Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d47d34d-9c05-3bcd-854a-ea6b0b837605.roa
File:                     0d47d34d-9c05-3bcd-854a-ea6b0b837605.roa (raw, json)
Hash identifier:          Jyqw0rsVbdVDCFhVANzojJiQuSjRsvLG8R/V+p68a08=
Subject key identifier:   26:39:0B:7B:C0:EC:90:12:29:AC:80:4E:69:B1:C2:30:8B:BA:EB:39
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C788B26F422370DD2DE740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d47d34d-9c05-3bcd-854a-ea6b0b837605.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.37.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:88:b2:6f:42:23:70:dd:2d:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=a6bd774e-e3a2-4adf-90d0-9b156ee0bbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:ac:95:45:f6:d7:f8:e0:72:87:60:1c:3a:
                    a4:df:87:ca:5a:28:c3:af:40:9c:8e:8b:10:66:09:
                    6c:33:1d:d3:bd:a7:66:89:aa:66:ec:b2:46:58:3e:
                    7f:12:b3:ae:a9:83:e0:dc:22:ab:64:b5:02:5c:23:
                    95:d1:ad:32:41:a4:e2:3d:15:bc:f5:f8:d6:c9:e6:
                    98:2b:f9:eb:9f:da:d3:01:e3:2f:56:16:8f:6c:7e:
                    8b:10:d4:c4:10:a4:45:7e:2b:74:c4:3d:7b:78:80:
                    46:be:41:f8:9a:bf:4d:08:cd:c0:09:24:cd:2b:34:
                    b0:93:9c:d7:28:7c:94:9d:c2:56:ac:49:fa:e9:b3:
                    3c:91:1c:f8:42:bd:1c:51:dc:bd:3e:45:84:d7:ef:
                    07:7e:d8:95:90:20:5c:0f:08:b1:53:8d:f0:92:f5:
                    25:3b:2a:fa:c8:01:11:e9:d2:e9:7f:77:9b:3b:21:
                    07:5d:8e:1d:0c:42:a5:3e:60:36:e3:e8:8d:1e:d6:
                    b9:28:f0:23:a6:9f:6f:e2:15:1f:f5:16:26:85:78:
                    0e:00:07:2a:05:51:fd:2c:d5:d9:f6:a0:a0:6b:38:
                    29:a8:b8:55:56:ed:da:e8:63:51:c4:3e:00:1a:a8:
                    97:5c:8b:21:94:79:cc:7b:0f:0f:32:9e:89:3b:52:
                    b0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:39:0B:7B:C0:EC:90:12:29:AC:80:4E:69:B1:C2:30:8B:BA:EB:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d47d34d-9c05-3bcd-854a-ea6b0b837605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.37.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:a7:f9:57:aa:45:f1:df:2f:38:d2:35:3a:8a:1d:f1:68:f8:
         bb:59:bc:f5:53:7d:71:f8:c9:bc:b5:99:5a:d3:f7:1f:bf:23:
         1c:40:b6:e0:08:86:01:e4:c4:e3:0d:e2:01:7f:67:7c:4b:fa:
         a5:0c:30:78:95:b0:58:09:d1:83:f1:d5:6a:4e:1f:41:90:69:
         c7:e0:5e:e7:83:f4:b6:02:e5:39:c8:32:ce:70:a1:58:70:d0:
         3f:61:de:1a:c8:82:01:a9:e2:38:2f:da:82:1a:10:de:40:87:
         a1:8b:24:1e:57:f1:b1:49:64:65:be:f3:55:9a:45:69:9d:7a:
         e4:0d:3c:57:8e:c6:30:9a:f6:21:ec:f9:b0:12:5d:3d:30:39:
         6e:37:39:07:d6:f8:57:a5:18:83:d0:71:1f:04:fb:e2:a9:bc:
         5a:22:59:f6:96:10:5d:d7:4e:91:75:b1:99:4e:13:10:ee:b2:
         a5:1f:80:2e:fe:e8:65:c3:c1:f0:66:a1:37:8c:22:15:7e:08:
         50:5b:57:9c:a0:26:0f:92:71:d7:18:f8:b8:42:38:0f:c2:c2:
         86:3b:f8:85:fe:0d:8e:ff:1a:00:e8:d4:15:31:44:b6:d8:4e:
         81:50:66:6a:84:d0:38:a8:4d:f1:d8:3d:c2:c6:56:f8:5a:f6:
         9d:ca:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:41:35 2024 by rpki-client on console-fra.rpki-client.org