Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa
File:                     677c9e94-c45b-345c-8a40-a975fad8cd7d.roa (raw, json)
Hash identifier:          yz9xxeOilkOFHYrPigfMeEm7RVfsdMMc7hAeG2DMNvk=
Subject key identifier:   E0:4A:72:A7:3F:98:87:7F:8A:51:80:C0:CC:E2:04:93:6D:4A:C5:CA
Certificate issuer:       /CN=669f938e-8371-4220-9059-9081449ba23b
Certificate serial:       010D0C9F432858455CF82D805D3CD4FD78934380
Authority key identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     46694
IP address blocks:        192.68.190.0/24 maxlen: 24
                          66.209.240.0/20 maxlen: 24
                          2607:6280::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:2d:80:5d:3c:d4:fd:78:93:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669f938e-8371-4220-9059-9081449ba23b
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=ecc3c164-8eac-4e49-8b58-e8731733127a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9b:29:fb:77:42:0a:d0:72:cf:97:d4:cb:d2:
                    be:79:0d:6b:16:a5:81:e4:d8:d5:50:25:77:28:19:
                    c5:52:77:e5:90:21:78:4c:ce:e0:c8:eb:1f:ed:a2:
                    89:dc:b6:79:aa:e5:fb:5b:6d:82:22:c1:f4:e4:ae:
                    32:cf:d9:61:9c:7e:dd:c4:22:c3:72:86:bf:72:48:
                    c1:7f:09:2b:d5:9c:32:d6:ad:18:d5:c0:c2:48:5a:
                    35:16:f4:c0:14:82:68:9d:a4:6e:f3:ad:55:6c:a4:
                    1a:cb:ee:2b:7d:4d:a8:ea:9c:75:87:d0:10:a0:53:
                    4f:d9:08:4d:dc:95:90:43:1c:34:0f:c2:94:ec:09:
                    3f:38:3c:3a:66:bf:a3:9f:da:5e:ff:e6:aa:b3:47:
                    a2:56:b9:b9:c9:47:90:6f:43:01:59:74:ca:ef:a8:
                    1d:d5:96:23:80:66:20:cb:d6:38:6d:d4:18:15:30:
                    21:3c:0d:e9:a3:88:de:e4:95:d0:4f:51:aa:5e:83:
                    64:bb:d1:c9:d0:6b:ac:ee:9a:f8:cc:54:f7:67:8b:
                    59:93:af:30:5e:4b:51:c4:ba:5a:9e:cc:38:26:fd:
                    ac:19:97:58:21:03:74:82:a5:b5:9f:d3:74:48:6f:
                    10:fc:a5:b4:36:a9:c0:82:d7:4e:b7:c2:5f:a8:9b:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4A:72:A7:3F:98:87:7F:8A:51:80:C0:CC:E2:04:93:6D:4A:C5:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.209.240.0/20
                  192.68.190.0/24
                IPv6:
                  2607:6280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c8:d7:ab:78:60:20:cd:d6:82:86:bf:c0:e4:5c:92:12:03:
         c0:57:70:33:cb:ed:c4:ee:a0:a7:c6:0e:c6:22:c4:51:d3:71:
         fe:9e:ca:fa:8f:38:f5:37:67:e3:44:a5:f5:37:9d:16:cb:46:
         c2:be:e2:7e:aa:aa:b4:4a:80:56:a1:8c:40:1e:00:5d:ff:eb:
         48:f1:ab:b8:83:74:06:9f:66:68:5f:86:0e:eb:9f:9d:fa:27:
         1f:31:93:d4:80:c8:e5:0b:43:e1:ed:00:6f:a3:65:d4:dd:cf:
         d3:e2:d1:75:0b:82:a6:0f:68:18:c9:af:7e:4a:7d:59:08:ad:
         09:b2:e5:de:90:1c:23:85:c8:d0:53:91:a7:0d:c1:c0:0a:2f:
         9c:4a:a2:36:74:04:5a:67:fb:a8:28:ff:77:bc:16:ab:33:0c:
         bd:39:43:d0:a0:c8:32:5a:64:6e:cd:35:db:9c:91:70:41:79:
         74:57:5a:79:6f:82:dd:b9:05:6d:4a:10:05:b1:e7:ad:3e:27:
         16:97:fd:f0:0f:76:b7:a4:c1:3c:64:af:bc:6e:7e:f3:13:7a:
         27:a2:90:49:ea:9e:76:f7:08:49:e8:06:3a:0b:75:07:19:f3:
         c0:cc:e2:27:fc:c4:7e:8b:90:3a:a5:19:01:cb:1c:1d:a2:0f:
         4e:9b:27:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:40 2024 by rpki-client on console-fra.rpki-client.org