Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa
File:                     bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa (raw, json)
Hash identifier:          0ot42Li0pTIUgOqN1mnz4TFwl83PuVjsvF9b1yRuXuA=
Subject key identifier:   AE:99:B3:55:7F:8D:66:20:D9:42:89:64:F5:88:FF:77:5B:9E:47:87
Certificate issuer:       /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial:       010D0C9F432858451FAAEBCFB2BE59B60EE92600
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     19318
IP address blocks:        68.168.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:aa:eb:cf:b2:be:59:b6:0e:e9:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=4c5e8f65-3eb4-4b06-8bd8-22c964b87b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:45:c2:d2:79:75:ee:d2:cd:77:85:78:24:
                    ca:db:5f:e5:ab:ca:44:6b:49:0f:2b:d5:da:b2:26:
                    be:dd:fa:79:89:15:ea:e7:9a:22:cb:a1:ae:73:d4:
                    2a:e0:ff:7c:e0:68:1d:da:6b:c9:a1:67:85:84:2e:
                    9a:0c:c9:09:5a:00:c4:a8:e5:47:84:74:ae:a4:9e:
                    47:7a:b0:9a:bc:a6:fd:d9:ce:b5:99:85:51:89:b5:
                    ae:f5:ac:9b:3b:de:72:00:9c:81:f7:e7:b0:84:73:
                    8b:9d:a3:1b:60:92:42:58:3c:51:be:bd:f6:77:9a:
                    de:72:c4:cc:98:f9:69:b3:1c:cc:38:f5:e8:a9:47:
                    1f:ee:a8:df:c6:e5:13:94:56:fe:67:43:eb:00:31:
                    c8:b5:73:23:c3:9a:75:96:93:d7:8f:ae:f8:87:63:
                    10:ca:46:7f:7d:eb:18:f0:26:59:1c:4a:12:81:95:
                    f6:f9:0b:45:ec:f8:f2:37:12:01:44:0c:ac:3b:35:
                    da:06:50:45:b0:c8:a1:ec:42:c8:9b:0d:8c:f9:8f:
                    19:81:02:97:c9:d7:cc:b5:19:d7:7b:6a:96:29:a6:
                    07:57:c5:5a:63:bd:37:7d:74:28:ef:af:4c:c0:c1:
                    95:5a:23:12:84:12:29:a9:2b:db:62:f3:c9:a8:04:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:99:B3:55:7F:8D:66:20:D9:42:89:64:F5:88:FF:77:5B:9E:47:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl

            X509v3 Authority Key Identifier:
                keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:17:4c:76:f8:77:6b:59:ad:51:49:0b:b1:58:74:df:52:
         5b:66:b3:6c:d5:7d:6c:fc:78:35:3c:18:24:91:55:5e:04:20:
         1f:8c:f4:92:a9:de:0b:7d:78:90:7b:50:f3:39:f0:e3:e0:0b:
         64:6f:ee:07:4e:92:d2:96:91:17:84:50:f5:a8:c9:94:70:03:
         3f:b2:1a:0a:ba:9d:0a:87:2a:07:a7:6d:01:a6:97:af:41:0d:
         08:18:8e:49:e9:99:7e:c0:68:8e:0a:ff:f8:81:03:44:bf:6a:
         e4:10:66:64:44:b0:3a:e2:2e:44:c2:f7:b6:e7:50:18:62:4b:
         1d:2a:03:0c:f7:72:11:2a:d7:8d:b6:24:40:49:9d:89:79:f3:
         c3:37:37:e2:60:da:19:ab:b9:42:d3:66:25:72:53:64:a9:22:
         2a:20:77:69:88:81:55:61:b1:b8:a6:e1:7f:96:32:ad:98:5b:
         f8:b8:ea:4b:e8:ee:66:11:ee:e5:a4:35:e4:ab:d4:7a:4f:45:
         32:17:66:92:1b:d1:ef:7f:b0:8b:d0:b2:00:13:39:64:21:e4:
         f4:c7:bf:96:0e:fa:3b:05:de:f3:09:6c:f0:1c:0d:36:4c:03:
         71:fb:db:b4:26:59:60:f2:41:0f:5a:a7:15:f3:a1:44:1d:35:
         18:63:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:48 2024 by rpki-client on console-fra.rpki-client.org