Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b5bd003-9ec4-3e0f-a7c3-98514a76ef51.roa
File:                     0b5bd003-9ec4-3e0f-a7c3-98514a76ef51.roa (raw, json)
Hash identifier:          2Km6N2zewj+4KAGRw+eEvqm4Ahefr549DKgRRbbeDo4=
Subject key identifier:   C4:6B:DB:F8:0C:85:CF:75:6C:11:DA:8B:92:B0:89:5E:B9:E0:23:0F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C77C2457E414E9702A3480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b5bd003-9ec4-3e0f-a7c3-98514a76ef51.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.34.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:7c:24:57:e4:14:e9:70:2a:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=c21005b2-19db-4c00-bf33-a413e9d61cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:b3:21:a4:83:c8:ac:cd:5f:35:25:59:80:
                    45:cc:96:b9:94:e1:17:de:d8:47:82:be:74:11:f0:
                    05:61:61:9b:fc:50:43:fc:42:db:36:0c:29:62:a5:
                    95:f1:02:38:ea:92:23:e9:b3:1d:1d:8f:74:fb:c2:
                    5f:cd:a4:49:a0:74:15:16:70:5e:d6:94:4c:d6:eb:
                    de:bf:c8:db:a6:66:4f:7c:f8:9f:2a:3e:6f:b3:bd:
                    6e:01:8b:1b:f9:8f:52:c4:53:e1:e6:5a:04:c0:46:
                    35:e0:61:6d:63:74:48:e4:34:c0:87:9e:0f:e8:1f:
                    77:b7:7e:70:b3:72:ec:a0:d7:4a:7e:c5:18:36:38:
                    f6:fe:2e:11:a5:87:e8:bc:50:4d:c3:82:62:b6:bc:
                    44:1f:3c:84:37:fc:32:48:65:ba:36:5f:42:1a:37:
                    a8:80:bd:90:99:28:9a:ea:9c:ec:7f:e5:6c:fc:3d:
                    53:e4:28:f1:31:3a:ef:2a:c1:d2:65:86:47:5f:08:
                    89:15:12:a4:52:eb:af:87:0f:a5:11:08:40:71:ec:
                    50:5c:a1:da:0b:3a:a6:9b:d2:82:55:67:f7:33:90:
                    0c:65:94:14:62:3b:17:da:41:51:95:8b:35:8c:1a:
                    65:78:14:25:ed:df:96:c0:81:b7:28:ca:3c:c0:2b:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6B:DB:F8:0C:85:CF:75:6C:11:DA:8B:92:B0:89:5E:B9:E0:23:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b5bd003-9ec4-3e0f-a7c3-98514a76ef51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:e6:c1:13:76:4c:6c:bc:f1:60:12:2e:be:1c:4e:a9:f0:
         79:69:ae:7d:2e:52:e4:85:52:68:3c:d6:a6:68:43:a8:bf:01:
         2b:8a:a4:00:6a:a6:4a:6b:be:29:7d:ed:18:9f:60:f4:da:e6:
         50:d9:9c:a4:43:b2:27:a7:64:99:33:29:87:29:55:11:7e:9b:
         5a:4a:a7:0c:b0:4e:04:3a:5a:89:11:83:de:f4:70:1b:04:6b:
         7b:3b:13:d1:c5:91:93:13:f5:6e:f1:e9:30:e7:16:ff:ba:b8:
         56:cf:83:03:e3:70:5a:1d:5f:00:97:1d:d2:6c:7b:4c:aa:b0:
         0c:f3:c2:84:17:a4:24:d1:f8:9d:3f:49:19:65:cd:47:80:16:
         96:27:af:35:b8:53:19:5c:ec:16:1f:5a:76:e5:bc:75:c9:62:
         22:6b:87:3b:4f:cf:0e:a5:b6:fd:2e:36:a3:cc:f2:a6:2b:b2:
         3c:2f:08:89:bf:c7:54:8b:26:21:05:81:ef:50:46:1b:45:60:
         9e:48:ad:61:c5:fe:8c:ff:e2:75:de:e9:b9:7a:e4:a2:94:94:
         af:e2:03:37:96:81:51:25:e7:3b:20:70:f5:76:24:5b:73:b9:
         70:dd:f3:fd:bd:a5:4c:82:54:c4:81:8c:40:91:be:17:36:0c:
         89:e8:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:57:45 2024 by rpki-client on console-ams.rpki-client.org