f4:
         57:cd:b7:77:2d:76:9b:96:e0:cd:79:04:66:94:66:ae:b1:fd:
         ff:a0:55:15:d4:21:8a:b4:bd:5a:09:e6:d5:36:e5:5c:f3:6c:
         5e:02:a5:2a:7c:50:27:71:74:ab:72:1f:9a:ee:b2:8b:72:95:
         47:db:9a:b2:f0:4b:87:3f:30:08:76:e9:19:0c:33:da:81:95:
         90:d5:a7:b2:b3:96:59:fb:04:01:58:44:f8:29:0f:d3:0b:e7:
         62:56:c7:37:6c:c5:e2:81:91:e8:b3:31:9a:51:8b:f3:36:f5:
         7b:c0:cc:bf:e2:3b:19:2a:43:af:24:37:fc:da:47:f3:41:6e:
         7d:39:5f:c0:5d:65:bb:b9:24:3c:2a:ad:38:83:8a:31:a8:e9:
         62:aa:d1:75:b4:99:36:12:e2:27:c8:5b:14:c9:2a:40:b8:f6:
         2d:44:cb:bb:d4:1c:e6:79:bd:de:bc:27:cd:10:52:cd:09:62:
         72:4e:0e:be:13:cc:7e:b3:f1:6e:b2:7c:3d:e3:94:a1:00:b1:
         f4:6f:0a:20:5c:4e:8e:ca:e2:71:ac:3c:8e:6c:d9:0b:dd:86:
         9b:bb:1f:4c:16:7b:10:64:53:6c:f6:81:23:5b:5b:7f:cd:d8:
         35:2f:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org