Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3982866b-c6fd-3314-b36b-54ad29a0c4e7.roa
File:                     3982866b-c6fd-3314-b36b-54ad29a0c4e7.roa (raw, json)
Hash identifier:          ZvYm+Wj6WpWQuTX1jo9XTqlcKXZCEqwvuJreIwfLnfk=
Subject key identifier:   09:F2:EC:4A:37:AC:2A:17:76:A1:15:FF:42:62:39:FA:4E:81:B5:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C77CEF0BCDA9E9D1E03338
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3982866b-c6fd-3314-b36b-54ad29a0c4e7.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.34.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:7c:ef:0b:cd:a9:e9:d1:e0:33:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=3de780f4-b2b5-43bf-a921-307c930c99bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:22:e3:14:ca:fa:49:fd:bd:31:da:58:04:
                    47:1d:47:45:24:c8:93:71:0a:15:ef:29:2c:73:7c:
                    59:23:47:7e:90:4d:3a:0d:10:04:a1:b0:5a:d1:4c:
                    30:d0:9b:f3:ce:72:3b:77:18:c1:cf:bd:d5:6b:ed:
                    07:93:9c:11:2a:53:b2:8c:6d:5f:c6:97:ab:9d:70:
                    ea:d9:17:5a:dd:b6:2d:80:28:bc:57:61:bd:15:57:
                    e2:a1:41:0e:8f:55:a7:53:ed:a3:ab:2a:3e:8e:b2:
                    0a:6a:d9:10:b8:21:32:47:bd:b2:f3:ac:4b:a3:e1:
                    fe:7e:f8:31:b0:40:87:38:a2:02:4e:1a:fd:e2:75:
                    44:4f:82:50:2b:33:5d:65:da:01:27:a9:8c:94:2f:
                    f6:68:01:59:a8:b1:a4:8a:90:af:69:89:eb:d1:02:
                    0b:23:f4:17:ea:14:0f:57:3d:2f:0b:02:8a:89:63:
                    02:ce:98:91:2a:98:df:b6:a9:c9:23:e1:db:6e:b4:
                    11:6f:ab:d3:7c:f6:c4:a1:f7:14:a1:b5:c1:fb:31:
                    73:dd:10:18:d2:78:88:ec:00:48:e4:93:b8:ff:12:
                    b2:82:1b:b8:48:c5:14:d5:52:b2:e2:85:59:b9:d6:
                    e9:58:ae:6c:b9:0e:e2:f1:ed:12:b9:68:3d:38:66:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F2:EC:4A:37:AC:2A:17:76:A1:15:FF:42:62:39:FA:4E:81:B5:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3982866b-c6fd-3314-b36b-54ad29a0c4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ef:a0:a1:1d:d2:eb:df:24:28:4b:11:0d:05:f7:cc:01:e0:
         cc:c9:56:6a:6a:4e:df:5b:6c:07:32:8b:0a:4d:3d:ee:be:1e:
         79:55:dd:4e:d2:69:1f:02:d8:1f:4b:67:30:a4:7a:ef:72:d8:
         ce:e8:25:28:ed:1c:a2:da:a8:f3:53:84:14:74:6f:64:a3:e7:
         05:cc:28:7e:e0:ac:9d:1e:8d:ac:ea:27:a9:b9:b0:c4:b4:fc:
         31:dd:9b:59:fb:b3:a1:db:8b:78:8f:8c:e4:22:45:89:2c:f3:
         ff:58:31:b3:15:71:2c:35:ad:52:13:83:f2:39:ef:bb:db:ff:
         b4:04:31:87:c2:55:61:a5:78:e8:a1:c6:83:17:94:b0:a2:ac:
         ef:73:fb:d0:d1:b3:0a:a0:14:89:d6:c6:27:92:f4:06:2b:e2:
         eb:ba:f7:6d:92:13:a1:47:aa:6d:e9:f3:d4:99:e8:89:48:0e:
         4f:8e:7f:31:3f:81:91:10:0a:5f:bc:31:1f:8e:2c:45:36:76:
         a3:12:df:de:20:a2:f6:b2:2b:23:dd:ea:a7:77:12:71:9c:30:
         96:09:d0:49:7a:b2:6f:5b:87:b8:27:a7:ff:f6:06:74:fe:75:
         a6:52:fb:5d:ba:d4:25:15:f5:11:7a:48:61:4c:7d:07:02:00:
         bb:b7:b2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:01:15 2024 by rpki-client on console-ams.rpki-client.org