Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19ce7062-b312-3445-864c-6fc5ecedc107.roa
File:                     19ce7062-b312-3445-864c-6fc5ecedc107.roa (raw, json)
Hash identifier:          H2YiwpkSKjHPYV4RzibMeFN+YfC9Zn1a6mkRIhCC2Fc=
Subject key identifier:   A3:3C:6C:E8:2A:B2:05:E6:AF:F5:9E:15:9A:04:0B:DA:22:30:92:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BD49EB25C1FA626AF3248
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19ce7062-b312-3445-864c-6fc5ecedc107.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        68.44.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:d4:9e:b2:5c:1f:a6:26:af:32:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=84745e68-02cc-471e-b442-cc552492f353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d9:95:5c:c3:84:ed:a9:2a:8a:51:64:a2:16:
                    a1:64:cb:de:39:71:2c:59:1c:01:23:15:ae:17:6a:
                    2f:3d:64:80:72:6d:d6:14:38:4b:bd:dc:32:42:67:
                    60:50:66:eb:6a:4f:48:83:11:da:5c:68:56:04:4f:
                    43:08:d6:a9:09:73:b3:e0:1f:fe:11:0d:ca:d0:61:
                    5d:33:24:25:cc:18:a5:6b:ca:21:27:e2:71:c4:01:
                    39:fe:07:9f:41:9b:ba:90:37:18:c7:6f:f4:f5:01:
                    d5:03:c2:83:52:67:fc:2c:59:4e:7d:ea:c8:4d:69:
                    3c:04:92:a5:d9:87:5f:9e:72:a3:28:f1:2b:9b:cc:
                    0d:a8:ab:f9:63:3f:d0:15:19:31:a5:bd:bb:c7:b2:
                    04:37:55:74:8b:e4:75:26:97:3f:60:34:75:47:92:
                    63:32:44:28:e5:dd:63:d5:fa:04:b3:99:fe:64:e5:
                    07:67:be:c0:a3:79:a0:2b:6d:92:17:23:b0:88:e6:
                    da:d4:6e:c4:00:2c:a7:19:35:7b:f4:3a:40:58:e1:
                    d1:85:0d:eb:bd:ac:bf:19:2a:cd:14:6f:ac:27:49:
                    12:0e:9b:04:69:7a:41:86:f3:76:ba:f0:cd:15:17:
                    2a:d7:0a:e3:b4:07:78:32:c1:2b:95:06:d5:25:2e:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3C:6C:E8:2A:B2:05:E6:AF:F5:9E:15:9A:04:0B:DA:22:30:92:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19ce7062-b312-3445-864c-6fc5ecedc107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.44.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:25:4f:f8:50:cc:ce:3e:6f:b9:56:0b:c6:6b:dd:f7:e5:36:
         56:92:46:68:80:42:0c:04:5b:4e:52:1e:a7:3e:2d:b6:ba:b7:
         97:1e:f4:d1:a5:d4:88:38:b8:bc:35:54:ce:2f:af:58:27:42:
         4f:ee:de:47:bf:e8:eb:2a:e6:48:31:87:ef:41:e2:c0:83:0e:
         75:50:d8:7e:89:4f:09:ed:53:6f:06:be:8f:7e:fa:95:d1:ab:
         a3:fd:d1:ea:49:72:c4:a9:b7:b7:30:97:d7:3b:89:e1:89:1a:
         ba:62:bb:9b:cb:b5:e1:30:f5:18:d1:eb:9a:e1:da:24:d3:8b:
         e2:77:2b:3d:2e:ba:ab:e3:a9:3f:1f:51:20:77:36:10:c7:7b:
         c5:29:e7:33:4c:cb:a1:50:32:b5:82:6c:2c:4a:1f:84:fe:17:
         6f:e3:4a:e5:3a:ca:73:1a:2f:92:a7:0b:60:6d:af:43:bb:d3:
         f1:dc:78:74:fb:75:50:60:10:8b:66:17:aa:67:e2:c1:8a:15:
         a0:12:f8:f2:bd:7a:3f:37:ef:f3:65:9b:64:c5:be:75:30:b6:
         82:a6:ee:76:40:13:07:de:30:c9:de:99:13:17:4b:f4:22:37:
         7b:bc:3a:e8:00:80:dd:26:ee:19:5c:59:14:5c:86:c0:f6:38:
         08:8b:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:54:03 2024 by rpki-client on console-ams.rpki-client.org