Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fce6ffe0-0103-37c9-86a0-80da2329e2d0.roa
File:                     fce6ffe0-0103-37c9-86a0-80da2329e2d0.roa (raw, json)
Hash identifier:          YEWrJ89r/HUVgAYos6jHaKZR62onK/FdzCWld/OYgvc=
Subject key identifier:   2A:9C:08:D3:56:EE:81:22:81:DB:32:8F:87:16:99:C3:D2:6B:E5:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C79365AC523541D29C1A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fce6ffe0-0103-37c9-86a0-80da2329e2d0.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.42.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:93:65:ac:52:35:41:d2:9c:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=630b26b9-5379-4ed0-9780-8bed23f9343f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2c:c1:a9:17:b3:6f:a1:1f:97:02:db:4f:0a:
                    60:f1:a2:dd:2b:b6:11:3a:1b:80:05:92:f5:b2:82:
                    bc:b9:49:9f:63:fe:0c:04:ce:07:57:f1:29:4e:24:
                    bc:37:c1:dc:89:0d:af:94:c5:dd:b4:46:e4:7c:71:
                    b4:5d:d2:9e:62:c8:09:40:2c:57:86:4e:dc:1b:ca:
                    69:39:c8:9a:22:92:65:93:c1:5c:8e:2f:b9:ff:ca:
                    24:86:38:33:47:9d:0a:94:db:5c:7f:93:2e:d9:2a:
                    aa:e0:0b:81:6f:98:86:b3:ca:c2:d3:ea:94:21:d7:
                    c6:58:4a:1a:55:33:d2:05:bc:c1:21:c5:c4:3e:ce:
                    b2:91:e4:46:c8:e7:5f:d5:27:df:01:00:ed:5c:0b:
                    94:00:60:92:78:73:7f:9f:52:f2:d9:c4:63:2c:a2:
                    44:68:c9:3b:74:dd:f8:6e:1d:01:05:34:20:7f:df:
                    63:73:8f:20:48:b2:8b:82:23:da:11:39:97:7c:d3:
                    d5:61:9f:e0:9f:3d:1a:ee:d1:1f:ff:73:80:c0:9b:
                    10:be:87:dd:d3:03:be:4a:86:3a:ab:8b:88:7a:4f:
                    cc:fc:ab:c9:83:a4:0a:93:b7:43:fb:8a:99:93:81:
                    0b:c5:5f:53:0e:fd:da:af:9c:a0:89:bd:0b:9f:cb:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9C:08:D3:56:EE:81:22:81:DB:32:8F:87:16:99:C3:D2:6B:E5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fce6ffe0-0103-37c9-86a0-80da2329e2d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.42.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:8c:d4:d4:d1:9e:10:c0:c4:6c:aa:7e:cf:25:e9:a5:4e:
         6a:f7:f9:7f:c1:58:05:a1:55:e3:b7:b1:93:de:cb:ca:43:6a:
         53:d5:c8:de:7f:7e:c1:d8:c1:2f:51:54:ee:21:23:e4:0e:ad:
         16:c4:0c:5e:65:6f:01:88:bd:10:41:b8:5b:e1:fa:e2:b4:8c:
         7c:80:c5:69:48:f4:3a:40:8a:8d:5e:64:6d:49:08:9a:27:0b:
         5d:63:09:ce:4e:4d:06:18:f5:ee:0d:b7:d2:63:a0:ab:95:0a:
         e0:07:ff:b3:a3:c2:10:65:3a:38:11:65:d2:75:79:4d:99:33:
         fa:04:40:b8:7b:db:36:06:f7:94:1c:19:52:99:59:06:59:5e:
         00:d3:21:8d:1b:4a:c3:60:d4:b5:d1:67:6d:11:17:fa:cf:7b:
         92:1d:95:38:eb:d2:3f:67:ba:5f:e1:59:ab:12:1b:9c:b7:7f:
         1a:0b:35:f3:36:1c:86:51:cf:4d:83:d5:04:b8:f6:8c:e8:05:
         f4:73:0f:cf:62:59:a1:b0:9e:5d:ec:66:b8:1f:fd:dc:f3:2b:
         f0:74:1d:24:0c:ed:f0:a4:82:97:d4:5a:c6:dc:e4:52:c2:b8:
         db:b5:ed:28:0a:01:97:27:18:2a:f0:6e:af:27:e4:1a:53:fe:
         90:9c:70:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:17:12 2024 by rpki-client on console-ams.rpki-client.org