Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa
File:                     ae68d36c-45dd-3d00-aef2-523dceb603d4.roa (raw, json)
Hash identifier:          mmPXVnaAo6o8u8y3XYS9UYbCQsLGVrwE2+59arKID5s=
Subject key identifier:   20:1E:93:93:35:20:A0:E3:A9:23:22:CF:79:7C:8B:05:38:A4:55:6D
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285845CF6E4221AB4F3955B1F4E0F0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     26744
IP address blocks:        68.170.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:42:21:ab:4f:39:55:b1:f4:e0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=1869dcf5-c643-4633-a242-769e849f589a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:8e:fe:ff:43:ff:8f:42:0c:8d:da:67:70:
                    33:79:8f:be:a4:c9:05:90:c1:5c:eb:1e:b1:d0:cd:
                    84:fd:37:a6:57:7f:98:ba:91:53:44:46:b8:4c:ad:
                    9f:94:7c:c1:ac:0b:59:bd:db:e2:b7:f8:94:3c:99:
                    09:d2:b6:8c:b5:a6:5d:3a:86:db:14:aa:29:fa:ef:
                    75:c1:6d:96:90:7f:c3:15:49:37:fe:a4:cc:c3:c3:
                    cf:35:e9:9e:2f:e0:ae:35:a0:c2:ba:61:85:ec:42:
                    5f:21:99:81:7b:4e:b5:16:b1:22:1e:3d:f2:57:58:
                    6e:ea:86:d4:77:ac:dd:d1:57:84:a9:68:10:de:01:
                    85:c3:a4:e2:0c:dd:8b:24:63:a7:2b:90:9b:03:cd:
                    b8:03:09:f1:70:a3:4f:52:57:42:38:44:79:68:4f:
                    f5:8b:60:96:cf:71:56:4c:46:35:48:5b:d9:94:67:
                    c6:9c:38:7e:2d:c1:4b:f9:f0:39:47:fb:11:e1:97:
                    10:43:6e:af:03:c3:2d:05:65:f7:9a:85:4e:bb:ae:
                    ef:e7:cf:e3:a4:fa:b7:6f:6a:a8:5a:46:42:3d:0b:
                    c4:46:11:74:52:75:62:32:59:21:7a:17:c9:9a:ef:
                    d3:70:3d:0c:26:40:77:3f:8a:ca:5e:7d:73:ea:57:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1E:93:93:35:20:A0:E3:A9:23:22:CF:79:7C:8B:05:38:A4:55:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f4:8e:ff:3a:f3:37:45:94:6a:83:68:3e:bf:9c:8c:c9:11:
         4b:aa:51:29:2a:e7:40:39:93:08:1c:df:d9:5f:5d:da:27:f9:
         f4:b4:ce:29:79:d0:67:b7:af:c8:ff:1e:0d:a5:31:ad:bb:0b:
         e2:96:56:94:7a:4a:e6:fa:fe:af:16:f9:d7:76:ff:8c:a9:94:
         33:85:7e:70:31:d4:4b:6a:37:5d:83:95:27:7b:cc:c7:8d:a3:
         9f:90:78:5c:a2:ce:ef:f4:fd:b1:a1:c5:7e:ed:2e:74:15:c0:
         03:e5:3c:23:5d:fc:db:b4:97:e5:d9:2f:58:1a:5d:d0:dc:8d:
         a9:1b:06:c2:43:38:b8:c7:c9:6e:9c:28:a7:78:95:dc:0e:bc:
         f5:33:d0:83:45:4e:91:c2:31:c4:23:82:1e:0a:0f:cc:e0:4b:
         80:67:e3:3b:5a:40:01:06:cc:b9:58:a2:5f:68:a0:08:40:05:
         6c:40:2f:1e:fc:d7:5d:d9:fa:41:4c:b9:fc:ac:b2:33:84:bc:
         b3:fe:36:13:d7:d8:b0:7b:27:dd:58:0b:48:f8:16:2c:57:74:
         7b:74:02:92:d6:d4:09:39:d4:60:b4:14:d1:de:35:7e:a2:c0:
         19:08:b5:b6:4d:b1:d1:da:27:e1:cb:30:4d:c0:7c:45:c1:73:
         b1:30:3c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:19 2024 by rpki-client on console-ams.rpki-client.org