Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cafd6550-13e0-36b0-a554-7369c7e347ce.roa
File:                     cafd6550-13e0-36b0-a554-7369c7e347ce.roa (raw, json)
Hash identifier:          RVuqO6zHQREX8T/IfdRA5fFt68iF/G9JpwQz9/gKljY=
Subject key identifier:   8A:7E:D5:C4:75:56:FC:44:B9:19:56:F9:94:43:5F:8F:26:87:8A:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BD0C0DBBD343068EB1280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cafd6550-13e0-36b0-a554-7369c7e347ce.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        68.39.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:d0:c0:db:bd:34:30:68:eb:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=81f921ec-9c19-4e94-aecf-2e22423ae9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:9e:ea:7c:9a:ab:4e:3c:cc:09:3f:e0:00:
                    95:9c:ff:b7:27:3a:c5:b2:72:b0:aa:e4:d9:f2:5d:
                    5d:d6:23:3b:6b:00:fb:f4:1d:86:02:63:4f:56:80:
                    b6:53:9a:ec:0b:23:b1:67:7a:91:ff:f3:13:df:48:
                    b5:e9:3d:67:0b:fa:e7:9a:40:b7:82:51:bb:33:1a:
                    2c:08:ee:49:2b:6f:69:8b:eb:a6:94:bd:3e:e4:8a:
                    44:69:ef:ff:70:0f:5b:58:e2:f9:d4:f4:6d:ae:5f:
                    eb:6b:6e:9e:f8:5b:f5:95:e5:5f:45:57:d4:fa:6d:
                    ad:09:2c:4b:ec:c5:79:aa:22:44:55:2b:46:dc:d9:
                    e1:6d:8b:a4:1f:9a:5c:9d:e3:f9:80:3c:9c:f3:fd:
                    81:d9:e6:23:b8:7a:65:e7:15:14:b3:21:c2:61:ec:
                    cb:1a:29:45:84:03:7d:6d:cc:89:0c:1f:0a:32:ba:
                    7c:4c:3f:1f:e1:d4:b4:59:e0:3c:79:81:ab:6b:fa:
                    e5:9d:d4:2f:95:ea:18:a5:15:9c:e3:2a:e2:7e:17:
                    70:f1:51:87:d9:bb:a7:74:1f:4d:1a:64:ac:36:d9:
                    9d:b9:da:7a:d6:f5:81:35:ca:94:0b:32:20:4d:c2:
                    8e:2e:99:f9:d0:3c:22:0b:c8:05:c1:96:13:9c:af:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7E:D5:C4:75:56:FC:44:B9:19:56:F9:94:43:5F:8F:26:87:8A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cafd6550-13e0-36b0-a554-7369c7e347ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.39.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ba:70:a1:df:7a:4c:aa:a0:5e:c1:d9:7e:47:93:a9:64:54:
         21:00:77:c7:a2:06:8c:65:af:ba:e5:28:46:d8:5e:a3:0a:db:
         ac:a4:65:88:c1:aa:a2:50:40:1f:91:2f:ee:5f:11:15:6b:d5:
         b4:c3:98:25:4f:55:71:d4:94:58:14:47:18:73:b9:5c:15:50:
         d4:70:ed:0e:63:fe:d0:e5:f4:c3:bc:2d:be:43:fb:b5:b2:29:
         4c:6b:28:60:be:8a:e6:62:56:1f:6a:2d:00:63:7e:cc:2a:38:
         f6:69:52:36:a6:b2:85:da:92:fe:9b:40:3f:7f:4a:94:1d:97:
         80:1d:05:c2:41:ce:13:dc:e6:95:67:92:80:b7:04:6c:43:b0:
         d8:76:8f:2e:ef:ad:99:a6:aa:a5:7f:14:a2:20:90:bb:b6:3f:
         1a:fb:a0:9f:95:8d:39:70:77:20:2b:82:78:4d:17:c7:5f:19:
         16:49:e6:55:5b:1f:ea:1c:2e:21:64:a5:38:f8:92:68:82:18:
         0c:47:f6:ec:e4:d0:c3:28:76:ac:91:75:eb:70:37:ba:62:17:
         76:c9:69:e0:86:07:83:b6:a3:87:d8:d7:4a:8e:28:08:9f:70:
         3a:e1:bf:ba:1d:3a:8d:c7:07:89:27:e8:06:2d:64:30:2a:10:
         e8:86:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:32:02 2024 by rpki-client on console-fra.rpki-client.org