Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a109eb9-1416-3ddf-b3f4-bece272e47fc.roa
File:                     7a109eb9-1416-3ddf-b3f4-bece272e47fc.roa (raw, json)
Hash identifier:          /LwIRz5reoXPTKi9P/xfa7HHi4ayWvyU5UkBh2XmH6M=
Subject key identifier:   DF:61:DD:E5:2D:52:55:A0:1F:E8:8F:35:48:C9:C0:AC:62:1B:FA:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFA781AF36C3D883D30F800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a109eb9-1416-3ddf-b3f4-bece272e47fc.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33660
IP address blocks:        68.86.199.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:78:1a:f3:6c:3d:88:3d:30:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=8ec4a48b-0ebe-4acc-b3fb-d1914db543db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:81:c8:e6:e2:e2:eb:4f:94:29:3f:f4:dd:
                    6b:bc:d7:85:ea:97:09:3d:fc:cd:20:59:02:04:66:
                    ee:c3:9e:8a:a5:ed:bf:f5:8a:b6:17:2a:ce:f0:f3:
                    42:b0:75:ce:21:e5:c6:08:78:8a:b8:ad:a8:8c:e4:
                    d2:46:15:ce:e9:34:04:7e:40:54:df:05:24:b4:80:
                    8c:a2:39:32:b7:0f:5f:53:5c:50:58:48:21:54:58:
                    60:11:4a:c8:14:11:aa:cb:cb:3d:70:62:28:6b:76:
                    bf:27:b3:60:22:69:b3:ae:5d:e0:fd:71:0e:ff:91:
                    b4:a3:0e:46:c3:60:b9:ab:46:b8:74:f6:c0:81:23:
                    34:5b:51:24:03:bf:b5:46:73:32:6c:6a:f0:fe:b1:
                    b8:da:13:99:17:84:f5:d4:cb:73:21:50:93:7c:7a:
                    f1:b7:f4:26:b3:39:5d:c4:cc:50:23:c7:14:be:73:
                    d1:ce:bc:ac:5b:b6:ed:ee:5a:ce:5e:4b:c5:2e:1b:
                    c4:ba:d1:21:28:ef:cc:a3:56:81:50:3d:19:d2:9f:
                    26:05:2c:5c:99:66:e3:2b:7b:04:1d:1c:34:ea:c3:
                    03:78:23:35:bd:1d:63:ca:07:25:51:7e:ad:05:50:
                    1e:ca:f5:5a:de:e5:40:ea:3c:95:6e:c0:76:aa:9e:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:61:DD:E5:2D:52:55:A0:1F:E8:8F:35:48:C9:C0:AC:62:1B:FA:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a109eb9-1416-3ddf-b3f4-bece272e47fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.199.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0e:ee:89:58:61:ea:81:1e:0d:90:31:a4:ae:6b:ac:bd:a0:
         76:b3:4b:ad:d2:63:15:88:55:aa:9a:46:d9:a6:83:7c:f3:12:
         66:4d:68:6d:3f:c7:4c:ba:83:29:94:eb:9e:80:99:28:08:fb:
         18:fb:09:ef:40:41:7b:4a:27:24:9f:02:d2:dc:a9:95:9f:b1:
         3d:bb:b9:56:1f:5c:ff:29:17:2a:a3:24:c9:93:78:8f:3e:f0:
         ef:b0:df:3c:37:ee:72:66:b1:a5:7a:75:d7:f4:c6:52:23:82:
         e7:44:ea:72:08:55:11:4f:e4:8b:98:cd:03:38:f9:38:5e:bc:
         d1:1d:b9:0a:21:37:fe:c8:c4:3d:5f:4d:1d:e2:c5:bc:e4:d7:
         9e:84:f7:91:86:1b:f1:16:93:1e:8b:4d:5d:14:7d:94:3a:29:
         18:4a:7d:73:02:38:bd:38:f7:39:ba:db:15:e2:fa:22:f6:89:
         04:f2:0c:26:e4:90:c1:65:65:dd:22:fd:d9:0d:7f:a5:1a:88:
         76:d0:36:93:9e:15:9e:ef:ee:89:96:a5:17:79:86:34:16:b3:
         62:b5:c6:ee:00:40:11:89:b1:c6:25:30:e1:5a:c7:e6:01:78:
         83:87:36:5f:ab:7f:62:73:b0:1a:41:24:fc:4a:a2:b4:9b:28:
         f0:95:c8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:05:30 2024 by rpki-client on console-ams.rpki-client.org