Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa
File:                     8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa (raw, json)
Hash identifier:          edh3BS4ibrkWWOq1iawQKq/JGtovS/FwtaYuDtdoG5M=
Subject key identifier:   B2:08:80:1F:24:09:8B:7C:42:A6:30:53:35:0D:E9:33:02:55:73:2A
Certificate issuer:       /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial:       010D0C9F432858475A763D88708672E0B92B6ADA
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     21663
IP address blocks:        68.71.224.0/24 maxlen: 24
                          68.71.225.0/24 maxlen: 24
                          68.71.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3d:88:70:86:72:e0:b9:2b:6a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=79759f74-5498-42df-9668-255c6d6c626d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:5d:8c:3f:d1:cc:ac:2a:77:81:71:d3:d3:
                    a0:96:34:0c:08:08:7d:45:02:ea:fd:02:08:a2:aa:
                    17:c0:a8:da:97:ea:f6:74:15:e7:e5:a6:31:48:18:
                    c7:09:4f:22:f4:af:53:72:f8:aa:16:c8:a3:e7:2b:
                    e1:35:02:2d:a9:b0:d9:c6:b7:41:4e:2d:e9:c7:b3:
                    fa:f8:ab:d4:2c:4f:96:cd:d6:25:93:a1:41:43:80:
                    ed:bb:66:ab:4a:8c:ee:f8:8b:8a:86:6d:1b:64:d9:
                    45:9e:56:26:50:8c:ce:f2:71:dd:61:30:1d:b7:ef:
                    81:a2:32:8d:63:68:6e:24:07:b7:1c:21:bf:53:dc:
                    62:4f:88:2d:07:c8:36:1f:e7:3c:b1:4a:cc:7b:eb:
                    a4:62:83:cc:e0:2f:3c:21:bf:20:bb:05:4e:1a:f8:
                    26:b3:f4:97:21:27:4c:4f:1a:db:16:dc:4f:62:c0:
                    5c:c5:74:00:4f:8a:b3:c7:5b:ef:0a:78:04:7d:a6:
                    dd:ff:c0:b6:82:b9:4b:64:52:14:06:73:d2:17:48:
                    e7:1b:ea:a1:ac:9d:10:ab:04:cd:0c:58:3b:c0:df:
                    85:53:92:a4:24:fe:5b:dc:cd:1f:fe:af:19:b8:01:
                    c9:3e:f1:aa:f5:fb:7c:ee:d0:d4:a5:fc:32:cc:fe:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:08:80:1F:24:09:8B:7C:42:A6:30:53:35:0D:E9:33:02:55:73:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl

            X509v3 Authority Key Identifier:
                keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.224.0-68.71.226.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d5:3d:c8:ff:ea:8b:a1:78:36:bf:22:1d:0e:3f:81:54:e1:
         20:cc:f7:ab:3d:77:22:a6:77:2c:1a:5f:f3:90:d1:e9:d2:bf:
         d9:c8:90:39:2d:2b:0b:2a:6a:6a:c9:84:fe:1e:8f:30:af:6d:
         fa:42:1b:e7:48:01:84:30:7e:e8:f6:30:34:77:89:1a:cd:7b:
         86:47:02:5a:cb:7f:fe:4e:c4:b4:61:fd:0b:0c:30:6e:de:54:
         80:2a:ca:d1:b7:19:61:92:86:56:ca:54:92:dc:e6:78:fa:22:
         86:ef:aa:ec:8b:ba:ca:54:28:92:55:d9:36:d1:dc:ed:15:9f:
         22:56:93:ee:68:2b:6c:d2:e9:9d:42:44:49:00:f3:9c:2f:60:
         6b:5a:9a:c8:b9:fe:eb:43:0b:a1:cc:b5:d0:77:3b:3e:47:cf:
         de:69:17:b9:38:8c:aa:9b:7c:4f:4b:0e:2f:ae:fb:52:a6:e9:
         99:40:36:43:ba:4d:87:77:c0:24:db:9a:12:eb:fb:36:93:a7:
         43:db:2e:28:7f:b4:eb:6e:c9:9e:17:45:4d:ee:06:88:91:79:
         b8:59:4b:e7:aa:9b:4d:51:7d:2b:3f:89:7e:48:e7:ff:97:eb:
         c6:d2:74:73:ca:14:64:79:ee:29:5c:64:b1:5b:b0:fb:31:52:
         8e:61:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org