Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c34c5a-161d-3801-8f3b-a3e982013b6b.roa
File:                     60c34c5a-161d-3801-8f3b-a3e982013b6b.roa (raw, json)
Hash identifier:          V7IeFEhetjCCGiWL4ca/RtHNXId5rQaVwML6rjvp3EU=
Subject key identifier:   9F:30:2C:46:1E:A6:F4:F3:BD:B0:32:5F:24:1B:90:4A:D6:B4:E0:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF6E073BBD949372AC68B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c34c5a-161d-3801-8f3b-a3e982013b6b.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        68.47.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:e0:73:bb:d9:49:37:2a:c6:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=f8dbdee2-46d2-4791-8368-d6e918cf850d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:44:95:eb:a9:ea:d3:e9:e9:7b:e5:c0:d2:
                    84:1b:4f:90:54:88:da:67:4f:68:cb:93:3c:2a:cb:
                    65:37:64:90:dd:68:fd:1a:b9:33:ea:86:7c:a8:fa:
                    9c:4b:33:b4:d9:d6:99:31:de:a1:fb:f0:c6:87:86:
                    42:54:ec:0d:cd:dc:1d:bf:88:7a:28:81:f3:a1:5c:
                    33:fe:b0:ac:60:cf:eb:d0:40:66:f4:8f:98:b5:80:
                    f9:d2:b4:a0:80:3b:ac:86:07:0a:66:eb:fa:3a:69:
                    d4:f8:ab:fc:22:af:4c:a3:ff:09:ce:7e:b0:12:e1:
                    2f:27:4f:93:00:4c:14:57:92:9e:0f:21:aa:ea:d6:
                    0d:b9:7a:81:87:a1:46:58:2d:38:8a:30:16:6b:a3:
                    9d:bf:51:2d:69:8a:68:29:17:c5:c7:ea:31:3f:14:
                    b0:9c:c5:5d:ae:cb:a3:2b:2e:d7:fd:27:36:89:34:
                    e1:3c:9e:f8:b6:d9:00:f1:00:7f:c6:d8:7f:5a:de:
                    61:45:39:e9:b5:a9:7b:73:50:73:0a:75:f6:39:36:
                    21:a9:71:be:f0:3b:3b:ef:0f:f7:92:83:10:2c:64:
                    f5:c2:41:96:94:3f:a8:98:72:c7:32:46:48:c1:87:
                    a7:5f:82:60:93:ab:b6:e6:20:c3:c9:ab:af:a2:3d:
                    c5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:30:2C:46:1E:A6:F4:F3:BD:B0:32:5F:24:1B:90:4A:D6:B4:E0:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c34c5a-161d-3801-8f3b-a3e982013b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4e:df:a8:b2:bb:8f:39:34:06:7d:ee:34:22:00:0c:5b:06:
         8b:d8:0a:03:12:83:43:bc:09:65:df:5f:3e:d9:90:94:20:38:
         80:a6:ab:fc:0b:37:69:eb:1a:50:4b:a9:7d:50:16:46:a5:a0:
         84:f0:28:ae:90:ef:3e:fb:a5:18:db:8b:f8:14:df:9b:de:ed:
         d2:6c:6a:45:21:3f:dd:40:17:78:d3:8b:a1:06:d1:72:7a:8d:
         0c:33:34:7f:fb:30:de:99:c2:3e:79:59:0b:bf:09:a2:26:66:
         50:44:ea:25:f1:87:fe:48:6d:03:bb:4b:7f:44:a6:74:f1:69:
         ba:06:6c:82:40:bc:c9:42:51:ae:0c:de:88:c1:a4:a7:30:4c:
         ab:fb:3c:b1:ea:00:ca:98:0d:4c:2d:a0:ea:a2:8a:46:70:1a:
         31:20:5d:3a:84:cd:e4:dc:54:d0:db:06:44:bd:78:8d:c1:09:
         b4:94:dc:a4:02:63:9b:1e:e2:d2:72:2d:f4:3c:92:21:4b:58:
         df:de:7a:45:ed:d4:20:0f:47:7d:fa:e7:2b:c5:27:46:78:17:
         96:a8:cb:6d:5e:b2:89:60:01:be:b1:a8:3b:92:04:a7:39:64:
         0e:87:64:58:87:85:16:8a:e7:f1:f9:bf:9a:ab:94:91:76:1e:
         3f:73:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:00:31 2024 by rpki-client on console-ams.rpki-client.org