Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f525f47-f0de-39a9-aa6d-24c661cc2724.roa
File:                     8f525f47-f0de-39a9-aa6d-24c661cc2724.roa (raw, json)
Hash identifier:          w3ihFhcAguCDaFL/nrwgaOnslL1r00oKK7RUUpgY/t0=
Subject key identifier:   D6:CD:16:CE:11:9C:AA:91:C0:EA:5A:4B:6D:51:72:31:C4:55:D0:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABEB57882C97BE0647ACD0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f525f47-f0de-39a9-aa6d-24c661cc2724.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        68.47.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:eb:57:88:2c:97:be:06:47:ac:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=fc906ab0-872a-44cc-9ab0-ab851365e6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:58:2e:38:f5:fc:15:ea:93:da:51:7a:1c:
                    5f:80:f6:47:0f:ed:66:a0:04:9d:82:2c:10:17:6c:
                    e4:72:07:79:7e:fd:0c:93:d6:5e:21:a0:f6:55:5a:
                    75:30:74:7b:43:c7:79:44:67:41:51:1e:fd:75:d7:
                    46:74:15:6a:3c:92:8f:c5:af:74:ab:7b:c9:68:f7:
                    07:75:08:d2:f5:84:71:1c:f2:84:c5:38:53:56:93:
                    b5:79:20:69:5a:e0:f6:6c:16:8c:7b:3f:55:30:21:
                    3e:eb:82:0e:d7:9e:ea:8a:05:b0:1d:5d:cb:98:d2:
                    0c:d1:c1:50:ea:ef:87:dd:f4:21:24:82:95:ac:2c:
                    9c:ca:1c:51:83:f7:01:f4:e8:1f:4a:74:c5:4d:c0:
                    68:00:1e:b0:69:44:33:9e:68:50:01:b0:e7:05:78:
                    62:48:cc:b0:90:84:3a:ef:8e:17:2b:fa:db:34:26:
                    fe:af:49:68:79:1b:9c:36:f7:62:20:a5:cf:d0:9f:
                    ab:32:96:da:de:64:85:1c:e6:c6:e9:6e:2d:6b:32:
                    31:82:43:64:68:42:ed:36:a8:62:19:ac:9b:f4:06:
                    34:23:d6:99:1a:e4:ff:71:bb:93:10:2a:0f:c2:82:
                    74:41:62:46:45:9a:1e:25:15:b2:6f:3a:e0:53:10:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CD:16:CE:11:9C:AA:91:C0:EA:5A:4B:6D:51:72:31:C4:55:D0:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f525f47-f0de-39a9-aa6d-24c661cc2724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:22:a6:40:ba:19:82:37:9c:c5:98:07:23:c9:13:69:ae:f4:
         82:4c:f3:82:d6:8e:64:d3:76:40:ff:d7:28:53:0f:9a:92:9f:
         6a:7f:79:d0:86:58:27:cd:ae:4e:ce:45:e6:f7:23:74:cf:e4:
         b2:f9:0d:54:54:a6:69:9e:1c:40:f8:de:9a:62:41:62:5e:7f:
         4c:20:d8:a5:0c:9f:f6:9a:1f:d3:40:85:fe:2a:21:ee:3e:1a:
         e7:73:6b:39:f4:05:86:fc:1a:a9:d0:6c:c7:75:ad:10:c8:69:
         b0:9f:b1:cf:18:75:e6:ba:67:09:ca:29:d7:02:fa:b9:f3:20:
         3b:d1:99:03:f5:0a:c3:b4:64:9a:b3:98:12:fa:ac:65:55:01:
         f2:4c:ee:be:32:83:5f:51:96:06:58:01:c5:9a:e0:ea:a7:f0:
         d6:32:c4:5b:a9:bf:17:4e:39:2a:5a:a7:f8:cf:36:0e:fa:b7:
         73:d8:e7:45:f6:be:c5:84:0e:ca:01:c5:7e:29:7c:3b:ce:6c:
         38:08:b4:ee:48:5c:67:36:be:18:d6:89:3e:a8:fc:ed:24:03:
         b5:f9:5a:47:47:93:3e:75:c0:f2:35:c5:4d:93:15:4f:81:02:
         5b:3a:7e:29:41:7e:e5:b3:12:21:89:92:0d:a9:1e:ef:2b:99:
         b3:7a:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:42:44 2024 by rpki-client on console-fra.rpki-client.org