Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/606b610a-0d55-381b-914e-8871288fd27c.roa
File:                     606b610a-0d55-381b-914e-8871288fd27c.roa (raw, json)
Hash identifier:          TygkJ+B81cyUVAfXd184ceLG8D1UMgwRgXrh//zyZWo=
Subject key identifier:   0C:62:F1:91:C8:E3:27:FE:33:27:CB:9E:E0:63:B3:11:A6:8C:F4:E8
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F432858452C1D3D770C0671FA7861A200
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/606b610a-0d55-381b-914e-8871288fd27c.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     21928
IP address blocks:        68.240.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:3d:77:0c:06:71:fa:78:61:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=bc69caa2-3860-4733-a846-dd0b9c17d0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:91:ae:b4:66:30:0d:c4:05:45:40:52:55:
                    f3:23:55:03:65:76:63:08:3d:e7:5a:3e:94:ca:db:
                    08:b6:93:82:37:59:00:78:77:ef:ce:1c:ff:d8:46:
                    af:cf:67:70:fd:83:98:00:81:b4:de:59:2c:f6:9b:
                    2a:c8:c1:d2:dc:3a:ef:e4:e0:b6:54:92:c0:fa:83:
                    77:4f:38:71:35:51:0b:38:05:0e:69:85:82:fd:05:
                    d0:ca:5e:92:55:9b:d5:82:a5:2e:93:a9:0f:3a:55:
                    93:57:20:f1:2a:d7:0a:fd:31:0c:77:77:65:48:43:
                    f1:bb:f7:05:da:36:16:f2:73:51:52:f0:e2:a6:35:
                    58:f1:74:3a:09:05:eb:0f:5f:26:10:fd:08:92:2b:
                    22:80:85:e9:67:42:7d:4d:12:1b:92:a3:10:ac:d0:
                    88:3c:d3:66:b3:14:4d:6d:a9:b1:dc:49:30:5c:ca:
                    31:31:1c:96:37:75:73:55:b5:30:82:bb:fb:1f:98:
                    0f:16:b6:49:58:8a:dc:f6:da:0c:cb:ee:d0:1f:0c:
                    f1:d7:ab:fc:a3:9e:63:ed:6b:0f:f6:38:0b:f6:c2:
                    c9:c8:c9:9a:45:57:14:69:8e:24:1f:4a:1d:9c:e5:
                    6c:e3:6b:e1:11:ed:67:0c:58:1f:c4:a4:43:ae:1c:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:62:F1:91:C8:E3:27:FE:33:27:CB:9E:E0:63:B3:11:A6:8C:F4:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/606b610a-0d55-381b-914e-8871288fd27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.240.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bd:fb:ca:9f:01:c0:6b:a4:a8:e8:8e:aa:03:e9:a8:ba:6b:
         4b:35:d1:96:41:cf:2d:c2:f7:f2:7b:df:73:8f:f1:fc:d5:4b:
         ce:c2:ae:73:6c:05:58:b9:f7:74:08:bc:4c:93:39:5d:0d:25:
         83:71:72:a4:7d:d1:ab:40:c0:15:d0:16:c1:fe:ff:36:7b:e2:
         b0:cf:4a:5e:0d:0f:60:c3:7b:25:4b:a8:22:8e:7e:6e:8d:f6:
         5c:44:24:5f:9b:1f:7f:73:a7:08:f6:53:65:93:d7:be:12:58:
         42:56:2a:1e:90:85:17:76:0e:e0:3f:51:bf:7f:27:c6:01:b9:
         e7:55:ce:6c:f0:5e:a4:83:27:59:f5:42:b9:fb:0f:03:09:fd:
         a8:83:04:1d:36:c4:84:1c:12:c2:50:63:ef:0b:ff:18:14:72:
         a2:8a:09:5a:f0:aa:33:95:3b:3a:fb:a8:8b:86:e6:d9:30:23:
         19:e7:3b:6c:48:95:e0:d7:aa:fb:57:fb:c7:59:4a:24:95:2f:
         cc:a5:43:3d:cb:8a:e6:1e:ad:45:e0:9c:2b:ec:c1:91:28:01:
         af:1b:53:3c:a1:89:21:d2:00:99:fe:d6:46:ef:d0:96:62:86:
         ba:ba:fb:53:26:95:73:06:55:3a:17:78:5e:41:ad:00:70:c6:
         1f:97:0a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:48:45 2024 by rpki-client on console-ams.rpki-client.org