Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa
File:                     8f83a025-4c20-3f17-8d78-fe614226ddcb.roa (raw, json)
Hash identifier:          +nXCWhl2XzsSJGWHsg1iLNrb8apfmmLX9BmwLnzk+ic=
Subject key identifier:   64:18:79:29:BE:8C:37:E9:50:86:DD:12:F4:1B:C6:DE:39:1E:86:4B
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F43285845CE08F64218D59E4B8868C480
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394285
IP address blocks:        68.68.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f6:42:18:d5:9e:4b:88:68:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=2ead3c7e-2af0-4cad-bc6e-e5be4cb6ff5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:3a:5d:f1:b8:ff:c5:ac:96:bf:74:12:8c:
                    6b:2b:88:4e:67:66:8b:55:db:23:e9:11:aa:d1:6c:
                    b1:ee:1c:6d:5f:15:ad:eb:4c:8f:02:f7:83:eb:68:
                    2f:f9:86:32:4b:da:3e:80:a4:a1:f1:22:a1:b3:09:
                    19:00:44:2a:d3:22:64:b2:76:f6:12:eb:19:ac:72:
                    cb:86:02:e9:50:82:29:2f:d7:28:74:7f:bc:79:ab:
                    d6:68:ba:8f:f1:7d:82:86:d2:ef:42:27:41:68:f0:
                    eb:e9:1c:4c:03:23:95:c5:64:c4:e7:1a:0f:17:72:
                    83:4c:68:3d:24:96:eb:27:c8:77:e2:24:ce:27:25:
                    3d:d5:d2:cf:8d:20:94:3e:6f:b1:54:f9:82:e0:2a:
                    d9:49:74:10:29:a1:08:ca:71:df:f4:f7:bf:e7:f4:
                    94:47:0d:68:a5:7e:6a:96:88:22:50:f3:4c:e4:6d:
                    8b:07:c1:95:12:ef:da:56:36:d6:cd:c1:ed:fb:a5:
                    87:ba:5a:b4:78:cb:79:ca:3d:20:82:8c:e5:8b:66:
                    48:bf:c2:00:22:a7:54:b9:08:f8:bd:6a:27:0e:cf:
                    34:0a:f9:2a:c3:a7:6a:c6:b7:79:b7:dc:34:35:33:
                    c4:15:39:a7:c4:3a:c2:3c:3e:b9:5a:8e:ae:6d:9b:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:18:79:29:BE:8C:37:E9:50:86:DD:12:F4:1B:C6:DE:39:1E:86:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b9:a6:76:9b:b6:7d:c3:6c:a0:97:a7:f8:de:55:1a:33:71:
         b5:c4:aa:32:e7:cb:74:26:7d:94:3f:22:7d:82:7c:dd:58:e0:
         cb:4d:2c:0d:5d:1e:f0:63:32:d3:15:e7:74:d3:f3:00:2e:a6:
         5d:74:59:d9:0f:ff:19:e4:08:b7:23:da:e1:d9:41:81:8e:3a:
         bf:5a:77:13:cf:66:cb:2b:c1:f6:6d:bb:d7:65:e6:35:eb:6c:
         1e:b5:dc:62:1c:87:fe:d2:21:8b:ad:29:a8:aa:64:f7:24:d0:
         31:8d:57:71:be:5e:04:3f:fc:9d:8f:df:70:67:c9:88:dc:c8:
         40:a0:78:b1:77:d1:06:e4:94:77:d5:29:9a:1e:60:0a:8f:35:
         31:c6:fc:0d:fb:d2:45:95:3d:41:50:c4:fb:5f:d7:29:d2:9b:
         74:07:e5:71:dd:46:a2:05:64:ca:f0:72:94:74:35:94:77:fb:
         a8:7c:f7:87:55:5c:d9:ad:73:9d:dd:95:02:65:88:b0:2f:ad:
         31:1a:ca:44:95:97:80:3e:cb:25:07:c9:79:1b:d8:c3:0f:32:
         04:48:98:f1:c6:59:bd:02:aa:ba:da:e3:55:89:bf:95:a1:b5:
         eb:34:1a:39:ea:3c:50:a6:a9:e7:79:2b:5b:31:e0:4f:10:f8:
         e2:94:ff:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:35:20 2024 by rpki-client on console-fra.rpki-client.org