Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa
File:                     f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa (raw, json)
Hash identifier:          pdckCZjdR5zU/qAcRCbQMt9MTCaxFKXN0ffdXZ673vM=
Subject key identifier:   C0:8C:D2:AC:DE:8B:C1:8F:7A:34:F5:E1:A6:DA:FA:55:FD:68:19:D7
Certificate issuer:       /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial:       010D0C9F43285845AC88C736B19A38387D6C5F80
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     14618
IP address blocks:        68.71.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:c7:36:b1:9a:38:38:7d:6c:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=0694c7f5-2d43-410e-93dd-ddad0f9959d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:97:05:d5:b8:84:1c:27:d1:e4:c2:61:93:
                    13:f9:aa:6d:1c:42:53:41:47:0d:e9:79:72:c8:12:
                    98:d0:c1:40:a0:d4:67:0d:3c:5e:db:d8:84:9c:2e:
                    9a:e7:65:60:78:df:ba:ad:27:e8:3a:44:93:87:3e:
                    a4:36:c1:19:45:e1:d2:0d:71:76:01:70:a8:e2:13:
                    24:6d:d6:65:3f:2a:61:5f:af:3d:0f:47:01:82:cd:
                    b3:08:30:40:d5:85:ed:38:df:35:5b:38:e2:69:25:
                    76:9f:19:e8:27:a6:54:fd:7b:d5:76:6e:e2:7a:01:
                    bf:87:58:e3:c1:31:ca:59:75:8e:36:e7:a0:84:a6:
                    98:ef:81:40:e2:be:74:14:fd:34:22:56:63:28:3e:
                    db:73:f5:92:ba:e9:84:21:c3:7c:42:8e:10:73:8b:
                    d2:1b:bf:2f:8b:60:0f:e3:4c:b7:ac:26:8b:2d:26:
                    87:03:09:f7:05:02:5f:08:5e:9a:53:15:a5:33:b0:
                    ef:1e:9a:25:09:e6:f2:a0:d2:aa:55:a9:d2:c2:97:
                    64:1e:47:06:72:b4:c9:cb:24:37:a9:57:be:b0:aa:
                    f2:47:4d:82:5f:09:78:05:0b:c6:f0:9a:fc:4e:3e:
                    5d:18:63:8f:41:40:16:4b:1c:0d:8b:03:6d:10:44:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8C:D2:AC:DE:8B:C1:8F:7A:34:F5:E1:A6:DA:FA:55:FD:68:19:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl

            X509v3 Authority Key Identifier:
                keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cf:f1:34:2d:68:23:5c:3c:56:85:46:f5:89:1c:21:d9:1f:
         5b:75:3a:b7:cd:e6:68:9d:75:a8:63:3d:ed:47:cf:18:04:9d:
         ab:3e:50:86:63:77:eb:04:7e:9d:b3:a9:53:f0:5d:21:6e:fb:
         4a:6c:71:57:83:b1:97:9a:88:78:6c:92:35:19:9d:af:55:ff:
         d2:0e:9d:2d:62:c7:8a:65:63:81:64:22:6a:db:2f:02:88:d4:
         a2:df:81:87:6d:4d:4e:e3:95:dd:1c:03:74:13:5f:15:bd:93:
         94:b3:aa:85:c1:06:a6:a5:62:15:31:52:ca:35:56:e5:a5:e5:
         f4:a2:50:ae:21:45:58:ab:21:51:65:1b:97:59:f9:3e:e2:e2:
         fc:28:34:ae:b8:0e:2d:56:9b:0b:a0:d8:1d:4a:a4:c5:ef:8e:
         47:2c:a5:13:6a:d3:81:a5:c2:58:2c:7f:70:7d:88:a2:68:1d:
         90:9b:e1:20:c9:70:d5:f8:f6:a3:f6:b1:36:b6:17:af:4c:34:
         66:5e:98:12:8a:f4:73:0c:04:b0:a6:26:df:77:bc:8c:87:d0:
         1d:9a:6e:41:46:76:9a:93:f6:41:13:06:5f:42:6a:02:45:d8:
         7e:8a:0b:f6:b2:c6:ec:63:5e:ab:4f:40:8f:2f:e0:7b:71:59:
         48:4f:b0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:27:36 2024 by rpki-client on console-ams.rpki-client.org