Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa
File:                     829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa (raw, json)
Hash identifier:          tZ8wQ3IKjZsRy2hdGUcTShLPMwp84lMsGks093P2zo4=
Subject key identifier:   8D:93:99:27:94:27:D7:A0:37:0B:BB:31:3C:3F:3F:4B:09:A7:D6:A5
Certificate issuer:       /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial:       010D0C9F432858475A763DACC38625B658FF8AC0
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        68.71.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3d:ac:c3:86:25:b6:58:ff:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=51b85271-5d4d-4eea-a95d-a45360e89945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:72:8c:1d:c2:49:f3:4d:b6:df:12:1a:e3:
                    a0:ea:9e:af:7e:53:3c:95:27:d4:68:81:4f:47:d9:
                    f3:9c:55:26:23:17:cf:dd:26:c3:b2:93:34:34:e4:
                    b3:f1:ac:75:22:f4:35:7c:67:2a:b3:0d:67:c6:68:
                    49:21:7b:9d:7e:44:b3:13:47:81:8e:f1:16:8b:7e:
                    a3:8c:dc:ca:71:f8:5a:0c:22:4b:7f:0f:59:6a:67:
                    48:b2:bb:d5:f8:25:cc:18:ec:0d:05:a0:8f:34:9c:
                    f2:18:c2:43:77:7f:8e:40:11:59:9e:f3:89:30:f0:
                    9c:5a:b8:15:76:d5:96:a6:30:8b:98:de:b3:37:87:
                    50:d1:b6:2c:86:fa:98:1f:a6:40:e2:d6:9a:b3:74:
                    2e:7f:3a:c0:37:ab:3c:ff:a5:b1:ce:88:1a:ca:dc:
                    0b:88:c4:13:74:9b:51:94:a5:fd:07:6d:32:ce:24:
                    34:9d:3f:65:a8:f3:a5:14:d1:93:ee:5b:62:43:29:
                    cc:be:84:ec:df:d7:06:16:c1:34:0b:db:b0:0a:3f:
                    bd:9d:0c:0d:11:73:ad:6d:0f:1c:e0:6b:73:ea:99:
                    af:35:97:57:4f:99:ff:fc:37:a6:01:13:57:22:b4:
                    9b:c3:83:f9:ec:aa:85:6c:c6:36:8c:3f:79:a9:9d:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:93:99:27:94:27:D7:A0:37:0B:BB:31:3C:3F:3F:4B:09:A7:D6:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl

            X509v3 Authority Key Identifier:
                keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:9e:d6:bd:d4:32:43:5e:61:cd:bb:8d:0b:c7:b3:05:55:
         36:97:7b:93:e9:ec:30:88:ae:09:5e:9b:fa:82:20:58:bf:f4:
         83:83:bb:13:28:31:54:26:44:49:63:e2:4e:fb:36:60:44:42:
         60:c0:7d:c9:3e:7c:ce:16:34:16:4f:7a:8f:7b:ee:ec:32:f5:
         dc:0a:82:80:20:99:b8:d0:51:4e:ef:70:4f:6a:eb:a1:70:52:
         41:24:c8:60:8a:60:55:d3:92:5d:1e:44:b1:90:91:be:d3:a5:
         f9:9e:26:03:00:43:96:f6:5d:64:25:1c:71:a7:c5:bd:f7:a0:
         b2:fb:26:55:18:ba:b3:72:e6:48:4a:03:09:6c:ca:dc:8f:d2:
         0a:d9:ae:7d:67:f4:f0:ac:7c:a9:14:5e:7c:0b:b7:ad:25:87:
         25:a3:29:a4:cf:12:be:ae:9f:6c:0d:83:78:77:0a:b9:7e:ce:
         86:2b:80:fe:05:0a:72:af:7d:57:1e:bb:37:6a:34:96:8f:f9:
         74:c5:fe:2e:d5:82:cf:e8:98:f5:7b:62:44:a3:20:cf:0a:c0:
         7d:63:a3:37:65:02:f5:ec:58:48:3d:b4:07:da:f6:40:cf:17:
         62:55:88:e2:03:71:eb:f1:fa:b6:ea:15:20:44:58:1d:a6:2c:
         02:2a:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org