Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43c086e-c0c3-354a-9db8-644643c9156b.roa
File:                     f43c086e-c0c3-354a-9db8-644643c9156b.roa (raw, json)
Hash identifier:          cwSEXA4Witlajz293DwbIgqlzAYqoSUBVa8bhOVDyGw=
Subject key identifier:   5D:5A:02:36:18:2A:87:F7:41:15:25:63:72:84:47:8E:2D:98:86:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7954AD79FAAE7EA51AD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43c086e-c0c3-354a-9db8-644643c9156b.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.43.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:95:4a:d7:9f:aa:e7:ea:51:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=d416d058-71be-43e0-8f9e-3a0a19383319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:68:21:71:d8:87:91:7f:2e:d7:12:5b:30:
                    7f:be:9f:9d:3d:69:aa:a2:ad:9e:c6:73:69:77:38:
                    9c:4d:3d:aa:fa:5a:93:6d:40:f8:9d:46:44:65:da:
                    5b:7e:2d:51:d8:56:9d:bb:d4:2a:58:12:06:a8:67:
                    44:ae:00:a5:b3:21:44:90:64:1b:67:2b:39:4e:eb:
                    26:b9:23:61:c9:68:95:11:85:87:6c:6b:12:db:0d:
                    47:57:f2:6c:06:d1:7e:00:88:54:d0:56:4b:24:b3:
                    5e:6a:16:ff:17:55:6d:de:c6:fb:71:a8:16:89:ce:
                    1a:42:40:a0:24:b1:55:13:19:69:a6:e8:71:4a:eb:
                    9f:c8:56:04:f3:a0:b7:fa:65:5f:74:ad:ed:8e:4b:
                    28:05:44:0d:f1:f9:13:7d:4e:d1:44:da:ca:6f:e8:
                    17:a3:aa:7e:4b:d7:36:f8:0e:1f:68:11:85:ab:c8:
                    7a:1b:e9:4d:c3:82:8d:2e:e4:17:c1:13:9a:43:c6:
                    1a:4a:b8:40:9c:71:a8:22:14:70:29:32:c2:86:9f:
                    9e:fd:58:69:1a:af:fc:49:4b:28:c0:1f:6e:99:37:
                    e8:53:c8:c0:eb:5f:5f:34:c2:16:b0:d9:d4:ec:e8:
                    6f:4b:e4:c0:ab:ce:cd:0e:48:d7:36:30:89:43:b9:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5A:02:36:18:2A:87:F7:41:15:25:63:72:84:47:8E:2D:98:86:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43c086e-c0c3-354a-9db8-644643c9156b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.43.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:2a:0f:42:9c:52:42:a1:d9:5e:b4:28:8a:6f:01:f2:a0:83:
         0d:50:6a:17:93:c1:8b:04:51:d2:14:c8:35:79:d2:e8:d1:47:
         95:25:dd:39:2e:46:38:8d:ea:4d:ea:f5:3e:2c:2e:55:8a:c3:
         72:bf:8a:02:0f:46:8e:45:e1:4e:4b:0e:f6:7d:c3:8a:72:01:
         1e:b9:25:00:27:60:79:00:7e:8d:d2:ed:1b:00:bf:b4:65:79:
         ed:ec:7a:67:c2:11:fe:47:42:88:6f:31:af:ab:1e:05:59:e4:
         ef:cf:03:70:71:d3:e3:f6:a6:b4:2e:31:c3:56:ea:26:10:d0:
         b0:71:09:b1:a6:1e:70:b8:f1:2e:0c:88:bb:a9:09:be:75:1b:
         78:e4:1b:e4:3c:8e:67:7b:68:a3:0a:fb:b4:fd:68:9c:2e:79:
         88:d3:87:b0:26:79:c6:a4:f8:a1:d4:f8:e0:0f:8e:69:1b:d1:
         82:82:5e:c3:53:82:63:5b:6b:ae:80:5d:5f:7b:02:ee:0c:d9:
         40:01:c8:59:6d:2f:6a:aa:62:57:fe:ad:fa:f6:53:eb:55:68:
         7c:49:72:9e:06:31:76:f4:62:d9:3a:e0:c7:88:65:6c:95:e1:
         95:e5:93:15:c5:d9:b7:1c:e8:64:f8:4c:5c:c5:f0:ce:7c:fe:
         7a:e9:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:59:42 2024 by rpki-client on console-fra.rpki-client.org