Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa
File:                     c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa (raw, json)
Hash identifier:          SjosxquGkP/eBE5bT68kzbLrAuGoMFP0enxbh5IJTfE=
Subject key identifier:   5F:65:E0:96:FC:CC:CB:44:73:07:B9:AA:AA:98:61:4A:B8:59:1A:30
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858483E1AA3E4545CBC185A90BA00
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     19107
IP address blocks:        68.235.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:a3:e4:54:5c:bc:18:5a:90:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=37787354-f9ee-4177-8e92-67cbbf4b9135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:e9:58:a4:61:3e:78:4d:c6:39:19:a1:ef:
                    39:d2:3a:cc:da:c0:5f:dc:8e:31:34:b9:aa:1d:7d:
                    28:8b:5a:43:0b:e2:b3:fb:c9:0f:d1:2b:f7:9e:76:
                    fc:7a:dc:32:df:f3:e0:8a:6f:c5:db:18:d4:09:99:
                    c1:54:da:23:a1:62:9e:ab:33:d0:2e:ac:8f:bd:3d:
                    36:e3:09:2b:5f:ca:5d:27:ea:69:84:a7:c8:c7:35:
                    b2:32:52:e6:13:2e:9c:75:0f:11:f5:2e:19:05:de:
                    9a:0e:0c:ea:a0:81:ef:10:f1:6a:c2:8f:56:79:c0:
                    b4:21:fe:4a:0d:20:46:b2:dc:2e:e2:f0:91:c6:6b:
                    75:5f:27:1e:12:03:41:d5:65:04:ce:1e:c4:b4:c5:
                    41:8c:a0:0d:b2:7b:13:15:1c:a9:de:b2:35:5c:aa:
                    19:5b:14:c1:ab:c9:4d:7c:b5:08:ad:ef:09:19:ec:
                    d9:4b:a3:e3:62:b8:32:dd:33:ad:6e:e3:58:30:7f:
                    1d:0c:60:36:4a:d8:ba:1c:97:af:bc:c1:eb:3e:11:
                    d6:29:11:db:1c:7d:17:5e:3a:62:c8:ca:10:8a:51:
                    fe:1b:e9:81:8b:ef:e8:f4:97:f5:1c:01:73:f4:5a:
                    30:23:6e:09:95:7b:f7:e0:23:f1:7d:f2:e4:c3:03:
                    3f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:65:E0:96:FC:CC:CB:44:73:07:B9:AA:AA:98:61:4A:B8:59:1A:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:01:43:95:82:dd:9d:66:3c:17:0a:b7:4d:0f:5f:f0:01:02:
         f8:46:e5:4f:b9:70:61:fe:74:bb:77:6c:c4:0e:be:15:a6:2e:
         8e:91:6d:79:a3:43:bf:82:df:d5:39:25:f9:04:d2:42:f5:75:
         dd:78:fd:e7:b7:3b:f8:16:26:20:70:8e:4b:04:5e:97:6b:b2:
         23:3c:bd:28:80:11:83:f5:52:e8:da:19:a6:e3:80:30:89:e5:
         18:59:6a:b3:34:f7:44:22:aa:96:77:dd:5c:52:0f:a6:dc:6f:
         bf:be:10:83:cd:01:85:be:44:e0:6e:b8:5e:a7:af:d9:f5:7e:
         f1:21:ff:4f:e2:dc:04:1d:8f:f2:eb:4d:0a:e1:c2:8d:d5:b7:
         25:3c:e5:77:e4:b5:50:ce:1b:cf:f9:fb:f5:93:eb:93:16:5b:
         57:4c:3c:1d:01:8e:79:94:28:92:86:45:6b:10:70:f6:8c:6e:
         2a:99:58:41:50:e9:39:05:de:08:4b:46:f4:ee:3f:4d:a9:4e:
         e9:9a:a6:57:ec:be:0e:3a:32:3b:95:a4:a4:0f:0a:b9:7d:4b:
         c0:dd:aa:9c:c2:fb:c8:34:ea:6a:41:83:a2:8e:55:c2:ef:82:
         47:df:07:d0:12:b0:78:36:de:12:2a:b8:85:73:5c:6f:fd:3b:
         be:41:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:50 2025 by rpki-client