Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c63cc93-fe54-37d1-a271-186691495c59.roa
File:                     5c63cc93-fe54-37d1-a271-186691495c59.roa (raw, json)
Hash identifier:          cL//qfIZZiuNWlP9r3fyl9aP/z7xdfR7FJmB+MS1Rx8=
Subject key identifier:   D3:93:3E:B3:9E:44:8B:E2:68:32:C4:B8:9B:00:20:A6:BA:8B:08:09
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC28DFE7B0E25256F3BB98
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c63cc93-fe54-37d1-a271-186691495c59.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33491
IP address blocks:        68.85.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:28:df:e7:b0:e2:52:56:f3:bb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=0463b293-0b78-4b1f-a107-e18ca0757664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:41:34:34:9e:93:a6:30:6d:6b:ea:75:f2:
                    72:a5:92:e7:37:83:59:d9:a3:37:ad:42:f1:ce:e1:
                    14:46:20:04:a6:4c:73:c9:37:64:b9:3c:90:86:53:
                    47:f6:00:23:d7:35:d3:87:1f:4d:39:8a:ac:1c:67:
                    b0:a1:f6:b1:92:18:e5:34:71:9b:0d:f6:9f:61:5c:
                    98:70:59:29:25:89:20:b9:5c:c8:af:e4:6c:20:93:
                    10:1b:35:3e:ae:7d:25:6a:2e:6b:d9:6b:a6:3f:83:
                    42:46:11:a5:f1:16:76:22:62:0c:41:fe:52:fd:6f:
                    b9:e4:47:b6:4d:87:0f:87:54:f0:bf:d2:ee:14:01:
                    4a:e5:32:2c:31:ce:e1:dd:dc:21:43:7a:16:27:72:
                    ed:69:d0:a7:34:6b:88:9e:a1:3f:e4:ac:46:74:6b:
                    e3:d7:eb:ae:6e:59:ea:c5:4a:ea:fa:7f:a7:51:27:
                    97:c3:48:29:b1:a6:95:8b:20:ef:ec:4c:08:e3:6d:
                    9d:a1:91:7d:14:13:6e:99:be:1d:55:7c:8d:f9:e0:
                    7f:fa:d9:f2:a3:5a:e2:7a:b3:c4:bb:67:7e:91:10:
                    b6:a5:98:3e:d2:e2:b5:6b:af:e5:a8:05:43:c9:a0:
                    c0:2b:25:d9:45:83:9e:84:f5:8b:bc:1f:49:71:a6:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:93:3E:B3:9E:44:8B:E2:68:32:C4:B8:9B:00:20:A6:BA:8B:08:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c63cc93-fe54-37d1-a271-186691495c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:ec:ac:3a:00:7c:00:97:da:97:eb:1c:fd:17:6c:31:a7:
         02:7f:ce:d3:91:ca:a0:9e:c8:a2:e5:c1:f9:a3:ee:d6:68:d7:
         65:b0:67:a0:b0:d7:bc:51:80:a1:d4:22:16:73:28:20:bc:e7:
         b8:f9:86:cc:fc:9f:a9:72:99:fe:13:5e:d1:28:17:d5:eb:95:
         2f:62:4a:77:e1:b9:f7:d0:dc:e7:ca:99:5c:d9:2f:c8:46:99:
         31:92:c5:98:a9:ed:ef:19:42:65:55:8e:c4:c7:bf:c1:3c:24:
         dc:7d:fe:6e:d5:6a:c9:a5:39:53:7a:ea:0f:ca:af:6d:0b:b5:
         36:55:59:a7:81:5e:9d:37:5e:f0:a1:20:17:7e:d8:e3:65:87:
         82:28:ee:b1:7b:fe:ea:10:f2:be:13:44:17:ba:b2:57:10:a7:
         24:07:48:6f:49:b6:cf:16:56:d3:ef:d7:a2:09:5f:0e:76:44:
         d9:9f:58:ee:5b:42:10:f2:bc:43:27:04:d1:e1:e1:70:e4:11:
         a6:39:d4:48:0a:11:f8:51:fc:78:ad:43:94:87:0a:bf:6c:09:
         60:a9:d0:5a:b0:58:33:df:86:e7:a3:2c:86:b6:d0:c6:84:da:
         78:1e:41:86:73:8f:3c:89:5b:e7:ce:0d:d3:07:66:56:a0:18:
         fc:f9:b6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:39:30 2024 by rpki-client on console-fra.rpki-client.org