Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7299acf4-4006-395b-b105-59db383e1fb5.roa
File:                     7299acf4-4006-395b-b105-59db383e1fb5.roa (raw, json)
Hash identifier:          5ZaTcGH3a1rduXfNF5HtwNkSzyGqd2wt2bPznTGx9Kg=
Subject key identifier:   84:A3:D4:04:EE:FB:59:59:20:D1:B5:76:3B:78:6C:4C:4A:58:2A:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C794858C49773EEC3A6F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7299acf4-4006-395b-b105-59db383e1fb5.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.43.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:94:85:8c:49:77:3e:ec:3a:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=58a96cb8-9a1a-4184-a09f-4e54f7af3fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:de:e2:a0:a1:2d:95:50:8a:58:aa:a7:27:
                    4d:91:fe:3f:ca:a4:8f:14:3a:17:43:71:be:df:51:
                    ac:77:7b:87:d5:70:e8:08:f0:c9:88:51:5d:af:48:
                    4c:df:2b:bb:c8:12:78:86:9f:ab:f6:bd:6f:68:e8:
                    1a:b2:3d:5e:26:9a:16:cf:9d:09:6e:a8:30:13:ec:
                    6b:55:65:e8:9c:22:3f:b1:50:e6:e2:58:f6:f8:d3:
                    7e:cd:7b:e1:8f:d4:51:2c:9a:e2:23:b6:84:8d:78:
                    62:d8:14:59:93:4d:5e:39:c3:c4:f1:d6:4f:e2:49:
                    26:6c:cf:3d:2f:04:14:18:78:52:8c:7c:fc:10:75:
                    3a:90:da:00:c9:5e:60:8a:b6:d9:a2:ff:b5:f6:9c:
                    f0:78:fc:9a:fe:91:ee:d4:97:50:5d:0e:11:4f:68:
                    ff:ca:e4:9d:27:c7:f2:cf:b2:55:f0:6e:a6:a6:fd:
                    01:6f:7b:65:4a:e5:51:45:d1:19:fc:69:01:be:3b:
                    ef:66:b8:05:57:b9:11:3d:85:14:e4:36:83:83:0f:
                    7c:02:6f:96:77:ce:cf:0c:68:8e:6e:73:fd:2c:10:
                    89:0c:9f:58:d7:09:bc:45:79:83:1a:91:39:c0:f0:
                    da:dd:b8:65:b0:9e:86:ec:53:4d:58:6a:32:ad:75:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A3:D4:04:EE:FB:59:59:20:D1:B5:76:3B:78:6C:4C:4A:58:2A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7299acf4-4006-395b-b105-59db383e1fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.43.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:67:d9:89:b9:32:cf:30:b0:9e:73:81:d8:fc:9b:4c:18:0c:
         a6:1f:e6:35:e1:00:aa:58:27:50:3d:80:f3:39:71:be:83:5f:
         fe:90:67:e3:ce:81:62:c2:29:a2:b7:94:5b:24:2c:23:70:0e:
         2a:9e:a8:44:b1:91:43:f5:7e:39:9d:66:6a:50:c8:68:34:1d:
         f7:2a:de:1b:b7:06:e5:be:25:d6:b3:40:49:a8:b4:a5:24:9d:
         5e:8e:b3:96:1b:ad:6f:2d:dd:2d:19:4c:78:e4:c4:b8:c1:b2:
         66:b1:c7:d8:f0:8d:74:d9:80:7d:75:5f:52:57:f9:d6:5b:11:
         d1:b3:0c:42:81:65:0d:44:04:07:da:40:2a:0f:40:4a:63:29:
         ce:9d:83:8c:60:fb:dc:d0:93:6e:c7:ee:aa:0f:39:8e:7a:ba:
         62:b2:cb:a8:4b:4b:1c:4e:a4:56:eb:e3:87:07:09:e6:78:10:
         1b:cd:ea:34:56:39:b9:df:2d:52:e8:86:d8:c6:d5:26:eb:a2:
         8b:33:06:15:15:31:b8:cc:0b:a0:66:4a:53:60:fb:0a:d0:14:
         68:02:e2:5b:02:6d:10:c0:14:52:5c:9c:be:2f:e3:36:6a:0b:
         0c:f2:e4:81:44:5a:06:ff:50:6e:64:57:b4:70:c3:45:45:05:
         db:e3:c5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:49:24 2024 by rpki-client on console-fra.rpki-client.org