Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c1e3688-f438-3b4f-98fd-95af9275766d.roa
File:                     0c1e3688-f438-3b4f-98fd-95af9275766d.roa (raw, json)
Hash identifier:          igqQ7Ae3cpO5QqJRUFLai9fbJTAQZNjCVh3EMYVDsos=
Subject key identifier:   76:44:BD:43:32:BE:EC:C2:FA:16:63:D2:94:AD:3D:69:4A:F7:F2:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7A1F3884F9EFB3F412CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c1e3688-f438-3b4f-98fd-95af9275766d.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.51.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:a1:f3:88:4f:9e:fb:3f:41:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=b218a195-c15a-4290-b2a8-e309fa80f76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4e:5f:f3:83:a9:c4:24:f0:1e:60:5e:22:2f:
                    c7:e4:22:76:8e:11:b3:72:7b:c3:2f:47:ab:24:10:
                    99:01:b3:06:6a:58:32:0b:84:80:aa:5f:08:8a:26:
                    55:ab:f2:4d:72:0f:d2:dc:8d:b8:89:38:67:44:09:
                    e1:85:c0:cf:65:21:df:82:87:13:d8:7b:5e:92:6e:
                    c1:54:f8:35:47:41:1d:99:39:56:c5:85:3f:e3:3c:
                    b2:36:e1:cf:93:3f:61:8f:00:24:50:48:6e:a4:89:
                    14:cc:24:be:d1:e5:1f:eb:5c:62:13:36:c1:0c:a7:
                    84:a6:58:12:74:ed:c0:d4:78:86:eb:86:3c:ff:54:
                    15:90:84:97:31:03:8e:78:54:20:ec:03:80:91:75:
                    92:e5:f3:21:b4:dc:75:be:3c:ac:c3:ac:19:2d:51:
                    65:64:ed:84:cf:7c:d7:91:ad:c7:54:ee:d2:3c:6a:
                    1d:ea:de:37:f6:fa:39:a9:09:cd:b7:2c:93:c2:d6:
                    8e:6a:ff:07:02:8b:33:76:b2:ba:0a:5c:f9:78:86:
                    6e:20:45:d6:68:7a:5c:af:0d:30:8f:8c:e0:5a:d1:
                    c1:ee:e3:3d:f0:5d:7f:24:d0:62:c2:c2:78:f6:3d:
                    bc:7e:05:56:2a:1f:0b:3e:2d:fa:af:5f:91:c7:99:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:44:BD:43:32:BE:EC:C2:FA:16:63:D2:94:AD:3D:69:4A:F7:F2:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c1e3688-f438-3b4f-98fd-95af9275766d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.51.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:33:b0:7c:7c:ca:cd:e7:a8:e9:e0:41:4d:91:0b:a3:e8:cc:
         6a:e1:5e:47:a6:5c:c0:90:eb:23:d9:14:96:27:16:28:6e:36:
         35:a9:89:d5:a7:98:e9:74:e4:f9:5c:04:32:51:28:ae:79:56:
         a2:80:ef:5f:0a:0c:e8:51:7a:d7:99:ea:67:32:e7:44:23:9f:
         96:57:56:66:88:e9:1b:80:bb:28:6d:66:8d:5e:46:ab:87:2f:
         7c:d9:f8:07:97:2d:5f:c7:2d:24:5e:bc:b9:89:1e:a8:0b:ca:
         a2:fc:4d:f1:02:56:84:4a:2f:a8:5e:29:5b:68:5e:b4:4b:74:
         45:ed:fb:3b:ed:68:7c:59:c3:e9:ff:08:76:97:b8:38:65:62:
         44:20:4a:ba:aa:86:3c:ec:34:d3:7f:3f:9a:74:8b:3e:64:d7:
         cb:8c:b1:17:cb:8c:83:25:55:87:66:d5:e3:0b:ad:84:f6:2c:
         01:fc:a0:2f:14:77:70:43:d5:63:5d:c1:2e:5d:81:e3:b1:b7:
         e7:a3:9f:cf:28:15:56:bf:e7:79:4b:b9:f1:aa:9c:9e:fb:2e:
         fd:a9:42:ac:d1:7b:69:1c:27:58:2c:cd:ec:15:35:dd:e5:7a:
         a1:10:1c:cd:79:b8:f0:1c:c9:76:b5:d1:fb:1a:55:0b:d5:0b:
         b8:66:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:57:49 2024 by rpki-client on console-ams.rpki-client.org