Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f565052-6fb7-344c-a078-74109cb6e7b0.roa
File:                     3f565052-6fb7-344c-a078-74109cb6e7b0.roa (raw, json)
Hash identifier:          /eiVer81fIAShE5bytcv3zpgA8m6PYyUOvKDKPwG6DQ=
Subject key identifier:   9A:F7:98:90:16:04:63:D7:55:D6:39:33:99:7A:2B:C4:3F:39:F3:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF75B0960BD5624C171EBB6
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f565052-6fb7-344c-a078-74109cb6e7b0.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33650
IP address blocks:        68.86.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:5b:09:60:bd:56:24:c1:71:eb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=7798158f-2873-4edd-81d9-b5b3c0de3df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:9e:c2:5e:f8:f5:44:15:1b:1d:7f:f0:10:
                    fb:33:c5:d3:03:81:68:89:72:cc:76:e5:cd:76:f5:
                    aa:c5:3e:db:b6:fc:ff:07:47:87:16:22:ad:e5:3d:
                    64:f2:85:26:5e:b9:a0:a7:72:2a:3e:92:55:05:e7:
                    19:36:53:96:7d:7f:f3:36:99:fe:aa:60:c3:5d:fc:
                    ef:04:62:01:b6:f8:33:84:3c:7e:a2:48:2e:82:ee:
                    ce:af:e2:63:c7:d5:9b:ae:c4:37:74:86:1a:e9:9f:
                    71:1e:8d:fa:0d:70:87:a8:29:44:5f:c4:71:f8:d4:
                    31:71:28:c4:3c:f6:67:70:18:42:f7:02:7e:b9:ee:
                    90:1d:e4:b9:c1:b6:80:ee:ae:d4:0b:3e:8c:10:00:
                    5b:a7:fd:6c:6d:b2:5e:a8:ed:54:34:5c:11:6b:7b:
                    54:28:31:fb:d7:e2:81:d2:f3:91:c9:8f:ad:1d:54:
                    22:84:92:a0:df:04:34:bb:6c:c9:ef:33:e0:41:70:
                    c5:ac:a5:c0:aa:e6:c2:81:49:32:d1:01:f1:8e:60:
                    7c:8d:e5:a2:f2:41:d3:b5:fb:c0:4a:49:31:2f:36:
                    bd:68:ad:c9:b7:25:d6:d9:67:09:95:a1:7e:ab:d0:
                    7f:70:61:fb:48:27:8b:ab:0c:f4:ae:32:40:fd:67:
                    0a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F7:98:90:16:04:63:D7:55:D6:39:33:99:7A:2B:C4:3F:39:F3:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f565052-6fb7-344c-a078-74109cb6e7b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:36:68:25:bb:48:a7:65:1f:50:75:f9:2b:e8:8b:65:87:c8:
         8a:5b:cd:5b:ad:1e:6e:ae:29:15:fe:9a:4a:4c:49:c3:2b:1f:
         fb:24:b9:60:dc:cd:4b:d0:63:e6:33:34:ec:7e:95:c0:87:ac:
         7c:0c:39:d6:a8:f3:3d:67:7a:2d:64:d5:5d:04:7e:08:d5:32:
         3b:7b:e1:e8:a8:9b:5f:ae:a3:f8:69:d4:95:1b:88:64:06:fa:
         c1:5e:f4:56:d7:5f:c5:90:f3:35:8d:fe:32:f1:36:db:9d:6e:
         57:62:e6:33:dc:21:d2:15:34:b2:af:78:93:8e:32:d4:85:33:
         c2:c8:0c:3e:a5:74:0c:63:e3:cf:ff:5e:b9:c2:95:cb:80:f1:
         a7:d9:0b:19:9c:fd:89:f2:30:f0:e6:f8:91:3f:a4:65:83:17:
         c1:16:b1:22:d0:4d:2d:c9:e0:80:70:27:de:63:e4:37:92:ba:
         b3:f2:20:50:f8:c9:ae:80:63:38:7b:2b:5e:e7:34:62:5d:55:
         28:bc:6f:c1:b5:82:52:90:49:63:c0:c2:21:9a:7a:c5:30:d0:
         af:e1:4f:a1:6c:c2:5a:b1:c6:35:05:01:16:39:91:16:b5:8b:
         c5:6c:ec:8a:64:23:3f:36:0e:66:57:78:d3:c3:88:6a:9f:7f:
         a7:0b:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:07:38 2024 by rpki-client on console-fra.rpki-client.org