Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7347b6ab-b2bd-35d9-ba1a-6c68631fb81a.roa
File:                     7347b6ab-b2bd-35d9-ba1a-6c68631fb81a.roa (raw, json)
Hash identifier:          3cA8Nd7lRKcDs4jsckAc9/ePJZqHinsXAF/AHNkT7Ww=
Subject key identifier:   FD:C6:5F:58:BF:CC:A1:8A:27:F6:8E:8F:64:AF:6D:3E:C5:3E:0E:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C738DC23FAD24B6AD331C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7347b6ab-b2bd-35d9-ba1a-6c68631fb81a.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        75.68.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:38:dc:23:fa:d2:4b:6a:d3:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=5cc34882-9730-4000-83b9-0b4249c921dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:12:0c:04:92:9f:49:ff:01:ae:8a:33:2e:3e:
                    21:4f:1f:3a:a2:cf:37:85:f4:af:d0:4f:04:72:ea:
                    03:e5:43:93:6d:d0:36:9c:4b:ee:66:f1:ac:41:e9:
                    63:6b:bc:8e:f0:d0:a2:36:eb:78:00:26:3e:45:9b:
                    24:1e:37:da:8a:65:aa:bd:00:e2:1c:6b:18:17:39:
                    d8:2a:fe:52:9a:fc:79:4a:2d:15:13:40:f0:93:c3:
                    14:80:2b:6b:9d:3f:dc:ea:91:d2:10:ad:82:4f:74:
                    a0:f6:92:a1:bd:a7:80:92:ee:6a:82:9e:23:40:10:
                    21:7c:bc:6e:1c:98:b3:0a:e3:9b:23:9a:56:7e:ed:
                    53:f6:fd:1e:80:1a:4c:de:63:f3:d2:6c:6f:6a:ad:
                    37:22:6d:35:1d:c5:1b:69:d2:43:38:92:ca:13:b9:
                    3d:24:51:90:8c:87:41:6f:53:5d:2b:4d:7b:6f:d9:
                    ab:32:ad:d3:d1:e5:3d:52:fc:15:95:6f:88:54:72:
                    22:fe:13:44:b1:bf:73:da:1f:1b:2e:b2:ec:65:de:
                    d0:11:5f:75:0c:8d:80:50:8c:b3:94:f0:53:37:d6:
                    e7:b0:0d:b7:4e:39:bb:bb:a5:a3:fe:9f:4f:aa:62:
                    10:6a:3f:dc:35:1a:c2:2c:12:9b:86:9d:01:81:59:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C6:5F:58:BF:CC:A1:8A:27:F6:8E:8F:64:AF:6D:3E:C5:3E:0E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7347b6ab-b2bd-35d9-ba1a-6c68631fb81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.68.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:70:d2:9e:63:fc:f6:8e:ad:dc:76:10:b2:64:a8:87:a9:f1:
         33:88:ad:08:e5:27:85:2f:d6:17:18:18:7b:8e:e5:08:64:c9:
         f1:55:25:40:50:20:81:da:05:24:48:22:5b:83:99:53:68:b7:
         3d:9b:01:96:09:b4:ca:91:64:fa:cb:3c:91:3e:4c:2d:1b:d8:
         62:21:b5:5a:6b:d0:e7:cd:28:c7:45:d8:e1:be:0e:1e:a1:a5:
         e9:39:59:06:a5:ff:70:c2:7d:de:ad:fc:03:7b:b3:28:e6:cc:
         69:0e:29:f1:ea:6d:a7:ef:93:90:ce:38:25:07:ce:50:e3:87:
         21:cc:73:2e:9f:3f:11:d6:a0:03:ce:45:02:ab:a9:dc:42:fe:
         19:a3:2a:61:bf:9a:68:96:30:7e:6d:b9:e3:20:ef:6b:cf:0f:
         5e:af:ec:61:0e:8f:75:56:2e:2f:16:18:b1:3b:c0:60:09:7f:
         a7:2a:37:c4:67:14:a6:ec:2f:07:a3:52:3e:fe:52:ac:4f:2a:
         d0:c2:46:26:2c:04:6b:06:b7:c7:74:9b:7a:5c:76:a2:53:78:
         8b:e3:08:c0:d5:67:33:2e:45:69:c1:90:b2:29:1d:0d:7f:f1:
         b1:69:71:da:45:85:a7:63:f3:20:9c:25:0d:66:e0:e4:9c:83:
         f6:09:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:27:37 2024 by rpki-client on console-fra.rpki-client.org