Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a03aef01-0070-379b-81cb-1850b2ef308d.roa
File:                     a03aef01-0070-379b-81cb-1850b2ef308d.roa (raw, json)
Hash identifier:          ZWIpH2mz9n7Kme9S0yHiWcyyAo4RyCi77Deeb81XCLI=
Subject key identifier:   51:D5:6C:83:4F:E6:3F:6A:52:8D:3D:05:7D:84:0E:67:69:C4:CE:84
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285845A8E93F497CF67465402AD3C0
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a03aef01-0070-379b-81cb-1850b2ef308d.roa
Signing time:             Thu 25 Apr 2024 05:51:50 +0000
ROA not before:           Thu 25 Apr 2024 05:51:50 +0000
ROA not after:            Wed 24 Jul 2024 05:51:50 +0000
asID:                     3651
IP address blocks:        68.24.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a8:e9:3f:49:7c:f6:74:65:40:2a:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Apr 25 05:51:50 2024 GMT
            Not After : Jul 24 05:51:50 2024 GMT
        Subject: CN=024a025a-c0ff-4375-868b-836f0475a192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:66:e6:9a:57:a9:38:a8:9f:41:f9:0f:a1:
                    79:39:70:4b:07:a9:85:ce:0d:da:59:5d:85:13:b6:
                    e6:3b:b7:47:9c:25:4a:11:39:26:b5:ac:f3:5b:9f:
                    dd:56:13:3f:3f:38:20:65:00:4c:9f:76:a4:8f:1c:
                    a9:e9:71:18:db:1c:cb:94:29:07:69:1b:7e:47:c3:
                    29:12:fa:64:31:8d:b9:e3:ed:39:3f:44:68:53:16:
                    e0:6e:47:af:ba:13:c1:cf:cf:c1:99:e8:15:68:45:
                    06:b9:a7:fe:f0:64:8f:16:6e:84:65:5e:f9:3e:e1:
                    d5:90:7a:0f:53:73:83:c4:a4:8e:58:6d:38:39:02:
                    aa:b2:5c:1f:63:4c:d4:c8:5a:d9:08:32:53:49:71:
                    a7:8b:c2:ad:77:24:90:1e:5f:14:61:60:61:56:1f:
                    9f:5d:bc:8c:30:8b:50:43:d0:fd:6e:ba:94:fc:52:
                    52:f3:3f:80:b0:a9:05:be:a0:a5:cb:d5:7f:09:6e:
                    da:6c:03:51:5a:21:73:91:d7:11:62:34:1c:4d:06:
                    b2:3e:80:19:3f:77:9c:ab:37:77:bb:0f:45:f2:cc:
                    8c:4c:c1:d7:c7:24:25:78:3d:7d:ba:b8:c6:a7:c1:
                    a0:01:f0:f1:74:0d:1c:ef:85:4e:36:89:63:12:a7:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D5:6C:83:4F:E6:3F:6A:52:8D:3D:05:7D:84:0E:67:69:C4:CE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a03aef01-0070-379b-81cb-1850b2ef308d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.24.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:60:18:9e:0f:06:4e:3c:48:ba:a7:63:1d:53:70:3b:13:59:
         1a:4a:6d:ed:0d:96:21:aa:06:63:9c:c6:f2:70:0a:3b:d3:77:
         ef:05:bf:18:15:15:91:8a:07:7e:63:61:c5:8a:9f:27:9e:8f:
         25:5f:43:9f:5d:56:aa:05:4c:71:8c:85:b3:c8:3c:8d:2f:a8:
         91:f6:57:df:3c:03:a6:57:65:2d:1b:e0:e5:de:63:ec:3c:44:
         1d:29:cd:48:53:88:41:cc:a2:f0:5c:f6:de:67:bf:76:5b:14:
         a8:55:d9:2c:54:e6:5e:19:ca:40:cd:09:40:88:71:01:e8:37:
         ed:1d:42:6a:b7:f9:87:3e:7d:d9:13:94:6a:60:80:78:6f:85:
         d7:06:77:52:c0:98:c3:c4:ee:9b:07:18:4f:66:64:3b:bc:56:
         54:f6:ea:4d:77:f9:2c:18:88:08:3d:3a:c0:fc:79:2b:f4:96:
         0b:fe:b6:fa:8f:d8:94:5b:41:80:df:ca:0c:2a:a1:6c:e3:59:
         f6:96:7d:0e:1f:ae:75:27:10:40:5b:9a:20:c9:0d:4e:42:d7:
         27:33:24:4a:b4:4a:96:85:e0:ca:72:80:0c:38:37:4a:c9:76:
         51:d6:0b:a5:b5:53:b4:ad:cf:d4:94:ed:2b:13:29:f4:e4:6d:
         07:1d:b6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:11:06 2024 by rpki-client on console-ams.rpki-client.org