Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb006908-a0bf-32db-87b7-83754a81b8de.roa
File:                     fb006908-a0bf-32db-87b7-83754a81b8de.roa (raw, json)
Hash identifier:          K9UvfIxtb10fNcwssm02CAzRl7LmMqzbTX6k4frK2CM=
Subject key identifier:   FA:05:97:C2:27:5C:E1:1F:24:EB:8A:B0:C6:E2:4C:5F:6C:42:60:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB03214EC9ADDBFE666580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb006908-a0bf-32db-87b7-83754a81b8de.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        68.59.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:03:21:4e:c9:ad:db:fe:66:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=72aa543b-e505-4dbc-9e7d-3267908f71c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:04:69:64:78:28:45:67:7f:eb:c3:ab:43:
                    9d:21:2d:9f:93:35:cb:cd:14:95:02:3c:7a:10:39:
                    d1:47:f9:3f:b7:8b:ee:cc:43:44:31:3b:b9:fa:ab:
                    17:8b:9f:bc:3b:03:20:26:3c:8b:4e:0b:26:06:55:
                    45:db:a1:82:c9:10:e9:02:5a:cd:ca:06:4e:cd:55:
                    53:81:25:d9:ec:14:5b:0d:e2:01:a0:bd:7c:65:2c:
                    41:a0:7c:66:f8:24:70:b0:9a:37:87:19:57:8f:b7:
                    43:e5:48:b6:e5:2c:ad:66:18:bb:63:c2:b1:8d:f7:
                    97:23:6a:68:8c:26:19:b6:5b:78:28:6f:78:44:94:
                    b8:ed:f0:6a:ca:ee:af:58:26:a1:20:28:79:e0:e6:
                    39:93:1d:d6:93:ef:e0:2d:34:e6:36:a3:3c:b3:f4:
                    7f:6d:e5:80:91:19:ed:53:0e:6e:3e:87:9f:e9:ec:
                    50:67:ea:41:9a:33:44:53:2a:e3:9b:97:dc:d2:d5:
                    ac:4b:5d:e0:a5:40:bf:e8:08:31:72:c1:19:2e:ef:
                    12:82:ee:5e:32:99:63:17:91:28:e1:4d:cf:a9:9a:
                    70:65:80:12:bf:b0:83:d7:2a:35:f3:b0:1b:60:d9:
                    97:84:fe:d8:51:f6:73:27:2b:af:f2:5b:5a:1b:36:
                    37:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:05:97:C2:27:5C:E1:1F:24:EB:8A:B0:C6:E2:4C:5F:6C:42:60:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb006908-a0bf-32db-87b7-83754a81b8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.59.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:00:47:d6:65:4c:da:27:a2:67:e1:51:d1:3d:0c:17:eb:8c:
         83:d0:96:90:bd:6d:41:ac:9c:31:61:a5:9c:ad:df:58:fc:10:
         d1:d2:2d:00:f6:75:73:fa:81:51:95:9d:cf:bb:a7:55:7e:75:
         cb:5a:78:76:ed:e4:11:b3:87:73:c8:4b:66:fd:dc:50:d1:db:
         e0:a1:9e:13:31:f3:28:5b:9c:d7:1f:db:e8:81:26:4f:f2:b3:
         ac:cb:cf:b4:d0:84:8c:bc:8f:1d:ac:34:49:43:0a:39:b4:71:
         52:d1:a4:5a:41:62:19:e0:bb:37:8d:40:10:19:d2:c6:b8:06:
         38:7f:dd:0d:ee:52:b0:24:9d:89:a3:6f:94:78:cc:51:60:1a:
         d0:ff:fe:4d:1b:15:2a:45:25:89:e5:76:f7:5b:b2:b4:ee:f3:
         dd:0b:fe:ce:0c:bc:2c:f4:35:e7:51:9f:a4:12:25:28:30:8b:
         c6:24:3b:1a:23:a9:6b:fe:c2:51:79:0c:1e:6b:c6:84:41:e3:
         99:55:3a:49:26:ce:97:77:f4:f8:c2:79:59:60:5c:86:5c:e7:
         b8:76:e5:aa:32:07:8f:46:52:f0:f3:c2:df:9f:c4:2f:91:35:
         1e:5e:dc:cd:2e:03:c9:62:ff:d6:95:85:88:0e:1e:b5:5b:be:
         ff:d3:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:59:09 2024 by rpki-client on console-fra.rpki-client.org