Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/301f747c-f596-37f9-9cd1-754db5fcf638.roa
File:                     301f747c-f596-37f9-9cd1-754db5fcf638.roa (raw, json)
Hash identifier:          6XW6Fu5hlgFLPRKmH3djvXOUgwh4JXDkk7XkJM2bByI=
Subject key identifier:   95:28:38:B5:02:0E:0E:87:4A:5A:50:51:8E:4A:B3:BF:F3:B5:F4:25
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285847686B8EFA90A0AB9EE2565940
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/301f747c-f596-37f9-9cd1-754db5fcf638.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     21928
IP address blocks:        68.24.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:8e:fa:90:a0:ab:9e:e2:56:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=08b47d89-6436-43b0-bb54-33f9e80ccbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:46:f6:a8:04:d0:ed:ff:bd:86:db:60:08:
                    d8:2d:7b:81:ed:13:92:d4:ca:42:6b:68:fc:b8:6a:
                    1f:f8:c9:12:c3:7a:21:ad:dc:11:92:dd:78:f4:2d:
                    40:dd:7d:7a:ff:96:c7:56:f7:48:57:aa:12:ba:84:
                    bf:34:3e:13:f8:29:3f:27:e1:2d:97:74:2b:e2:00:
                    83:a6:b8:78:46:07:85:85:3e:9d:33:48:02:4a:e7:
                    0f:2e:25:57:08:c0:d7:7c:f3:19:97:61:86:24:d6:
                    3b:aa:72:98:3f:df:22:3c:6a:c2:35:e6:55:c3:5c:
                    f1:d6:f8:ca:75:c7:c2:3d:96:f0:69:26:1d:3a:5c:
                    9b:f4:3c:76:75:48:44:32:ff:ef:b3:3d:88:4e:fe:
                    62:7a:b9:4f:40:88:20:7c:f2:15:0a:fc:38:99:9d:
                    9e:ca:24:a1:76:a8:83:e9:9c:46:a4:4b:d7:87:1e:
                    4b:1d:17:9c:41:ad:d2:ac:21:96:7a:cc:ff:94:45:
                    94:a2:76:48:cf:13:38:5a:d6:c6:88:2c:e9:a2:80:
                    50:92:b1:cf:4c:94:76:cd:09:60:a7:01:e8:eb:0b:
                    9c:f8:b8:3f:24:00:02:8f:99:c2:fc:85:b3:ba:b5:
                    4e:93:97:f0:27:32:89:49:18:04:d9:1a:ec:cf:c2:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:28:38:B5:02:0E:0E:87:4A:5A:50:51:8E:4A:B3:BF:F3:B5:F4:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/301f747c-f596-37f9-9cd1-754db5fcf638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.24.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:5c:eb:ca:c7:9b:c5:81:c9:f8:db:e5:aa:e6:42:e2:31:1d:
         de:45:31:1e:15:ad:b1:99:87:e0:94:d3:4f:ab:f7:13:99:09:
         c4:91:93:da:54:22:d7:da:1f:3e:74:16:29:87:26:4d:9e:84:
         80:85:a8:5b:26:ca:d9:70:c9:5b:98:78:92:f5:de:13:f4:3c:
         c7:50:fb:a7:29:c6:25:b8:00:90:11:d7:51:eb:e2:a5:7e:aa:
         41:4e:34:09:d1:e4:02:02:69:be:3a:56:95:88:55:75:a3:e6:
         b8:62:cf:f4:3b:9f:74:8f:63:a0:ae:e8:74:21:80:cb:92:fe:
         14:02:72:44:fd:01:6c:4c:55:91:ab:17:da:33:2b:5b:19:3d:
         a5:0f:f5:dd:e2:f5:fc:e4:ba:de:93:dc:e6:de:27:4c:05:5c:
         2e:28:8a:0e:f1:ff:42:8e:b5:87:48:38:2b:a1:21:f9:61:b9:
         29:b0:d1:87:32:44:90:d7:d1:6e:90:d7:9b:68:6e:f4:de:9c:
         6a:96:4e:be:f5:2f:15:3f:cd:fa:d1:77:71:a0:73:48:27:59:
         fd:77:b8:40:d2:fa:0d:9b:f7:9d:ed:39:5b:02:fd:87:62:b6:
         cc:38:ac:8d:b5:a0:2a:04:d6:3b:47:c1:16:ec:09:7c:f5:3e:
         b5:70:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:26:38 2024 by rpki-client on console-ams.rpki-client.org