Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63d3107a-fa95-3093-a2c8-edee630d3562.roa
File:                     63d3107a-fa95-3093-a2c8-edee630d3562.roa (raw, json)
Hash identifier:          nLDDv4kA5dZi2dx2qg/GPDU5HJPZalH63ZCMtnEpJF0=
Subject key identifier:   4A:A8:4A:30:EE:D6:4B:BD:9C:55:73:77:B0:5A:31:DF:70:64:59:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAF0A014F901801A71CA100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63d3107a-fa95-3093-a2c8-edee630d3562.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33668
IP address blocks:        68.43.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:0a:01:4f:90:18:01:a7:1c:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=e36f1f53-ae85-4c20-9e6c-19e447fe7ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d4:28:53:6e:ee:fb:3c:84:12:0e:17:a4:5d:
                    6e:b3:9f:28:86:e1:f1:12:f4:cf:75:43:0f:71:9d:
                    38:42:c2:7d:06:32:b9:10:04:f1:cc:b4:de:51:d9:
                    74:c3:9c:fd:9c:06:ac:68:50:af:4a:45:40:67:5c:
                    d9:ca:5b:b3:42:1e:0e:35:c6:1a:02:21:c7:45:c1:
                    d7:36:69:7e:e8:56:82:14:1b:06:ac:a8:38:e0:c3:
                    b7:cf:a9:2e:9a:e4:84:6a:a6:cf:10:24:10:b7:8a:
                    95:f4:f7:08:56:f9:41:df:e1:56:69:e8:4c:75:37:
                    22:17:d4:e7:03:61:d5:10:25:97:43:83:95:ee:50:
                    49:96:6b:45:53:2c:3f:f4:80:d9:0f:e7:c7:24:55:
                    fa:34:7c:3b:9b:e0:f4:01:82:74:9d:a3:a6:a3:94:
                    7b:57:63:33:61:db:90:ae:a2:9e:c4:d7:f6:c3:f8:
                    dd:9f:e6:24:7d:79:0c:70:b8:a4:44:56:5e:d5:f1:
                    1f:85:d7:86:11:ba:0e:2c:08:89:9c:bd:cd:30:37:
                    a2:36:d9:9c:18:d3:70:8d:a3:37:45:60:04:3a:d3:
                    85:88:9c:d2:29:24:f0:ec:92:1d:fe:09:1b:53:0d:
                    64:5c:c2:00:81:35:fc:35:ab:33:b3:d6:bf:75:bc:
                    45:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A8:4A:30:EE:D6:4B:BD:9C:55:73:77:B0:5A:31:DF:70:64:59:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63d3107a-fa95-3093-a2c8-edee630d3562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:1c:ab:28:08:c4:8c:dd:16:57:34:0a:96:4c:07:33:84:f2:
         67:25:e8:69:3d:17:b5:47:1d:2c:7b:1b:33:bd:e8:5f:e5:23:
         67:0c:ea:0d:12:a5:ea:0e:92:26:07:57:e6:60:bf:3b:ae:41:
         6b:59:25:68:59:38:73:ec:82:3c:c6:b3:b0:f1:cc:23:fa:dd:
         19:c7:cc:8b:6a:17:25:8f:2c:91:44:1f:fd:eb:9b:0a:67:8b:
         fb:24:22:14:18:b6:c6:10:ee:6a:79:e2:c6:70:07:9f:99:90:
         2a:a2:f5:74:fb:c5:b3:60:ba:95:69:d8:a3:8a:3c:a0:55:0c:
         35:b6:79:a8:0f:ca:f3:7e:b4:cc:54:6b:be:fe:0a:1b:62:bf:
         5e:a6:bf:dc:8e:ce:3e:47:6e:42:9b:31:f1:a8:ff:cb:00:12:
         15:11:ee:29:20:a4:b2:62:95:38:17:4b:62:8d:c1:6e:9a:74:
         a4:00:68:1c:a1:5d:8f:e9:33:ed:25:d1:9a:06:65:67:cf:9f:
         c6:ea:b5:70:40:00:cd:14:66:46:31:30:d8:a2:20:1f:78:5e:
         9c:12:6b:d7:db:0f:91:27:a0:a0:ff:4b:80:46:51:42:58:66:
         f0:25:85:36:0b:58:cc:87:ad:74:2e:a9:4c:d4:9c:29:da:43:
         4f:f3:86:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:28:56 2024 by rpki-client on console-fra.rpki-client.org