Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6143829d-03b2-3769-8988-1d7801a2fe2c.roa
File:                     6143829d-03b2-3769-8988-1d7801a2fe2c.roa (raw, json)
Hash identifier:          Hdj+5+yKyrFbL+TGoMHoiHI3+DSfEBoAYmSHCgcagzA=
Subject key identifier:   4D:75:10:3A:6E:98:FD:36:90:40:81:5C:95:05:21:5B:EF:BB:6D:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF9F1AEF29E49FCEFE91000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6143829d-03b2-3769-8988-1d7801a2fe2c.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33650
IP address blocks:        68.87.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f9:f1:ae:f2:9e:49:fc:ef:e9:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=3abc7577-4956-4699-b16d-2a03b428eff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ed:73:7e:41:5b:5f:60:a6:25:61:32:89:13:
                    65:11:65:4a:ad:08:0d:35:95:4f:9f:c9:65:c2:98:
                    e2:9d:e3:51:02:44:35:15:d8:0e:03:97:27:f0:27:
                    df:e9:65:99:f9:27:4f:02:48:c2:e3:57:69:94:52:
                    39:9e:83:f0:fd:d4:02:cf:73:47:8a:b8:fb:81:2c:
                    03:b4:6c:2a:71:4b:14:af:03:11:20:1b:2b:90:c0:
                    f8:6b:1c:6c:da:9d:45:5e:d5:8f:7c:e2:f9:37:df:
                    45:fa:9e:14:12:86:22:08:fe:03:6d:20:ba:ad:08:
                    57:84:7e:4c:87:d7:7d:0d:df:37:11:1b:d8:e2:d8:
                    44:6f:08:84:9d:0b:63:52:27:34:0b:1f:0d:c7:c5:
                    c4:fe:68:7a:41:59:33:2e:dd:7b:bc:30:fd:0d:95:
                    27:da:21:6e:b8:02:dd:1f:5d:0f:b1:2f:5c:ac:4d:
                    af:c4:c3:54:f1:9b:37:ff:5b:ac:0a:fd:f3:e8:01:
                    97:98:28:73:84:f8:d3:87:ca:29:b4:8d:b6:1b:28:
                    ef:67:2d:7b:c5:24:49:a3:79:67:26:c2:46:40:28:
                    f9:c4:9b:d3:6c:4f:48:f5:b2:9d:35:e8:4b:e0:78:
                    71:9a:74:07:79:d2:19:23:2e:fd:19:64:58:b6:4b:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:75:10:3A:6E:98:FD:36:90:40:81:5C:95:05:21:5B:EF:BB:6D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6143829d-03b2-3769-8988-1d7801a2fe2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:88:42:8a:b6:86:f3:07:b8:85:30:5d:4c:01:25:59:e7:5d:
         66:9a:9d:50:8e:a1:e9:5c:97:5b:af:51:d2:ea:15:8b:18:f7:
         6d:aa:a9:4a:a9:fb:b0:d5:38:56:80:b8:46:a6:47:a4:93:06:
         26:8d:a4:ef:ed:52:fd:ca:6f:c4:f6:f7:90:40:6f:6b:05:78:
         c8:6b:55:54:34:4e:d2:c9:58:5d:5d:38:90:7a:9f:a1:41:d0:
         96:b2:66:96:37:62:f8:f8:4a:2c:88:e4:1d:c2:31:4d:b4:29:
         61:43:85:5b:a6:c9:46:ff:87:69:f5:a4:2a:ac:f7:82:4e:67:
         38:27:6f:5f:8e:b1:ea:0d:e6:2a:66:f0:a8:7d:61:9a:98:cf:
         71:38:6b:4a:7f:b0:22:ef:04:cd:17:ab:f5:4f:bc:30:8a:fa:
         9a:9c:93:60:0e:66:b0:23:d2:92:40:ef:d9:5c:17:17:d6:41:
         7a:5d:89:2f:61:85:87:df:7e:e4:ce:d3:72:4f:89:c3:96:08:
         bc:0d:45:39:66:03:d0:0e:2d:29:ca:21:d5:81:94:c1:ab:14:
         00:8a:99:d0:8f:ae:0d:91:47:f9:a6:7f:20:0f:b9:a9:c5:96:
         94:c9:78:a9:d4:54:9f:81:5d:4a:ed:8b:4d:81:6e:35:19:dc:
         e3:51:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:00:37 2024 by rpki-client on console-ams.rpki-client.org