Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc9f9c95-4860-389a-90be-dbd470b4588b.roa
File:                     fc9f9c95-4860-389a-90be-dbd470b4588b.roa (raw, json)
Hash identifier:          nmZ5sHnjhi/yK47j+CotI4QYfBFlIeZv4ctKuPxDGiQ=
Subject key identifier:   2C:8E:E3:64:53:DF:A2:3A:25:25:C5:A2:B9:F4:1E:8C:A6:77:AE:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAD6E12F2A0CED97D624300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc9f9c95-4860-389a-90be-dbd470b4588b.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7016
IP address blocks:        68.87.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:6e:12:f2:a0:ce:d9:7d:62:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=59682880-1039-4d95-9a29-a60b1b8a6d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:7f:13:76:b7:4b:c2:98:18:80:64:41:ec:
                    d7:d9:19:7f:70:7a:4e:0a:5a:78:48:77:89:f8:b7:
                    51:d9:53:9f:95:e2:be:19:39:2c:a3:66:5f:d0:ef:
                    eb:fb:11:e6:d2:cf:d1:c7:63:8c:43:fe:12:d6:68:
                    34:51:be:23:c2:c4:00:e0:dd:e6:5b:13:07:af:bd:
                    37:53:cf:34:73:51:c0:ed:e2:96:90:b9:e3:4a:74:
                    18:ea:a3:a0:af:66:24:8b:b6:1d:52:3e:3c:2a:2d:
                    e5:7a:60:41:57:2b:16:e2:62:42:f0:c0:80:64:e8:
                    ca:e7:4f:fe:08:b5:3c:87:1e:d4:5c:54:8b:84:d8:
                    18:be:8e:71:cd:29:ed:47:4d:11:47:bd:b2:b8:4a:
                    f7:10:78:71:a6:21:68:f8:f0:74:c4:8c:a8:42:b1:
                    17:f0:0c:13:2a:05:ca:88:f0:86:37:d7:bb:28:8d:
                    cb:8c:c5:2a:e3:dc:d6:1f:70:e0:bf:d1:b9:85:a8:
                    5f:ba:b8:56:b7:7c:b2:6b:5f:04:25:4f:ea:fd:ae:
                    0f:9b:e3:73:81:65:be:df:e7:7c:70:92:31:54:18:
                    cc:86:9d:d4:6f:28:95:cc:78:ab:23:6e:13:7f:13:
                    b4:ae:b4:2e:41:24:9c:4b:64:96:34:89:30:98:e1:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8E:E3:64:53:DF:A2:3A:25:25:C5:A2:B9:F4:1E:8C:A6:77:AE:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc9f9c95-4860-389a-90be-dbd470b4588b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0c:5a:a7:c1:ca:59:6f:6a:69:3a:ec:c3:a4:b6:8c:f6:52:
         6d:f0:ae:8a:90:17:e3:04:11:7f:4e:0e:67:6e:24:bf:a5:70:
         35:9b:7b:bb:02:4b:3b:31:d7:34:66:80:1f:6a:76:06:97:55:
         98:28:e7:2d:79:47:3c:cb:93:c5:3e:e1:7c:77:58:e2:1a:a9:
         5f:09:66:54:89:41:ec:41:d6:2a:a0:13:20:d5:8d:25:63:27:
         c8:a5:34:d1:ad:0e:11:bb:6c:47:b0:36:92:16:67:15:4c:ee:
         5f:8d:36:4b:88:de:ca:2b:d5:49:6b:c0:f2:ff:a0:19:ab:df:
         27:d4:d0:ce:13:8f:87:90:a9:af:4b:c3:ff:04:37:86:8d:3f:
         49:0f:97:93:4a:4b:87:c0:ca:a9:71:ea:b3:31:d9:04:b1:17:
         2a:3c:d9:e6:1b:b9:0f:96:e4:34:76:a7:3f:3c:1a:ea:70:25:
         ba:3a:14:f4:e7:04:5d:d5:24:35:57:4e:24:46:45:41:47:2c:
         3d:c0:6b:a1:e9:6a:04:31:12:32:25:a6:ce:ff:90:90:c9:3d:
         a5:49:21:66:03:59:d4:1b:35:57:fc:b9:52:18:10:bc:a3:93:
         b6:32:15:81:ea:60:de:41:43:c2:a0:42:77:cd:c6:46:1b:14:
         a8:3b:05:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:59:15 2024 by rpki-client on console-fra.rpki-client.org