Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
File:                     2d398258-1b86-35d8-933f-e3df7eab5377.roa (raw, json)
Hash identifier:          OTTpgwPvWOae0i2Om4ElFo+Zs/LSPy25KjqG9ZQBFFk=
Subject key identifier:   7B:47:7F:AD:36:D0:23:F4:BD:F8:94:29:50:BC:BC:D0:28:71:40:7D
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F43285847967BC85E576F665B52F7FE00
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
Signing time:             Sat 19 Oct 2024 01:00:33 +0000
ROA not before:           Sat 19 Oct 2024 01:00:33 +0000
ROA not after:            Fri 17 Jan 2025 02:00:33 +0000
asID:                     396239
IP address blocks:        68.69.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:96:7b:c8:5e:57:6f:66:5b:52:f7:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: Oct 19 01:00:33 2024 GMT
            Not After : Jan 17 02:00:33 2025 GMT
        Subject: CN=9e88383e-4f46-4b71-a8a6-7e29978ad80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:ab:21:ee:bc:e3:d7:bd:0b:d6:5c:38:ae:
                    81:5b:08:9c:4e:38:87:80:42:0b:11:6c:9a:c2:05:
                    92:93:dd:86:c1:78:8e:14:65:57:fd:18:7a:94:8c:
                    71:1d:03:8c:d5:90:f5:41:94:23:4a:ac:d3:f2:83:
                    45:f6:d2:2c:d3:d1:2f:87:7a:77:e7:86:19:37:7f:
                    08:d7:1d:5c:74:69:27:e7:c1:c1:3e:2a:d9:50:23:
                    43:fa:81:20:da:18:33:cc:47:ad:a1:66:a0:98:1f:
                    63:c7:0f:ea:15:87:b1:35:dd:9f:e3:62:56:cd:32:
                    21:3c:1c:5c:69:e2:09:13:9e:72:20:0b:32:01:e5:
                    51:4c:57:14:aa:0c:ef:16:98:02:a1:1b:15:b9:d8:
                    0b:fb:24:a8:44:87:09:0f:88:5a:f2:86:f4:a2:3f:
                    1c:0a:bc:7d:6a:02:a7:97:f6:89:a3:8a:74:85:95:
                    1b:4d:9d:9d:4c:90:1e:a4:ed:57:ff:5b:68:a6:0f:
                    18:50:b9:f8:eb:fa:76:ac:99:30:66:8f:3d:38:ae:
                    9a:38:7e:8f:d2:e1:6d:3b:71:a5:51:cc:2a:b3:1c:
                    ed:bf:98:6e:66:a6:22:70:e9:0e:b2:56:71:95:76:
                    86:2c:c3:57:3b:01:18:13:ca:05:1c:57:6c:3f:04:
                    78:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:47:7F:AD:36:D0:23:F4:BD:F8:94:29:50:BC:BC:D0:28:71:40:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:15:9c:83:16:b9:6e:83:ab:2b:39:7e:1c:e5:60:b6:85:
         72:06:59:98:92:f9:a5:86:83:15:a6:c3:c3:f0:8b:a5:7f:79:
         1b:37:2e:8a:60:d8:c0:c3:95:75:25:f1:1e:6b:ce:e9:ff:3a:
         30:e9:78:b3:b5:aa:f2:8f:4a:fe:a7:91:de:0a:50:f2:86:f8:
         9d:b1:ef:6e:f0:a1:af:94:3f:1f:ec:5b:15:94:2b:23:b5:17:
         f0:ff:57:65:86:8e:ec:9d:8b:40:02:82:99:38:f5:22:bc:c2:
         6a:13:6c:81:61:ee:d1:c9:51:0b:6d:91:02:dc:af:04:ac:2b:
         b8:dc:b0:f1:cb:30:61:d8:74:c9:0e:86:47:61:44:e0:4e:45:
         d6:59:b2:12:e9:e9:25:6a:53:a3:ef:6d:95:78:f8:85:92:87:
         f6:c8:dd:ec:c8:3f:e6:62:bd:c8:b9:51:07:f3:d2:36:0d:9f:
         d6:2d:2d:b1:8e:92:d7:e8:52:7a:ff:ae:e7:4d:9a:a0:8f:e6:
         b3:80:24:a3:4c:50:66:f7:8a:1a:63:23:a9:dd:d8:35:b4:cf:
         ae:c6:9c:0a:9d:08:58:38:d0:4c:f4:69:fe:94:5a:47:11:e2:
         38:df:a8:0f:2d:62:9e:a0:c6:d6:0e:1a:fc:74:38:d7:92:e7:
         7b:82:b7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:35 2024 by rpki-client on console-fra.rpki-client.org