Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec18689-c004-3a28-b7e1-47b045be7f61.roa
File:                     dec18689-c004-3a28-b7e1-47b045be7f61.roa (raw, json)
Hash identifier:          qpuZMy2gUKBGX2Rc++MxXu5N1XssjUuQVXtKr/l7T/c=
Subject key identifier:   FE:CA:BE:88:C6:B1:13:4F:45:98:E6:1B:8E:81:C4:6B:30:4F:CD:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB2E9EA387F9365AEDA200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec18689-c004-3a28-b7e1-47b045be7f61.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        68.47.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:2e:9e:a3:87:f9:36:5a:ed:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=28988e24-7933-4233-96f9-2f8a09fc5f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ef:d9:84:92:5c:3b:99:0b:c8:f8:3b:28:4e:
                    e5:79:ca:d2:d7:e5:47:15:f0:9f:04:16:9b:0d:ab:
                    86:bb:b6:fe:3d:d0:b2:f8:75:31:22:cf:d0:4c:ba:
                    98:81:80:f1:7d:9f:eb:ca:f7:57:ad:cf:46:bc:8d:
                    d4:d6:fb:02:f8:8b:2d:7c:4d:8d:fc:d3:79:b8:36:
                    f4:bf:74:77:43:58:b0:32:6c:ce:25:97:12:b9:7e:
                    b4:d9:57:b2:58:bb:b1:d3:7b:81:1c:c6:a7:70:70:
                    53:a3:ed:b7:46:3f:67:cc:a2:50:31:ac:bd:c0:28:
                    64:17:11:31:59:a0:53:04:b7:1d:1e:77:93:24:68:
                    cd:59:09:f9:42:1e:ec:95:5a:7b:09:49:63:35:8e:
                    ef:20:d9:35:5c:ca:4c:99:a7:4b:21:41:96:f5:17:
                    d3:7e:85:98:2a:6f:55:78:a7:ba:9e:7a:5c:63:37:
                    49:13:f5:bf:d1:9a:08:ed:b9:21:93:aa:5d:59:84:
                    e7:e3:d2:bc:db:fc:05:ba:2a:5f:c3:ac:52:99:9d:
                    1d:c8:8a:e5:02:d5:0f:a0:73:83:19:d8:0d:ca:07:
                    ea:76:f1:66:32:42:04:0c:45:31:dc:4a:f0:ef:43:
                    6e:f0:76:50:13:a9:9f:77:eb:13:30:d0:c8:8f:c1:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:BE:88:C6:B1:13:4F:45:98:E6:1B:8E:81:C4:6B:30:4F:CD:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec18689-c004-3a28-b7e1-47b045be7f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8e:a8:52:7e:b6:9a:38:5b:76:6e:cc:37:b3:db:25:48:a9:
         53:87:06:93:42:13:52:1e:52:72:18:2b:f1:e0:ae:23:74:82:
         b0:16:66:b6:df:f2:e3:96:69:ba:52:6d:8b:c1:11:af:a8:70:
         28:f6:80:c7:f7:c7:f0:d6:d4:36:a5:89:80:da:b0:2c:8a:4a:
         d4:77:ff:45:ef:bc:3c:97:82:74:91:dd:13:b5:7a:69:65:f0:
         9d:79:46:ea:6e:b2:8c:b3:b0:7d:36:6d:90:37:3e:8f:a6:5d:
         1d:fb:db:0e:83:dc:20:40:be:d3:5b:01:19:5a:85:21:66:e2:
         d9:d2:52:66:7e:d4:ab:9d:99:96:f6:8b:6c:08:d8:25:89:5b:
         de:8e:2d:66:e5:39:89:98:e2:37:f9:8b:22:ac:ff:c6:bf:1a:
         70:52:23:9a:2a:e9:c0:0f:88:c7:d0:c6:5f:bb:19:40:16:a8:
         e8:53:14:56:33:f3:f2:1c:2f:ad:e5:58:2c:92:bb:5c:51:21:
         2e:57:71:6c:3d:9d:d6:fd:86:29:ee:ec:a7:75:83:6e:2b:f0:
         c7:e6:c8:0e:ce:c6:8e:71:93:f7:9f:fd:25:a0:38:b0:28:2a:
         ea:3e:ea:15:68:66:45:0c:ea:25:61:65:c6:f5:83:df:c2:9c:
         09:93:b1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 11:16:08 2024 by rpki-client on console-fra.rpki-client.org