Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfa59443-3b9f-31c6-8c69-1f4266aa3e47.roa
File:                     bfa59443-3b9f-31c6-8c69-1f4266aa3e47.roa (raw, json)
Hash identifier:          y3HN1GHKGyML79wpZ8KWm/+P6qzlEmB4ma3/+JRNJo8=
Subject key identifier:   70:A9:DE:F7:1E:72:51:35:E9:95:ED:CD:16:5D:94:74:A6:E3:52:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7AC64A86797C381521A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfa59443-3b9f-31c6-8c69-1f4266aa3e47.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.59.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:ac:64:a8:67:97:c3:81:52:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=89c969bb-f002-4fb1-8b9a-de8db5c97047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:e4:78:10:48:26:66:1c:5f:89:72:d6:71:
                    3e:36:9e:24:ca:9b:33:5d:50:8a:ac:d8:50:3d:28:
                    0c:13:d8:ba:21:e5:86:50:f8:49:56:48:19:2f:a2:
                    f4:07:0f:bb:6f:b5:52:97:53:1b:fa:90:1f:f2:ab:
                    8c:01:57:6c:3c:4f:78:30:ba:3a:74:dc:aa:bb:c4:
                    36:20:60:2d:81:67:ad:44:7c:6f:09:6a:1e:5f:51:
                    e6:46:27:c1:ea:e5:72:9c:b2:88:15:e6:bd:3d:ff:
                    8c:7c:ec:e4:04:ab:db:58:a8:07:29:02:75:7b:1f:
                    d3:ac:31:d0:5b:38:3a:41:95:a4:6e:fe:c7:fa:9c:
                    43:64:9c:90:be:70:98:60:fd:a9:a9:60:47:6d:b5:
                    ff:bf:92:dc:88:bd:36:5c:59:c7:b3:0b:74:50:dd:
                    9f:00:3b:22:b8:7c:d9:fa:c5:df:2f:11:87:19:b7:
                    8a:a5:d3:d1:32:2f:6b:11:7e:fc:71:2d:08:f2:e2:
                    39:45:c7:02:b4:c3:a2:f7:ac:67:84:b1:bd:49:51:
                    9c:52:b6:b9:5f:5c:ce:f8:b2:c4:34:ce:ea:60:71:
                    1d:50:d8:1c:17:25:7a:b9:a6:c9:75:32:d2:e0:69:
                    db:95:17:49:4a:0b:d6:5d:34:17:82:ec:ec:3e:81:
                    9f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A9:DE:F7:1E:72:51:35:E9:95:ED:CD:16:5D:94:74:A6:E3:52:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfa59443-3b9f-31c6-8c69-1f4266aa3e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.59.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:33:fc:0c:4f:ea:5b:9f:8c:39:db:9c:34:3e:01:79:38:e8:
         a8:aa:00:02:37:14:9d:42:5c:95:8a:7e:9e:ca:7a:4b:4f:55:
         15:20:45:54:44:b1:a7:f4:fd:ce:76:54:76:9b:fa:ad:5a:73:
         6a:31:97:a6:ae:1b:ce:b8:6b:fa:7e:d2:52:04:13:b5:9d:72:
         34:ab:30:12:c1:8b:f8:6b:bb:62:e6:f7:7a:89:f5:75:1c:2e:
         c0:2a:5b:93:bf:09:80:5e:5a:d0:bc:4d:2c:7b:a3:19:ab:ff:
         5c:8d:a0:33:19:2d:e4:7c:7a:5f:76:11:58:c3:f5:28:7a:9f:
         fe:53:04:47:cc:81:9f:a9:f1:66:61:a4:f2:f3:a0:81:e8:58:
         86:0b:e9:fa:61:a1:90:6e:02:cc:d8:94:bd:5a:de:01:38:cb:
         a3:34:6c:1c:3b:56:89:f7:82:0b:62:01:2e:7d:7c:2c:27:23:
         8a:f5:be:1c:ee:ae:15:cf:85:63:33:29:83:52:99:6f:9a:6a:
         58:fc:c8:a2:3c:02:be:5f:2e:1c:2c:f9:c0:18:18:aa:46:c8:
         27:33:21:3b:f6:49:7c:00:d4:73:c7:63:a2:4b:f2:29:ea:b7:
         cc:3c:95:e8:29:95:a9:ae:ff:cb:5b:bf:86:df:76:52:9b:67:
         bb:63:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:12:28 2024 by rpki-client on console-ams.rpki-client.org