Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eabe96a-fa77-34c3-bc60-16f8e43bb03f.roa
File:                     2eabe96a-fa77-34c3-bc60-16f8e43bb03f.roa (raw, json)
Hash identifier:          KDkGeSLaBWB3Tm4RF3ec0s4v86fkqkjOpjquo1LtCag=
Subject key identifier:   00:68:48:BC:A7:77:B7:29:77:22:2E:F8:A5:F8:1A:3A:49:A8:26:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BD7763D9808A81CCC0780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eabe96a-fa77-34c3-bc60-16f8e43bb03f.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        68.45.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:d7:76:3d:98:08:a8:1c:cc:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=880fb744-fbfa-47f4-90d4-75fa5806bff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:96:24:1f:a5:3f:78:0c:dc:ae:54:f8:36:2f:
                    3e:b7:dc:84:9d:2b:67:a2:51:c2:bc:f5:f9:0d:68:
                    9b:6c:b8:09:c0:8d:7c:ff:8c:00:a7:6d:a7:a4:89:
                    c4:a5:b8:63:43:8d:53:d9:60:b8:fa:d3:d5:6b:ae:
                    4c:f0:70:d9:f9:39:a6:12:0e:d0:c3:20:22:16:d3:
                    fe:6f:4f:e8:d8:6c:eb:df:15:13:a6:57:ce:c8:b5:
                    b8:d1:7e:e5:93:a8:78:d0:11:b4:7d:ee:3c:38:dd:
                    30:b9:7c:c2:f4:c6:62:21:3b:b7:b1:cf:17:9f:7f:
                    dd:9d:4c:8a:81:ad:93:e0:13:3b:43:2d:16:82:52:
                    36:f6:15:43:95:99:54:94:41:2f:4f:64:06:7a:9d:
                    00:e1:72:f6:6a:b1:ce:2c:76:bd:a6:5f:18:f8:46:
                    49:91:d2:ba:94:86:a8:2c:28:d6:6b:40:f4:69:42:
                    b7:fb:89:3a:dd:4c:51:3d:b1:76:df:ec:78:07:a3:
                    e6:6d:c6:ed:18:18:b4:8c:ee:65:3f:a1:f6:b8:da:
                    72:ae:98:84:27:de:2a:90:f9:58:4a:54:40:f0:d3:
                    29:4f:74:e6:39:13:31:d4:b1:89:1a:7a:36:1f:c4:
                    fd:99:ab:78:8f:13:9c:92:5b:25:0e:84:00:8a:0b:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:68:48:BC:A7:77:B7:29:77:22:2E:F8:A5:F8:1A:3A:49:A8:26:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eabe96a-fa77-34c3-bc60-16f8e43bb03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.45.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:df:ca:90:79:75:f1:48:5c:e4:cb:c7:4c:d9:12:ab:e3:38:
         41:18:03:38:92:40:3a:e1:58:99:5c:eb:35:09:c9:e0:a9:4d:
         d9:1f:24:1c:fa:d9:dd:b8:6b:8b:40:ba:30:bc:e5:5b:95:ab:
         24:08:d8:06:b9:3a:3a:ba:93:60:56:13:12:9e:7b:ce:d8:c0:
         e9:6f:67:bf:3c:33:69:f0:e3:68:5f:a0:52:2e:9d:8c:b7:5b:
         f2:aa:47:c7:48:13:07:35:fa:67:af:a4:0b:62:32:3f:dd:20:
         00:bf:d5:6c:78:ce:66:9f:7c:21:98:49:a7:2a:50:da:be:a8:
         9a:6f:28:32:82:37:d2:45:95:c7:ee:0b:40:1b:66:11:b0:72:
         97:b2:cd:97:7f:bb:12:a9:cf:fe:e1:9b:94:0d:08:b9:9c:4c:
         7a:02:a0:ed:4f:1d:72:34:b6:f9:91:b6:51:44:d9:31:60:c9:
         86:e4:36:65:08:52:95:31:9c:68:d5:6c:07:2a:60:3c:6a:95:
         3e:67:8f:0d:f5:6a:e5:c9:e6:f5:db:a3:fd:94:1d:8f:e0:f4:
         8f:a7:17:85:2b:2b:79:2b:91:a3:61:e7:3b:81:e9:dd:7f:cb:
         20:eb:ab:83:69:f5:e6:01:bb:cc:14:75:db:ce:e7:0c:aa:74:
         e0:0d:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:04:45 2024 by rpki-client on console-fra.rpki-client.org