Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a990554c-0353-35dd-bd4f-04a2f5f8a775.roa
File:                     a990554c-0353-35dd-bd4f-04a2f5f8a775.roa (raw, json)
Hash identifier:          8pDPfKZAvGeneKcyMS79DPxaXw3Os5nbpDz4l60XAwE=
Subject key identifier:   CE:CC:FD:1F:EB:78:6E:A0:3B:63:1C:78:B6:6C:F0:1C:8A:8C:D3:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C79B3FC3B003EEC565E050
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a990554c-0353-35dd-bd4f-04a2f5f8a775.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.48.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:9b:3f:c3:b0:03:ee:c5:65:e0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=39b6637c-3553-4371-9ab2-9c37c7ae12af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b0:f8:e7:f2:2a:d7:e5:59:8a:38:dd:7a:6e:
                    98:bc:d8:b6:68:f2:15:80:11:1b:57:97:cf:d6:57:
                    72:15:9a:1a:95:72:d7:0f:4d:a8:93:b1:5e:f3:5f:
                    02:6c:4f:68:40:42:e4:a9:98:be:92:ef:85:cb:df:
                    2c:0f:dd:94:87:43:94:f8:fe:04:49:d5:9b:51:cf:
                    b2:ab:21:40:6e:2d:4b:2c:81:53:1b:2e:4e:c5:7d:
                    2d:0e:37:be:e6:f4:b1:6c:ea:a3:ea:85:86:10:f0:
                    29:55:94:6f:df:fb:44:03:b8:64:d3:b0:14:9f:48:
                    a7:98:37:64:30:a4:9f:77:bf:56:19:9f:66:4b:51:
                    ed:64:b9:db:7b:89:1d:67:6b:6f:df:f1:f2:8e:9e:
                    ae:74:e6:2d:a6:75:fd:68:1d:f3:a1:51:af:fa:81:
                    57:d7:e6:34:12:17:73:ca:a6:a9:2c:c0:0b:d5:5e:
                    c3:ea:8f:6c:d2:5f:67:66:df:19:01:e6:37:15:8f:
                    ca:dc:f4:6d:d2:53:2e:47:fe:63:5a:d5:bb:ca:5f:
                    cc:7e:2f:7d:36:cc:da:f3:cb:ba:e1:22:83:19:13:
                    ed:b8:dd:e5:f5:9d:18:a5:24:1e:2a:25:51:46:aa:
                    dc:94:62:71:82:15:50:21:08:8b:2d:08:60:d3:8f:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CC:FD:1F:EB:78:6E:A0:3B:63:1C:78:B6:6C:F0:1C:8A:8C:D3:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a990554c-0353-35dd-bd4f-04a2f5f8a775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.48.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ab:0a:00:30:22:28:e0:9b:61:89:d8:15:49:e2:b4:92:bd:
         ca:46:3e:f4:1d:a6:d2:3d:da:d0:73:c2:e0:46:ae:78:e3:88:
         c8:d2:67:27:39:e4:5f:5d:40:b8:70:7f:85:3f:4a:ce:de:a4:
         01:f7:22:49:68:e4:81:b7:e7:85:99:c9:4a:ed:da:d3:13:86:
         f2:55:7c:f2:8c:78:93:b5:59:77:da:6e:6c:ea:1a:8d:29:0c:
         59:fe:93:b1:df:5f:60:55:1f:62:f0:7d:53:ea:a3:2a:cc:9a:
         c0:06:24:e7:25:89:74:c9:ae:1d:7a:20:55:0f:6e:eb:05:ed:
         f0:d3:b0:58:8f:53:bd:e8:b0:b9:89:5a:a5:2d:db:e7:ec:03:
         b0:ba:e7:30:50:0d:21:1d:1b:72:d3:37:32:7e:f4:f2:64:9b:
         d5:ce:8b:13:48:fe:0e:3f:5c:60:14:f4:a4:76:58:a0:4c:cb:
         a5:e2:ae:40:f6:73:33:7c:6b:68:c0:02:e8:56:4a:0f:de:1d:
         ea:42:f6:5f:ee:ad:8a:b7:0f:68:8d:a0:47:2f:3f:45:37:12:
         a0:ac:7f:21:2e:c6:00:c6:ce:f3:1a:b5:87:19:41:21:58:89:
         66:6c:e5:ce:80:b3:f3:e5:1a:84:17:8f:af:7e:b0:ba:4e:dd:
         28:04:0f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:56 2024 by rpki-client on console-fra.rpki-client.org