Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/68280e69-39b4-3c53-acac-adb2b940162d.roa
File:                     68280e69-39b4-3c53-acac-adb2b940162d.roa (raw, json)
Hash identifier:          BjEYp03s6BkWy/I8p0t2cKWK99RQO2zQc2tL+Ri3Z+o=
Subject key identifier:   9C:31:3F:10:D6:82:95:AE:A1:74:0E:DE:B7:4A:24:93:C3:B2:D8:7C
Certificate issuer:       /CN=a4725f7f-a2fe-4f08-bf13-7c0246b12935
Certificate serial:       010D0C9F4328584750B0A967A7B466437982C640
Authority key identifier: 36:94:80:A4:2A:2D:19:AD:B5:61:F2:70:11:24:5F:DE:8D:19:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/68280e69-39b4-3c53-acac-adb2b940162d.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     1099
IP address blocks:        67.217.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/a4725f7f-a2fe-4f08-bf13-7c0246b12935.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/a4725f7f-a2fe-4f08-bf13-7c0246b12935.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:a9:67:a7:b4:66:43:79:82:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4725f7f-a2fe-4f08-bf13-7c0246b12935
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=7c305297-d9dd-47d1-823d-7901b23222bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:f2:f9:37:99:e0:f8:ca:43:a7:d7:97:97:
                    cc:8f:38:b0:78:8c:ea:f2:a0:1d:4e:dd:50:74:20:
                    5f:8c:7f:25:e7:ce:75:c3:5c:c6:0e:db:12:b3:10:
                    10:85:a6:28:7b:90:ae:39:8a:83:cb:7a:53:69:cb:
                    f1:98:c2:93:d5:e5:39:cb:7a:82:6f:a3:69:3d:68:
                    72:e5:fe:e2:c8:c4:a0:6b:af:5a:0b:1f:6f:fd:57:
                    6a:48:51:10:ab:6f:66:47:79:16:13:af:ee:d2:3d:
                    f1:89:e6:e7:55:67:76:2d:64:b2:e6:84:6e:23:ce:
                    50:e8:45:e0:b2:16:8a:58:50:22:87:fd:12:60:68:
                    9a:97:3f:21:d6:c5:67:cc:0e:52:73:b7:d6:a9:b0:
                    d5:70:34:e0:3f:17:f6:9b:3c:0b:4c:e9:e8:18:c7:
                    75:be:de:54:79:19:13:4a:63:ae:fb:a2:b8:86:23:
                    35:f2:5f:23:66:f2:e5:66:8d:eb:e4:e8:d7:31:b0:
                    b5:f9:c3:fb:02:1c:f2:c8:a7:93:2c:7d:ab:c4:07:
                    85:74:09:fc:39:40:4e:2a:78:27:83:a4:5c:4f:bd:
                    e8:fa:59:f8:89:e9:c8:e4:a0:71:07:c9:d3:4d:2b:
                    f0:0c:df:47:6f:a7:cb:0d:95:2f:b1:df:05:7d:28:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:31:3F:10:D6:82:95:AE:A1:74:0E:DE:B7:4A:24:93:C3:B2:D8:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/68280e69-39b4-3c53-acac-adb2b940162d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935/a4725f7f-a2fe-4f08-bf13-7c0246b12935.crl

            X509v3 Authority Key Identifier:
                keyid:36:94:80:A4:2A:2D:19:AD:B5:61:F2:70:11:24:5F:DE:8D:19:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4725f7f-a2fe-4f08-bf13-7c0246b12935.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:a9:48:7e:b9:64:af:c7:83:67:a7:e3:26:9f:fd:d8:c7:
         60:37:bd:82:e9:91:99:c8:7c:39:78:2a:55:3c:e1:3d:b4:5d:
         4e:76:20:61:97:59:fc:0e:37:2b:5c:4b:7c:32:46:dd:7f:04:
         74:2c:72:f6:9f:d8:f4:59:a7:26:5e:9e:1c:d5:d8:14:0a:19:
         d8:53:1f:f2:38:79:8b:f3:0e:68:84:b4:6c:0f:b2:bc:1a:51:
         10:5c:c0:5a:12:f0:66:05:68:6b:c0:e9:42:99:b4:6a:df:cf:
         77:03:43:30:98:f2:b8:9d:24:8b:e8:95:e7:42:ee:b3:69:9d:
         04:ed:dc:36:a6:d9:08:c4:20:c2:43:16:af:d4:13:3c:64:02:
         44:db:b8:13:8a:00:6a:42:69:91:67:9b:51:5a:e1:e9:45:8e:
         ea:d4:a2:2a:82:21:13:e7:e7:17:66:9c:e8:06:e9:7d:65:50:
         f3:80:f7:5a:73:17:42:ff:43:ab:e9:e2:50:94:cf:77:81:7f:
         3c:84:b3:a4:81:a7:a8:2b:64:98:b4:b0:10:11:a6:9f:e6:78:
         c9:44:22:2a:b8:10:9f:b3:4d:16:4e:66:3c:6a:42:9a:ae:c2:
         0c:2d:8e:01:db:00:4e:55:ac:95:1b:45:bd:24:94:b1:48:2a:
         5e:04:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:46:07 2024 by rpki-client on console-ams.rpki-client.org