Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b148693d-3642-3e28-88dd-d6eaad9bad25.roa
File:                     b148693d-3642-3e28-88dd-d6eaad9bad25.roa (raw, json)
Hash identifier:          PaoMIOJaZVVAUb5CvkmgyLpRdN9dwzAZ3ASIGvaLIUA=
Subject key identifier:   AE:32:AD:DA:D7:13:DA:9A:4E:D9:88:58:EB:8D:3B:1D:A9:79:8A:85
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584762D663585B8CE8275FD32CA0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b148693d-3642-3e28-88dd-d6eaad9bad25.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     26744
IP address blocks:        68.170.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:63:58:5b:8c:e8:27:5f:d3:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=85e886c4-1bd4-4654-b915-4b800a0f702e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:fc:1f:85:59:41:15:2f:61:9c:45:f6:4c:
                    5c:1e:9f:42:40:ee:c8:dc:4b:4d:1b:19:13:01:42:
                    83:dd:04:09:89:83:f1:e8:32:c3:2b:ae:c5:20:0e:
                    16:7b:42:d7:97:19:8a:7b:39:6b:34:f9:52:88:fa:
                    89:bb:78:31:7b:17:eb:84:2a:e0:98:da:ce:98:8a:
                    f4:c1:ae:b4:39:19:66:b4:1a:30:89:75:0b:f2:98:
                    cb:f4:5c:2d:7d:22:ef:54:a2:5a:73:ac:b6:21:05:
                    ae:f3:93:29:aa:3c:c2:a2:6d:3c:a2:26:aa:f8:f6:
                    8b:63:f4:5c:66:41:e8:c7:93:f1:ac:81:ce:a3:fb:
                    ae:2b:88:30:cb:79:81:48:25:5b:04:e7:50:20:74:
                    c6:d5:d4:1f:84:d0:44:26:44:6c:c5:92:49:6a:39:
                    d1:f8:98:8b:e3:6c:9d:09:8d:0b:b2:9e:5e:0c:c0:
                    76:33:44:8c:05:84:46:c8:fb:3b:21:9c:f5:bf:6d:
                    f7:2a:fd:fc:a3:b9:f1:bf:da:52:b2:b8:ab:8e:5a:
                    53:69:09:ec:e8:ed:aa:d9:09:0e:08:24:8b:9a:df:
                    ff:59:b8:3e:d3:d1:79:53:ef:b1:e2:76:0b:cd:36:
                    5d:68:0e:df:19:d7:2a:ed:e3:f4:e1:f0:0a:45:8c:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:32:AD:DA:D7:13:DA:9A:4E:D9:88:58:EB:8D:3B:1D:A9:79:8A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b148693d-3642-3e28-88dd-d6eaad9bad25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:09:ea:77:08:31:0d:cd:24:62:0a:f3:c7:da:88:92:b8:4c:
         15:50:93:5e:0f:f1:9d:b6:81:37:71:79:dc:78:46:d0:5f:80:
         69:73:23:9d:f4:dc:61:34:86:0c:6e:af:69:a8:0f:35:7e:f3:
         61:0f:37:60:a2:67:da:d0:c4:94:5e:ee:21:11:79:35:45:88:
         17:6f:5f:d4:38:5c:37:3c:ee:34:06:c9:ea:43:31:09:39:5f:
         62:6b:1b:5a:d6:f3:80:37:8b:e5:1e:4e:27:fd:fa:ef:21:11:
         d7:da:a5:4c:ac:a7:8a:a1:17:9c:40:e0:ac:9e:b9:40:1c:bf:
         23:9f:5e:59:11:6f:1c:ea:77:0f:6e:48:bb:d6:ce:66:90:9f:
         87:f7:25:1e:db:0a:f6:17:bc:ee:91:7b:ab:a7:8d:63:79:89:
         54:a7:48:b6:1c:a0:af:9e:dd:1b:90:b8:55:a4:c7:88:3d:71:
         50:e0:3e:1d:75:fc:f1:00:fd:0d:44:98:a8:c0:96:76:58:40:
         11:06:8b:81:47:00:2f:4d:e0:36:b1:e8:c0:3f:8a:d0:b8:9c:
         1f:1d:42:b4:fa:ae:86:3b:7c:a7:63:8c:0a:2b:6a:ba:7d:53:
         51:1f:02:c4:bd:5d:02:8b:43:37:6b:2e:a0:6d:e2:87:f5:46:
         b5:5d:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:29 2024 by rpki-client on console-fra.rpki-client.org