Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f6132b0-8248-3de9-829e-6b0e1914fa6e.roa
File:                     8f6132b0-8248-3de9-829e-6b0e1914fa6e.roa (raw, json)
Hash identifier:          sG+XFrzXUBI7IIy9dU0OiQTjZzFoKFFq/uEZdqeRxYE=
Subject key identifier:   CA:27:AB:79:E5:D7:63:DB:59:1D:66:FB:90:E2:C1:64:44:2E:FF:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7A0A0BE510FF03C167100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f6132b0-8248-3de9-829e-6b0e1914fa6e.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.49.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:a0:a0:be:51:0f:f0:3c:16:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=7adfa38d-9ff5-4d4a-b1db-d7e81bf8f940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:ae:0a:9f:99:42:a9:4a:28:04:44:3f:be:
                    93:9f:b8:72:dc:e1:33:5d:d4:98:f9:93:20:d9:c3:
                    42:ae:a2:5f:b8:2b:94:1c:23:c8:3c:63:95:e4:c7:
                    f9:ac:04:65:15:c5:b1:1f:d0:5c:db:bb:1e:3b:72:
                    22:1c:7e:4a:a8:a1:db:23:ad:37:d1:6d:d9:ff:19:
                    bb:15:03:8a:3f:a4:53:bf:b5:5b:3f:26:2d:53:c2:
                    43:f6:df:b6:95:57:fa:95:b9:57:ea:5d:c7:e3:42:
                    0d:18:e6:5d:cf:43:40:04:b7:58:17:6b:08:66:d8:
                    1d:3f:6b:86:b4:33:44:de:4f:39:e0:3e:f2:07:6e:
                    37:c7:b9:92:35:e4:45:c2:03:4d:75:9c:82:63:d4:
                    84:72:22:ad:51:df:23:95:4c:84:00:2f:e5:23:41:
                    6a:a1:fc:63:9b:24:bd:4a:9d:d1:91:a2:49:78:2e:
                    1c:f5:1f:a4:d8:38:4b:4d:0f:b3:b4:f5:5b:bb:8b:
                    59:2a:dc:55:97:b0:24:66:6e:9a:e6:e2:8d:27:87:
                    00:85:a0:00:76:5d:fc:45:77:c9:3c:0f:b9:95:80:
                    59:4e:8b:fa:4e:82:80:70:e9:f0:2b:c1:68:e7:e5:
                    d0:6e:20:1d:2f:1b:a7:c7:98:9b:f4:a5:e4:fd:4c:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:27:AB:79:E5:D7:63:DB:59:1D:66:FB:90:E2:C1:64:44:2E:FF:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f6132b0-8248-3de9-829e-6b0e1914fa6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.49.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:29:f5:88:01:1e:26:9d:e6:79:79:b0:74:9e:51:5a:d8:e0:
         eb:9f:d4:47:d2:42:13:e6:56:b1:94:81:7d:22:dd:aa:93:af:
         08:c7:aa:7d:1f:cc:79:64:44:d8:3a:c2:67:6e:69:a1:c3:ab:
         96:d1:9d:30:a0:7b:d9:80:d7:18:63:b1:98:a9:33:fc:1c:a0:
         d1:99:df:b1:20:00:7a:d2:9f:8f:b9:cd:14:10:1b:f9:3f:96:
         84:e5:39:c1:49:3d:86:3e:a6:80:98:aa:79:9a:c3:7f:d7:10:
         5c:f4:b9:02:b4:8d:f4:ef:b4:c2:fa:b1:d9:51:65:df:ab:2a:
         21:4e:55:54:22:9b:69:13:6c:a1:a1:c8:43:46:d6:3e:30:b5:
         ad:bc:6b:85:68:d4:c9:2a:34:44:2e:6f:1b:ae:ea:2f:54:97:
         d7:8c:1f:39:d9:ea:e3:dc:4f:6d:3c:87:18:5d:d2:e3:d6:3d:
         a3:34:0f:99:4b:b9:40:d7:c0:3d:85:47:7b:af:f5:2c:83:fb:
         16:de:21:8d:8b:e9:d1:33:3e:72:00:34:7f:16:aa:68:34:cf:
         62:fb:8b:d3:fc:d1:01:31:43:f4:16:ab:96:ab:a7:ac:60:e6:
         b2:2d:9f:e1:b0:0d:8c:31:9f:b8:c8:38:59:de:13:2c:8c:9d:
         51:16:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:51:47 2024 by rpki-client on console-fra.rpki-client.org