Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa
File:                     6bd08fbc-b377-3311-86c8-64fe75264a40.roa (raw, json)
Hash identifier:          r/pF43FxCnt1+lTt82hXuKV9F5cFv6AjjiTkZGaP220=
Subject key identifier:   72:FD:65:80:19:2D:1A:66:E2:10:1B:0B:8B:3C:85:15:9E:14:F4:21
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858475E1A98853A62AE3E6A6671D4
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa
Signing time:             Sat 28 Sep 2024 20:19:31 +0000
ROA not before:           Sat 28 Sep 2024 20:19:31 +0000
ROA not after:            Fri 27 Dec 2024 21:19:31 +0000
asID:                     19107
IP address blocks:        68.235.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:1a:98:85:3a:62:ae:3e:6a:66:71:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Sep 28 20:19:31 2024 GMT
            Not After : Dec 27 21:19:31 2024 GMT
        Subject: CN=0451571e-28cf-45b3-a0c7-caaab1f90433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:27:cd:a2:e0:56:a2:49:e5:02:f2:7e:8b:
                    70:26:d6:da:d7:a0:52:25:18:46:c2:21:9b:2a:36:
                    fa:07:2d:d6:71:5b:74:29:2e:2c:67:13:de:83:90:
                    82:b0:f7:b0:2c:56:fb:f5:fe:ac:4c:0b:4f:40:43:
                    12:c0:be:4e:8b:df:95:d6:1c:fe:fb:2a:8f:23:4c:
                    c7:e6:bc:2c:9a:20:5c:28:6f:cb:27:12:19:9b:40:
                    c1:ab:e0:f1:0e:4d:11:45:7a:49:97:ca:c0:60:33:
                    62:cc:83:f4:f5:f9:3c:a3:f4:66:a8:fa:31:c1:5c:
                    ea:ba:97:57:85:94:f2:bd:8f:c0:5e:be:99:cf:42:
                    23:13:08:99:d7:59:21:fc:81:e7:1b:54:2c:b4:b9:
                    fa:2b:1d:1f:b0:62:d9:1a:38:96:f4:b0:7d:fc:7e:
                    88:c4:38:df:7f:f2:fa:4d:fc:40:8d:9a:0e:40:a6:
                    5a:cd:85:83:fb:b4:0b:de:4d:47:f2:65:d5:23:d3:
                    b3:63:d4:49:36:54:ef:e9:e5:eb:84:6f:1a:7a:92:
                    7e:38:a2:f9:f7:93:a7:8f:fb:e7:0d:74:1f:a2:05:
                    8a:7a:ef:f5:4f:1c:13:89:28:59:39:f7:79:84:37:
                    7f:8b:f0:ba:9c:0e:be:c8:89:fc:2b:ef:a6:e7:c7:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FD:65:80:19:2D:1A:66:E2:10:1B:0B:8B:3C:85:15:9E:14:F4:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6bd08fbc-b377-3311-86c8-64fe75264a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:65:84:5d:ac:89:3a:c0:43:84:bf:91:9e:3b:6f:bd:8e:89:
         e4:65:a1:b6:f8:80:ce:a3:90:4f:54:fa:f8:77:75:ba:10:34:
         42:5d:4f:73:63:f8:f4:f1:71:66:80:9c:22:b9:25:a3:76:b5:
         c4:1d:39:2c:c4:5e:59:01:70:e6:c4:08:99:39:92:07:92:e7:
         de:b3:c3:c3:00:a5:65:7b:eb:13:47:cf:39:70:81:ff:79:29:
         93:07:98:41:03:51:a2:70:78:4c:1b:80:ff:f9:da:bf:68:3c:
         aa:14:af:3a:23:cd:76:74:4d:c9:cc:08:c8:d3:bc:13:82:90:
         e0:2e:bc:ac:de:4d:da:df:95:b8:9a:07:7d:88:fe:ae:e3:c5:
         38:fd:ff:35:76:fa:be:5f:46:4a:e1:71:f6:f2:25:81:75:4c:
         c9:8d:d3:1d:f4:17:b4:c7:61:9b:b9:88:36:64:65:c8:9f:4b:
         66:de:01:7e:02:8a:56:a1:9c:5b:e8:81:80:95:ae:31:ad:ca:
         b2:e1:1e:87:c6:2b:25:3f:ed:f2:72:33:3b:69:85:a1:30:df:
         0e:d1:b3:5c:1f:71:08:c3:0c:22:3b:73:05:c6:e4:22:7f:01:
         6d:e4:19:5e:5e:96:93:9c:af:2f:0d:c9:a8:80:aa:bf:81:ca:
         af:14:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:19 2024 by rpki-client on console-fra.rpki-client.org