Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e07ec2df-daad-3659-84fe-c109f6715628.roa
File:                     e07ec2df-daad-3659-84fe-c109f6715628.roa (raw, json)
Hash identifier:          GwU/jtS7vlZQgNse6JCbMJpyrtNLLPmKazPEcR7S178=
Subject key identifier:   E5:05:6D:6F:42:9D:F2:9E:46:D8:D1:53:5A:59:D5:62:CB:C7:F1:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7AABE54291C8CCCB6F080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e07ec2df-daad-3659-84fe-c109f6715628.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.56.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:aa:be:54:29:1c:8c:cc:b6:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=63f07656-900c-467c-a283-eea53a664c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:4d:91:86:35:3a:c3:ed:ab:1b:1d:49:69:
                    65:d5:3f:e1:4a:a0:36:a0:64:0e:b8:10:17:96:ef:
                    1b:0d:e5:bb:46:75:a6:a7:ba:d4:94:58:08:ce:7f:
                    16:a7:2e:ef:ad:af:05:14:18:e7:4d:bc:74:ae:b7:
                    4e:95:73:13:74:ca:14:95:6c:01:84:ba:0e:57:74:
                    32:f3:f2:8b:64:ed:9e:84:d4:d3:08:90:b9:ad:24:
                    96:6d:f7:11:60:5e:9a:57:2e:25:72:34:e7:3c:29:
                    0c:81:da:c5:55:60:85:04:fc:86:7d:6e:c9:72:d1:
                    15:b0:17:70:92:60:3d:b5:8f:ea:b0:b7:ab:25:4c:
                    28:08:6e:2c:9a:31:d7:27:3a:2c:ac:e0:17:6c:c4:
                    4e:a3:03:64:82:4f:20:4e:5c:7b:1c:53:fe:38:bc:
                    01:96:5c:65:38:01:c9:be:9d:fb:29:f5:8e:ee:75:
                    b7:fa:6c:3f:9c:96:3a:d5:99:84:12:0d:14:82:23:
                    e5:f8:ef:d6:c1:2d:d8:a7:35:44:a4:f3:d0:92:30:
                    1b:22:9d:90:86:21:2d:3b:38:90:66:ec:e7:1e:b1:
                    5f:e1:39:75:7b:e1:47:31:33:be:06:4c:c9:53:ab:
                    44:e8:9d:66:3c:14:9f:5f:70:8f:d8:8c:6d:e2:e1:
                    01:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:05:6D:6F:42:9D:F2:9E:46:D8:D1:53:5A:59:D5:62:CB:C7:F1:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e07ec2df-daad-3659-84fe-c109f6715628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.56.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:6d:c1:ae:d8:24:54:b2:f3:6f:fa:51:4f:9a:e7:e9:43:bf:
         0e:78:fb:51:7e:b7:06:bc:cf:6d:66:f7:ac:db:a2:50:d2:02:
         91:36:48:60:f6:64:98:6c:ed:9a:0f:60:00:c6:8a:af:d3:ba:
         b5:d7:fa:4f:0e:38:ae:e7:56:9a:6d:23:d3:29:06:cd:9d:27:
         34:be:b1:87:80:68:7c:7c:1f:58:7f:2a:39:ce:6f:f4:c5:b0:
         c7:08:58:38:bc:d6:87:29:d6:53:92:6d:73:42:a5:7c:1a:e1:
         2d:3c:5e:b5:9a:17:c0:42:fc:d5:04:e0:7c:e6:bd:87:67:12:
         28:9a:ad:c1:1b:d5:63:45:77:ef:f3:41:0e:48:e0:36:e5:89:
         3b:78:e6:51:9b:a4:df:43:54:67:2b:92:78:03:c8:9c:0b:94:
         1d:9c:26:f6:42:b7:e5:ec:58:e5:a8:10:0a:1a:eb:b4:9c:90:
         0a:14:de:b4:bb:df:c2:ca:95:fa:31:20:60:01:83:f5:3a:c8:
         a6:49:2c:aa:0a:e8:bf:9f:24:75:98:53:68:2e:70:c7:7c:95:
         3d:c3:99:07:9b:e8:e5:8e:d5:ad:bf:7f:7f:08:72:7a:a2:8c:
         ad:5f:d6:5d:76:35:2d:66:14:08:8b:ee:d5:1e:19:5c:f1:bc:
         f2:e0:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:58:06 2024 by rpki-client on console-fra.rpki-client.org