Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9dd5a3c-bcc1-374b-8050-7cbf9ca5f662.roa
File:                     c9dd5a3c-bcc1-374b-8050-7cbf9ca5f662.roa (raw, json)
Hash identifier:          K5qaKOpUTiAPxilS8GGsppxKnzA+hTUf0nou23q9Hz8=
Subject key identifier:   B7:60:F5:1A:97:73:10:A3:4F:41:AD:0D:B4:8D:1C:61:5A:AE:85:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF730A03604DB2393CA1A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9dd5a3c-bcc1-374b-8050-7cbf9ca5f662.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        68.85.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:30:a0:36:04:db:23:93:ca:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=6776a466-f6d9-4fff-8b22-b3a9b52d772c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:a1:f7:02:51:99:b3:8b:90:56:1b:4c:3e:
                    ab:d8:a9:01:25:07:cb:d0:28:e5:2b:aa:cf:66:68:
                    82:ce:85:06:1a:ec:78:0a:99:fd:76:cb:fe:26:00:
                    07:cc:eb:eb:6c:2c:e1:f2:91:ab:6a:5f:ba:69:57:
                    d9:19:c3:09:f5:c5:ac:41:7a:24:20:f4:2d:ad:51:
                    ed:6e:b3:7e:64:e5:48:ce:1d:c9:fe:0d:9f:de:79:
                    4c:d8:6c:b9:21:c2:f2:3b:fb:fe:ac:55:3a:dd:00:
                    86:27:12:9f:d0:0d:3d:61:6d:8b:99:88:5b:04:a6:
                    c6:d7:a7:7c:b1:3b:35:c9:35:f0:18:6f:d2:d0:b5:
                    b0:a8:92:b3:9a:6b:5a:31:f9:02:98:49:b6:4f:cc:
                    f6:d4:49:21:17:79:74:cd:0f:3b:d6:c3:e8:38:cb:
                    25:c8:c5:7f:b4:41:15:23:b6:27:e1:7d:6a:5e:0d:
                    1a:03:f7:10:b5:1e:85:01:60:b3:76:19:0e:c3:2c:
                    9a:1b:d3:9e:74:29:1e:25:d1:c5:55:36:7e:7f:3e:
                    da:b4:c5:fa:ea:0b:55:aa:8f:a8:84:08:6f:a6:f2:
                    d4:e6:d2:43:e1:4a:3c:21:5b:b1:9b:7b:97:d7:6a:
                    94:a7:63:d8:3c:1b:ff:d7:bf:17:55:37:67:9d:b2:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:60:F5:1A:97:73:10:A3:4F:41:AD:0D:B4:8D:1C:61:5A:AE:85:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9dd5a3c-bcc1-374b-8050-7cbf9ca5f662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:7b:31:a4:a7:bf:67:bb:6a:08:a4:d5:15:89:a4:1f:f8:40:
         5a:c4:0e:fa:3b:2e:d7:1f:6d:78:6b:de:c4:3d:42:b3:6b:5c:
         5c:22:6f:84:07:2b:5e:f4:25:f0:e4:e2:f2:0f:15:00:cf:8f:
         11:a3:44:80:78:71:14:e8:cc:bc:86:13:f8:17:0f:a3:94:04:
         a4:85:a0:cb:15:d6:d6:16:a5:a6:21:63:ed:fa:96:59:d0:14:
         bd:35:a7:38:70:71:23:f6:94:c0:b1:60:9e:25:3b:ef:47:b1:
         2e:1e:4a:87:26:f5:d9:13:da:92:31:ac:10:87:3b:d3:a2:fc:
         a8:c7:6e:d8:5a:67:56:60:9d:07:59:18:58:29:e8:aa:cd:3b:
         13:c7:a8:6a:49:bb:e0:fe:76:29:a3:38:51:ff:57:2d:9c:11:
         ca:6d:fe:6f:ed:57:7f:48:df:8e:5f:7e:16:53:74:fd:3c:bd:
         5f:ce:4a:1b:67:9a:55:ee:1f:fe:15:aa:9d:3e:0e:53:23:eb:
         7b:0f:ec:93:1d:3f:20:a4:ee:8d:d1:06:8e:ef:90:79:a0:77:
         c5:13:d4:36:cf:3d:ab:20:20:d1:32:d4:1a:fe:f8:97:a7:02:
         e2:df:9e:d4:15:cc:6d:e8:0a:6a:2c:56:7e:fd:79:97:87:d7:
         f5:16:0d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:31:51 2024 by rpki-client on console-fra.rpki-client.org