Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa
File:                     08bf3928-b054-3129-9d08-db2f618766b2.roa (raw, json)
Hash identifier:          9RFqisPoamBIEP1eO31VvpiQiVu8OmGsQ8m+0UrrIjg=
Subject key identifier:   80:2F:D7:37:59:5B:58:56:5B:54:35:33:6E:37:F0:E2:C6:61:88:2E
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285847BEF6D23EBE531866988C3CC0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     14061
IP address blocks:        138.68.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:d2:3e:be:53:18:66:98:8c:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=1a2ae718-6f9d-4d71-80ca-99a22ddd9eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:93:0c:ba:eb:f4:dc:b5:d3:4f:e8:0f:6f:06:
                    5e:a2:55:63:21:17:08:a8:7e:1b:41:ee:16:21:65:
                    28:73:d8:ab:32:d7:c1:ed:c0:11:59:a8:19:ed:39:
                    1f:1f:79:d2:6e:5b:e9:d2:2a:59:d9:2b:2f:c3:cc:
                    c2:5a:9b:a1:95:8d:e6:0a:a4:90:9d:13:0e:08:58:
                    bb:32:6f:10:40:16:c8:0b:aa:1f:fb:a7:bf:93:59:
                    1e:99:77:e9:fa:64:fa:3f:3d:0e:da:68:9f:85:0b:
                    ad:03:6b:0d:83:ae:90:c0:df:3f:e6:63:bc:6b:d0:
                    1e:1b:2f:fc:3f:70:5e:74:93:68:05:9b:cd:9c:ba:
                    35:cb:49:3a:ce:fe:af:5c:7e:b3:7b:28:b3:52:d4:
                    8a:d1:d3:d1:04:dd:e8:5d:90:54:ac:cc:8b:8c:c5:
                    25:6d:0f:62:e5:bb:9f:2e:b9:20:90:f9:fd:2d:a7:
                    32:3c:c3:e1:8d:09:7f:4f:8d:a8:01:f8:ff:96:90:
                    ea:db:b8:c6:79:d8:f5:70:cd:44:ec:48:1f:9b:11:
                    88:8f:1d:02:bd:94:b6:4c:60:a9:d1:4f:6f:10:fd:
                    d8:17:b5:03:84:f4:97:ef:45:8c:7e:80:31:e5:54:
                    ed:c8:bf:c9:0b:7c:75:9c:ee:d4:06:42:42:c5:65:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2F:D7:37:59:5B:58:56:5B:54:35:33:6E:37:F0:E2:C6:61:88:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c5:b2:3a:d5:9b:a9:49:26:08:9d:87:d4:cb:69:51:3b:91:
         9a:bf:3e:70:06:45:30:b5:a1:14:0f:c6:26:97:e6:7e:db:ef:
         2a:46:c3:b4:ec:db:be:2b:7e:38:96:e0:10:b6:58:f1:2e:16:
         e9:ac:21:1a:5c:c8:08:04:39:a4:55:e2:9a:07:b1:b9:b8:82:
         97:fb:be:7e:7b:9e:11:0e:09:a7:5c:00:7f:b1:bc:53:72:77:
         57:fc:a4:57:63:93:26:e5:ee:72:31:f0:5e:bb:e4:fb:05:ef:
         46:4a:af:59:46:1b:85:ee:76:c9:34:9e:ba:cf:c8:e7:50:24:
         a1:0a:45:65:99:dc:ed:d0:8a:04:06:af:b3:43:ed:ad:cf:82:
         a4:7a:48:23:a0:13:63:96:1b:78:d6:86:c8:08:40:39:47:5f:
         0c:96:9f:15:7c:07:ff:34:b1:8a:67:a8:aa:86:d6:c4:92:dd:
         54:90:6a:8e:39:3d:03:56:ba:02:97:1c:15:f4:9f:c3:cc:af:
         56:f6:6f:88:39:f6:c0:c4:1e:96:56:35:9d:8a:fe:f2:e4:50:
         81:04:bb:ff:1e:8c:fd:67:c5:84:49:96:d3:4c:22:87:f2:0c:
         9f:50:db:78:de:a8:89:1e:a2:c3:e8:f1:1d:01:8f:34:e9:48:
         98:ea:1f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:53 2024 by rpki-client on console-fra.rpki-client.org