Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa
File:                     59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa (raw, json)
Hash identifier:          bbg/zgkz85kylHE5MiVmLB7eDzt4JzdoNmT0tyeQd+c=
Subject key identifier:   21:24:60:96:20:05:1D:27:6F:E6:07:ED:3F:8A:1E:88:CE:F8:6F:80
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584746EB59712303163F1CCDFE00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     394976
IP address blocks:        209.66.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:59:71:23:03:16:3f:1c:cd:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=d78e18fa-0385-41bf-ac1a-2d0cad55c8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b7:02:79:39:33:25:1c:ce:05:5a:43:26:b5:
                    bf:8f:f4:45:41:1b:28:b1:59:e9:3a:03:e8:a0:ac:
                    16:8f:80:f2:ce:1c:6e:6e:48:f9:74:c5:7c:f4:1d:
                    b0:af:71:94:29:15:5a:9f:75:a4:08:46:25:83:3d:
                    b4:aa:b8:73:98:0f:d0:44:18:98:ad:9a:b1:08:2d:
                    7e:e2:46:71:eb:a4:b5:d2:a0:e4:65:93:db:bc:ce:
                    80:4d:c4:52:89:4c:8b:92:99:ad:50:5f:de:60:52:
                    36:2a:6f:de:9a:3d:72:fc:6b:06:48:33:46:75:f9:
                    4f:46:9b:84:f9:a4:9e:8e:5c:94:2c:20:a1:12:5b:
                    4c:d8:5b:65:b0:e0:44:b0:04:4c:a5:81:e9:61:db:
                    ad:05:30:fe:6d:e4:c8:b7:1b:81:73:e6:40:99:c5:
                    67:12:1c:cc:0a:3c:64:41:d4:a4:85:49:de:4f:6c:
                    fa:d3:19:ed:16:12:f4:cf:d0:ce:70:e4:ee:c5:37:
                    2a:d3:05:be:fc:a5:ec:36:69:3a:a8:9b:b9:32:69:
                    93:4e:1a:66:9b:a5:cb:f2:43:86:fd:4c:68:02:b0:
                    83:5e:2e:cd:01:56:e1:a6:e7:ea:a5:44:36:bb:9f:
                    34:15:86:33:0b:2b:ed:8c:d8:21:84:d1:a3:be:d4:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:24:60:96:20:05:1D:27:6F:E6:07:ED:3F:8A:1E:88:CE:F8:6F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.66.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9c:48:a3:f3:df:a1:4e:5b:4d:1f:0f:95:79:b5:6e:56:29:
         8e:6d:f6:12:b2:b1:51:4d:1f:0a:bc:dd:45:25:d9:8f:e1:07:
         84:e3:dc:21:d0:cb:2c:2b:25:f8:de:e1:59:ed:26:4a:a4:0e:
         bc:5c:00:28:7c:19:f7:00:ee:be:eb:6f:b1:69:06:44:d6:7d:
         b8:a8:82:53:61:b9:f9:11:d0:df:13:85:eb:9a:b7:d4:c6:0f:
         a2:12:5f:11:bd:f6:5d:1b:63:af:2a:0b:7e:ba:16:a8:ef:ef:
         4d:c4:91:37:20:c6:4a:44:20:a9:83:a2:e1:a6:00:f6:4c:39:
         8b:d9:bb:e1:50:83:04:27:37:85:81:d6:ef:16:0e:15:15:16:
         95:d6:88:70:35:99:0b:aa:77:c5:56:c7:f2:e6:52:0b:52:6d:
         7c:8e:87:47:78:7f:ab:97:e5:27:97:22:24:9f:a0:cd:79:4b:
         15:0c:83:ff:e0:e6:11:72:36:53:51:d5:0e:13:ca:e7:46:e6:
         25:3a:b7:44:07:ad:5e:9d:5b:7d:f0:ae:af:73:8e:3f:8d:a8:
         b3:5d:b5:25:dd:d6:12:54:db:d3:5b:d5:0c:94:d0:db:d3:02:
         f1:a4:fc:ac:2d:13:12:d6:19:cb:1c:7a:9e:4b:f9:8c:0c:c3:
         17:3a:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:56 2024 by rpki-client on console-fra.rpki-client.org