Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17deadf0-5891-37be-adc8-39104b9f7aaf.roa
File:                     17deadf0-5891-37be-adc8-39104b9f7aaf.roa (raw, json)
Hash identifier:          CoJAmly1Anrud5ZofLbWcoyO8O2wqPc3Ipx3hLH8nvU=
Subject key identifier:   43:2A:95:72:C6:A3:03:AA:03:06:35:4C:9C:A7:A5:74:07:08:E9:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847CFD4B6B100C98A1568303680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17deadf0-5891-37be-adc8-39104b9f7aaf.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     33654
IP address blocks:        68.85.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:b6:b1:00:c9:8a:15:68:30:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=1d078983-1406-413d-91c6-b325a7e66cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:25:14:0e:72:e1:92:f2:99:7a:9e:58:be:
                    f6:9e:c2:35:54:a4:57:40:6f:9b:79:52:a0:f2:dd:
                    36:48:57:5a:0c:a5:5b:88:a9:92:80:47:3e:28:a9:
                    31:7f:cf:8d:d7:9e:08:9a:09:ab:b3:b6:aa:3f:d6:
                    81:b1:d5:c2:ef:e5:cd:e6:00:6f:8f:a7:98:bf:58:
                    7e:8a:b1:9b:90:71:95:12:70:c0:e6:a8:96:32:ea:
                    53:c4:9b:6d:d8:c2:21:ec:00:e5:d2:f4:30:21:5c:
                    eb:cb:aa:ff:9c:cd:7b:6f:16:9b:1d:05:ac:35:a4:
                    a9:06:2e:da:0d:f8:97:14:ad:c1:fc:f3:19:ae:af:
                    45:30:f7:97:d9:4e:b9:d1:7f:eb:c8:61:b4:6a:eb:
                    59:8f:65:48:a9:e4:4d:66:24:cd:b1:1f:ce:dc:40:
                    cf:3d:12:b5:2f:5a:ff:77:53:b3:fb:4d:20:92:54:
                    39:df:ce:d0:6b:b9:53:15:d3:ec:15:7b:41:f6:68:
                    a3:ec:81:41:ad:46:df:6a:f7:52:65:d0:e4:cb:23:
                    02:66:52:ea:3d:2a:36:5d:af:81:1b:1f:39:d7:8a:
                    02:76:3d:1d:b5:77:95:0f:14:0c:21:ca:9a:52:76:
                    06:44:ee:ba:32:13:4f:db:ee:1a:3f:e5:7f:69:4e:
                    b9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2A:95:72:C6:A3:03:AA:03:06:35:4C:9C:A7:A5:74:07:08:E9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17deadf0-5891-37be-adc8-39104b9f7aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:2f:6c:d8:ab:14:8e:3a:96:bf:25:c9:ca:be:87:65:39:32:
         33:dc:e9:60:a1:c2:f0:9e:42:8e:7e:ef:3e:3b:1c:08:43:19:
         04:89:04:b3:b2:28:0d:74:16:2b:50:c4:b1:df:7c:70:cd:29:
         10:a9:2b:8b:4e:8e:ae:4b:98:c7:59:1d:32:7b:94:a6:20:a7:
         2a:36:f2:cb:5a:76:49:c8:a0:6c:0b:73:4c:0f:ad:f1:19:9c:
         5f:87:35:d6:b2:de:08:0f:0e:db:c4:e1:86:41:bb:a1:23:93:
         83:e3:93:16:67:3d:22:82:87:81:17:66:f5:13:90:94:a9:c0:
         be:df:71:d4:75:fb:4a:c8:e5:e6:91:a5:30:6e:78:53:fd:cb:
         0e:bb:37:46:aa:7c:8f:f7:fd:be:49:c7:ee:89:a1:34:83:4f:
         fe:fd:ac:5a:9b:1e:3d:ee:dc:7e:24:25:a9:dd:1f:e7:03:61:
         df:bd:62:b7:41:b2:fa:6f:eb:c9:5d:bf:37:7f:7f:ed:fe:31:
         9f:71:90:6a:86:02:75:fe:2b:6f:3e:b8:82:dd:73:2e:1f:e5:
         31:e8:4a:c1:ac:e1:19:16:fb:75:dc:0e:4f:20:83:b6:6c:e6:
         75:38:dc:f4:89:a7:1f:a7:33:37:a8:71:47:d6:5b:b5:32:cf:
         a0:c0:90:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:53:46 2024 by rpki-client on console-ams.rpki-client.org