Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2f83983-8b87-3bc8-bfc5-b3abcd4ee07c.roa
File:                     e2f83983-8b87-3bc8-bfc5-b3abcd4ee07c.roa (raw, json)
Hash identifier:          XNbUapHwa2ZfMP19ZyIuwiLlI2DBCIFAjJGbqDQm89c=
Subject key identifier:   93:5F:2A:81:52:E2:ED:F4:2C:FB:48:E0:9B:F4:20:53:9B:FB:BF:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C797D07B225EFA82BE11E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2f83983-8b87-3bc8-bfc5-b3abcd4ee07c.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.46.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:97:d0:7b:22:5e:fa:82:be:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=1be7254b-7ee3-46ca-a220-5e35eaaa7ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:3f:1d:bc:95:22:5b:13:aa:83:d1:bf:30:
                    96:a8:07:ce:44:92:19:37:6d:16:7c:3f:de:fc:f3:
                    cc:36:51:00:66:62:5c:32:e1:e6:37:e3:c0:e5:2c:
                    c1:cd:fe:4c:43:e1:95:5c:dd:c9:1b:eb:18:08:99:
                    fa:a9:9b:1d:64:28:ff:53:fb:38:26:ec:d3:e7:6b:
                    b8:cd:b1:0a:6f:97:6c:cd:59:9c:32:91:a4:f7:02:
                    a9:0e:cd:26:a5:c6:f6:ef:e0:1f:d5:5d:8d:68:a9:
                    a0:8c:9d:c7:ec:f8:5a:25:a8:5f:3a:45:5e:2c:f8:
                    e1:78:f9:24:93:4c:71:2c:7c:eb:3c:4b:82:74:0e:
                    a2:ba:41:82:00:68:13:3d:c1:dd:89:12:1c:fb:3a:
                    e7:db:05:3f:8c:8c:97:32:38:7e:d9:86:b2:2e:4f:
                    a1:21:82:aa:55:9b:03:f0:8c:f4:17:9f:16:15:b6:
                    75:cd:df:6a:67:92:e6:c0:79:32:f3:55:7c:bb:45:
                    af:62:19:d2:67:d9:72:e0:10:da:13:aa:6f:8b:59:
                    72:f2:d1:74:66:30:56:55:73:bd:92:7d:e3:7a:4f:
                    ea:b7:a4:50:b3:80:e5:bb:e4:88:a8:68:04:6a:38:
                    82:03:5e:ad:9a:fb:b2:a4:62:65:08:bc:86:f7:6c:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5F:2A:81:52:E2:ED:F4:2C:FB:48:E0:9B:F4:20:53:9B:FB:BF:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2f83983-8b87-3bc8-bfc5-b3abcd4ee07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.46.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:7d:c5:5a:ff:c0:28:d7:27:ba:66:49:66:ad:2d:14:d8:ac:
         f8:cb:da:09:54:a8:d2:fc:09:d4:5d:f5:7c:de:78:54:d6:cf:
         90:94:00:41:4e:7b:25:be:e1:c3:c9:36:46:e7:98:c1:72:79:
         88:80:9d:f9:4a:58:57:d0:0e:58:91:b4:44:8f:45:09:39:12:
         df:9c:3c:8b:1a:49:ad:d4:6a:61:a7:f7:b8:05:ce:37:b0:f5:
         7a:eb:51:8e:a2:53:91:2d:66:e0:68:46:ce:9d:a0:12:5e:93:
         c1:b4:08:8d:87:d2:0e:fe:26:a4:be:a6:ff:37:85:4c:9a:28:
         2f:c6:9a:76:ba:cf:09:62:4b:21:ca:fa:4f:e3:5a:78:0f:fb:
         1b:f3:98:ae:55:2c:15:ca:67:b8:21:39:90:08:d7:93:db:6c:
         40:f8:e0:6d:90:1b:18:76:48:29:fd:be:21:ed:6c:23:1d:64:
         9a:8c:29:d9:50:55:df:74:de:a3:e0:42:74:19:89:e6:85:58:
         c2:29:c8:46:cb:94:a5:63:26:2c:42:08:9e:4c:8c:b1:da:e7:
         0f:31:e8:d5:65:d0:9d:88:5f:88:51:37:35:5b:e6:a3:71:0e:
         a8:08:86:4d:dd:51:6a:e4:98:4f:0f:5f:2b:44:b3:61:01:6f:
         da:c2:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:58:19 2024 by rpki-client on console-fra.rpki-client.org