Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8ac09314-89b2-3409-b2f6-0aba32132aab.roa
File:                     8ac09314-89b2-3409-b2f6-0aba32132aab.roa (raw, json)
Hash identifier:          wZTqnX59X2Ci4KhFiwScwK/aaQSb8qDjXLC4XyZ98Wg=
Subject key identifier:   2D:7D:BE:E7:34:9E:4B:91:2C:A8:0A:AE:54:65:68:DD:1E:C6:9A:C0
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285845A2C345775CFBABB436007D00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8ac09314-89b2-3409-b2f6-0aba32132aab.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     26744
IP address blocks:        68.170.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:45:77:5c:fb:ab:b4:36:00:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=59a892c2-b2d9-4ef4-955a-58da786baea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3e:c4:26:15:1e:08:db:94:c2:9e:cf:05:b5:
                    89:75:39:9c:1c:c5:c4:2e:74:c8:c3:ef:8b:54:0e:
                    e1:04:1a:d4:31:33:39:8b:8f:97:b8:fe:df:1f:63:
                    8f:b2:2e:54:a2:e4:30:4d:79:a8:68:42:d4:f3:a5:
                    c6:f7:fc:07:32:59:f4:2a:60:da:11:1c:97:a0:86:
                    58:cc:1b:22:54:ce:ba:35:f5:7d:9d:60:fc:bd:1d:
                    ba:25:1f:8c:79:01:1b:11:fe:61:02:06:fb:a2:51:
                    01:24:11:3b:a0:5f:81:4d:9d:42:45:3b:94:85:bc:
                    e3:2c:8d:04:20:96:ae:98:13:ed:97:04:d1:c6:38:
                    b7:2a:4b:6c:be:3e:77:f5:c1:13:22:9f:8f:05:20:
                    6a:98:0d:57:f2:c7:8c:73:f8:0c:16:a2:00:30:bc:
                    3d:2f:42:67:00:f1:fb:6a:41:50:b4:48:58:71:ef:
                    76:4a:1a:ea:eb:b9:fc:19:05:70:a8:64:f7:67:6a:
                    a7:73:4d:34:6b:73:5b:99:e5:17:60:15:35:e6:99:
                    91:e6:d0:7b:1f:d1:d7:09:74:2a:94:30:31:c4:65:
                    ed:8c:c3:b7:a5:f5:7a:41:bb:d1:3e:f8:c7:34:92:
                    9b:33:03:26:cc:ca:0f:08:69:ce:5f:98:27:34:7f:
                    82:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7D:BE:E7:34:9E:4B:91:2C:A8:0A:AE:54:65:68:DD:1E:C6:9A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8ac09314-89b2-3409-b2f6-0aba32132aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9e:24:a6:bd:e3:e5:0b:80:2a:5e:d5:b3:61:4e:56:0e:07:
         e4:b2:ac:fc:8f:b4:71:30:7a:2a:a6:1f:96:68:95:d6:ac:61:
         19:57:69:9f:32:31:44:19:18:3c:a2:83:c9:d2:74:9e:40:23:
         e9:fd:2a:88:d3:8b:a5:6f:6c:52:29:c2:3c:0b:f6:d1:21:4e:
         61:06:50:bd:48:65:23:31:0e:f2:0d:63:9c:7b:69:59:c5:10:
         61:13:ab:96:2e:16:96:b3:f1:bf:78:1b:33:6d:35:93:76:a6:
         0b:39:fb:58:0a:71:33:f3:09:6e:ef:2f:0b:54:9c:10:4e:e2:
         94:29:ed:d6:bd:af:fc:4c:9e:21:05:75:94:28:7d:40:da:7f:
         79:f3:8e:b5:40:81:da:1e:ef:43:85:17:8c:fc:ad:bb:4d:0d:
         4e:de:74:6a:74:76:3e:1b:18:29:cb:91:66:a6:f9:4a:cc:6a:
         1b:1d:7d:12:d4:a1:6a:d6:64:80:a1:65:bd:8a:62:7c:dd:23:
         0f:ad:04:4d:84:4f:41:df:c9:a7:96:d4:5a:a3:0e:1b:61:e2:
         19:7e:e4:eb:de:15:c6:ba:95:64:02:ef:2c:03:4e:ec:0d:36:
         41:ca:ad:d3:93:3e:5b:69:2e:74:c2:3e:64:ce:08:7c:39:6e:
         3b:03:94:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:19 2024 by rpki-client on console-ams.rpki-client.org