Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa875c6e-1330-30a7-a0be-f4c0cd9e9b2a.roa
File:                     fa875c6e-1330-30a7-a0be-f4c0cd9e9b2a.roa (raw, json)
Hash identifier:          QdvM7GvaenfF3cqkGbrhsqF9khIB4mN+kydYGrH0dVM=
Subject key identifier:   3A:35:24:3B:58:34:97:3C:85:EE:2A:07:56:B7:D1:97:AC:2C:EB:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF83E922A211855EFB30F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa875c6e-1330-30a7-a0be-f4c0cd9e9b2a.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        68.84.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:3e:92:2a:21:18:55:ef:b3:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=8e41529f-75b8-419f-a501-f1b2c85d671a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:49:5c:25:dc:ca:08:a1:cc:8e:c8:7a:3f:
                    c0:94:cd:3f:2d:bc:75:ad:7b:88:6b:29:c3:78:67:
                    66:94:f0:2b:0b:77:9a:e6:e2:c9:d3:27:21:b9:a9:
                    6f:f4:d5:27:08:a4:42:f1:40:02:20:9c:92:5d:4e:
                    31:fc:ca:fa:20:c7:ad:64:ca:10:dd:54:a7:8a:0b:
                    1d:1d:f4:6b:eb:5b:e8:72:d5:71:0a:1e:c7:4e:9c:
                    8a:a1:99:e5:e1:ce:0a:fb:36:87:5f:5f:10:4f:2d:
                    54:4b:c2:56:8e:31:a4:62:ab:f4:88:bd:b3:60:04:
                    73:16:e9:d2:d5:f0:cb:d6:a3:c2:5d:a0:38:aa:7a:
                    89:a4:b1:bd:7f:1f:ba:76:11:06:74:e6:d1:22:66:
                    1f:50:65:31:ef:e2:72:aa:93:75:63:67:ca:c6:08:
                    b5:b9:56:5c:75:67:fa:46:e8:c6:5a:f4:a1:28:5f:
                    54:9f:5f:98:dd:7e:e6:9e:ef:3e:3d:2e:07:48:36:
                    af:ca:eb:c9:d3:35:0d:42:b1:cd:39:80:b6:64:79:
                    5d:44:4b:e9:f0:82:49:09:36:3a:26:3e:70:0a:2b:
                    78:a7:82:f7:6a:c9:a4:a1:3d:d2:6b:4a:34:bf:b9:
                    b3:30:e8:a7:f0:df:d0:c0:1d:94:2e:67:cc:a7:36:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:35:24:3B:58:34:97:3C:85:EE:2A:07:56:B7:D1:97:AC:2C:EB:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa875c6e-1330-30a7-a0be-f4c0cd9e9b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.84.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9d:3e:1e:10:16:21:ab:b6:10:5a:42:42:85:dc:64:d5:b4:
         fe:b1:d8:bd:13:74:04:9d:32:c2:75:09:51:cf:62:fa:d3:ad:
         25:7f:f8:66:99:f0:b6:96:a7:64:19:d3:a6:96:ec:50:c3:4f:
         0d:a4:d9:01:65:70:2a:a9:cc:14:08:92:56:d7:b2:80:d3:9b:
         dd:04:89:7b:c2:b4:eb:e3:75:9f:5e:43:9f:64:28:80:3f:d5:
         fc:12:55:fd:9d:3e:7e:09:5a:51:af:54:a8:46:4c:97:35:54:
         08:e6:b3:e0:af:dd:73:4c:a7:b0:e5:8c:09:d6:30:b4:a8:cc:
         a3:a4:09:c2:84:1a:f3:0f:c5:7f:17:e5:6c:76:70:4f:9f:a7:
         1e:72:f3:80:c7:03:1b:0a:ff:31:c2:7d:b2:20:1e:53:59:79:
         b2:17:82:8b:9a:42:7f:0c:03:2a:ea:3a:2a:f9:1b:9a:cb:46:
         e4:aa:f9:01:49:9b:aa:a1:77:ee:85:2f:e4:fc:2f:92:6e:98:
         c7:2f:0d:be:4c:02:69:bf:1a:1d:06:9e:a3:f1:dd:7d:a6:f9:
         a8:b3:ca:e7:c7:1c:81:ba:91:79:6e:b7:ec:d4:d8:43:40:cb:
         7d:e5:98:09:5b:ce:41:87:b9:ad:e3:47:eb:cd:17:69:54:fe:
         68:51:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:25:11 2024 by rpki-client on console-ams.rpki-client.org