Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77f07028-17e0-37ef-9acb-7792ae4aca24.roa
File:                     77f07028-17e0-37ef-9acb-7792ae4aca24.roa (raw, json)
Hash identifier:          O2uiZQ4abBI739s34gkKF3QIK2Tz7hK18BUWyw+trak=
Subject key identifier:   93:98:96:DE:C3:27:09:17:C0:55:45:0A:0A:69:70:00:00:97:65:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BE8844ECAF830430C9A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77f07028-17e0-37ef-9acb-7792ae4aca24.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        68.57.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:e8:84:4e:ca:f8:30:43:0c:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=eb2fe0c7-557f-4393-a620-2ae60fc065e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:3d:89:5b:67:60:1c:ab:06:e3:67:49:9b:
                    42:4c:fa:e5:b0:1f:a3:76:6c:2d:e6:97:97:cd:9e:
                    9d:0d:72:d3:03:07:cf:45:0b:e1:d3:8e:fd:a9:94:
                    94:e3:20:55:fc:14:c0:f8:08:d3:be:d4:f9:fd:da:
                    92:97:6f:80:1c:cd:d3:f4:a0:50:30:3a:b3:24:76:
                    35:18:f2:09:af:f4:04:d2:07:38:09:35:49:ad:f4:
                    d2:6d:58:47:21:4a:fe:d3:a3:a3:f7:be:26:04:7c:
                    b0:c5:1e:cf:1e:15:d0:0e:be:91:bf:4c:70:e7:d2:
                    56:4b:4f:de:ff:d6:f2:75:17:aa:f2:cf:a9:18:ad:
                    7c:c7:bc:f5:bc:13:49:17:77:57:3a:2b:84:d3:b9:
                    5b:bd:e8:56:fa:a7:17:fe:2d:c9:b8:47:e0:2c:56:
                    5a:54:62:75:8c:d1:10:26:19:69:71:52:0c:ac:e8:
                    2f:be:ae:a5:e8:16:7b:cf:33:f3:2b:15:34:51:6c:
                    ec:c5:16:fa:b9:50:92:b3:c4:08:fc:33:28:b7:3a:
                    58:27:1d:05:67:82:4f:93:45:81:79:8d:2c:3c:17:
                    07:91:67:24:cf:64:85:e5:86:cc:70:f5:b9:cc:e2:
                    e1:a7:8d:18:16:85:64:7b:2d:50:d0:30:79:9e:46:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:98:96:DE:C3:27:09:17:C0:55:45:0A:0A:69:70:00:00:97:65:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77f07028-17e0-37ef-9acb-7792ae4aca24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.57.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ad:68:cb:7b:04:65:d0:cb:2d:dc:10:6f:68:08:26:16:b2:
         62:5e:9a:29:b2:c7:b7:c6:50:66:c9:d0:76:fc:3a:28:53:6e:
         7d:d8:13:15:a4:9b:07:8b:b7:29:15:ad:05:94:6a:37:a3:ab:
         97:ca:97:91:8d:07:60:ed:a8:15:0d:66:8d:5b:6e:70:e1:d8:
         5d:20:ac:84:c1:cb:0a:99:b6:53:d6:8a:7d:39:a0:1d:c5:53:
         f1:0d:eb:6f:60:5c:74:f3:e1:60:90:77:b2:cc:cb:cb:a7:ab:
         7f:78:4c:ba:c1:ec:96:57:df:25:a9:71:9c:3c:bd:7b:36:04:
         3d:15:fb:ab:ff:3d:01:82:ba:67:ab:35:ef:fb:33:98:5d:21:
         2a:4e:38:2f:3a:25:50:53:b1:3c:b5:32:fa:ae:1c:b4:f3:78:
         8e:cd:bc:35:97:59:34:94:0f:12:8a:cf:e9:9a:02:29:12:74:
         ca:1a:68:89:0a:e8:ea:35:77:23:b8:07:0e:17:18:8e:0d:17:
         bf:14:b8:f6:d3:d9:23:51:cc:fc:c3:7e:47:06:74:83:b5:f5:
         68:8e:95:3e:b5:ca:b2:b6:21:94:db:69:ed:6d:32:49:8c:64:
         19:cc:9d:4e:aa:7b:cc:02:22:5a:06:69:62:37:74:fc:0c:e8:
         a1:08:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:17:21 2024 by rpki-client on console-fra.rpki-client.org