Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02940cc7-c280-35ec-b036-80e54eedbd26.roa
File:                     02940cc7-c280-35ec-b036-80e54eedbd26.roa (raw, json)
Hash identifier:          hZKxecPKuE4Gd9h51GUqgenCu4P1GzTjhe9eRxRxAAw=
Subject key identifier:   1B:8F:C3:F6:AF:28:46:ED:AB:3C:FA:7C:E3:DF:0D:7E:80:6D:90:03
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473AD18F8F8E19097D96B7F700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02940cc7-c280-35ec-b036-80e54eedbd26.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:d1:8f:8f:8e:19:09:7d:96:b7:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=137b038b-4b8a-4831-8142-a9a6b6306b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:b2:ff:8a:2f:cd:3f:91:e0:e2:4f:dd:76:
                    e5:61:aa:c8:68:d7:c2:88:ff:19:c0:6f:81:94:da:
                    f6:eb:5f:83:77:d8:52:94:fd:b2:46:17:81:5c:15:
                    63:af:0b:13:b6:04:dd:70:ed:f2:32:44:80:f7:0c:
                    be:a6:54:61:32:36:72:d8:1e:ad:ba:4d:cf:18:bb:
                    34:0a:c2:88:f5:49:de:62:cd:b4:bf:9b:62:27:9b:
                    17:0a:2e:d2:a3:5f:ec:07:e5:33:33:73:a6:35:6c:
                    f2:11:8b:54:87:05:76:e7:ef:28:70:8a:9e:f1:52:
                    02:9b:11:d8:98:45:b7:db:d6:ce:3d:28:16:b5:8e:
                    0a:06:b8:14:65:f7:34:4a:8f:2e:c8:cb:97:10:d8:
                    c2:ad:b2:4d:98:78:a6:54:52:93:8f:c2:16:8b:27:
                    18:ea:e5:17:a4:13:06:88:67:d4:7e:df:eb:c7:24:
                    45:83:a2:55:af:07:02:0e:1d:24:fa:8a:cf:aa:1a:
                    9c:9c:f7:6d:00:ea:89:97:0c:75:39:63:59:39:c7:
                    b3:0c:dc:d7:bb:b7:ce:2b:8d:7d:d5:a2:c0:74:e8:
                    ba:e4:5b:5f:f7:ce:7c:99:a1:28:67:dd:17:5f:e4:
                    71:ad:6c:c0:7b:31:dd:5b:a6:7a:26:d9:84:ba:e0:
                    d0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8F:C3:F6:AF:28:46:ED:AB:3C:FA:7C:E3:DF:0D:7E:80:6D:90:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02940cc7-c280-35ec-b036-80e54eedbd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:30:93:b3:09:5f:4a:56:ec:77:b7:77:ff:29:2f:9a:cb:10:
         0a:53:36:82:c5:04:e2:3e:a1:92:49:bc:cd:39:5d:c9:ee:0e:
         5c:59:91:f0:8f:2c:8f:24:b3:65:b6:69:19:8a:bd:95:9c:4b:
         79:d7:87:b2:59:36:4b:32:97:e5:82:7c:ec:d8:b3:2c:15:89:
         61:a4:7d:fe:65:1d:eb:7e:18:d6:a0:55:aa:9d:58:39:47:4e:
         0b:54:8d:61:0f:ea:73:ed:d7:34:bb:77:0b:2d:a6:99:fc:32:
         81:a4:87:1f:df:1c:26:72:61:0b:38:82:6d:0e:3e:51:e5:87:
         8c:04:6b:8c:79:17:b6:39:11:4a:28:93:23:6a:18:78:38:13:
         c3:62:2e:4a:8b:65:c0:27:d1:d4:ea:33:9f:3d:59:ae:50:a8:
         f5:e8:d5:ff:e1:c0:5a:fc:7f:84:cd:58:7e:1f:1c:e2:1a:d3:
         2c:f8:ab:a0:77:84:8f:d3:ed:83:2f:b5:ca:77:0f:e1:92:f1:
         f5:64:ff:10:c3:1c:f0:86:d5:1b:39:8d:7c:4c:47:8b:e5:4d:
         21:6a:50:a3:27:e4:07:b8:7f:86:c7:fa:df:93:4a:f3:c2:a1:
         a6:2e:3d:72:94:90:2c:e0:04:a7:b2:e3:e1:a0:ff:53:1c:d9:
         f1:bb:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:52 2024 by rpki-client on console-fra.rpki-client.org