Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
File:                     7a374813-872b-39b6-8d07-7b6319971a35.roa (raw, json)
Hash identifier:          3sA0L//A9TK3w1FeGaCEYLpWQunMvfaV/dSGMqq2oPo=
Subject key identifier:   56:4C:06:C7:68:46:CF:0D:08:57:9B:9D:31:2D:2F:7F:47:A5:C1:81
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F43285847967BC8796D67982880695A80
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
Signing time:             Sat 19 Oct 2024 01:00:33 +0000
ROA not before:           Sat 19 Oct 2024 01:00:33 +0000
ROA not after:            Fri 17 Jan 2025 02:00:33 +0000
asID:                     396239
IP address blocks:        68.69.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:96:7b:c8:79:6d:67:98:28:80:69:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: Oct 19 01:00:33 2024 GMT
            Not After : Jan 17 02:00:33 2025 GMT
        Subject: CN=c9e2bcd1-ecde-455d-b468-6aa6cb24b835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e4:cd:0e:d2:46:a2:a2:29:a8:b9:f2:b2:89:
                    a7:b2:71:f0:38:b6:02:df:b2:9c:1c:65:b8:01:6f:
                    15:7d:d6:86:64:19:fa:ca:c9:aa:e8:29:81:d5:aa:
                    93:83:59:e9:b0:d5:41:fb:2c:b4:8e:8f:09:2d:c5:
                    e9:e1:e5:3e:b7:22:e5:f0:1e:3e:33:c2:ad:11:38:
                    62:b4:f1:99:4b:8d:e7:79:d6:90:cb:a6:6e:80:8c:
                    96:9a:9c:70:4c:42:51:e4:65:5e:5c:5a:15:48:f9:
                    3d:86:de:cf:cc:5b:b1:b6:e7:c2:58:3d:35:e4:a0:
                    43:bf:1a:1a:50:e8:8c:b9:7f:bb:f5:7a:09:e7:4e:
                    02:31:23:d7:e0:84:6d:6d:a1:30:ac:fd:c6:bb:1d:
                    1a:42:56:aa:5a:2b:a6:c8:12:e9:48:13:94:43:33:
                    52:3f:ea:b2:3e:e6:49:58:46:3a:4d:a1:4c:86:11:
                    51:fa:64:1c:94:45:0a:35:ce:75:c3:f0:82:5c:77:
                    05:d2:50:4d:41:7d:7c:c5:97:75:63:a4:d6:01:75:
                    4f:a3:b4:82:8d:49:fe:a8:fe:00:9d:07:5c:4c:c1:
                    81:79:db:00:3f:01:56:ee:b2:23:3d:38:15:e2:c4:
                    67:16:93:04:72:f3:07:fa:ac:e2:66:a9:24:34:e0:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4C:06:C7:68:46:CF:0D:08:57:9B:9D:31:2D:2F:7F:47:A5:C1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6f:66:7b:68:2d:ce:6e:8c:bd:0a:50:89:30:82:24:0a:68:
         b4:3e:2d:c2:6e:ca:66:34:cf:0f:9e:57:9f:32:7b:a0:9b:c0:
         32:26:e4:c3:63:d1:2f:ed:f2:24:35:a1:35:d9:f9:fd:d5:10:
         6c:5a:c6:39:92:50:57:db:74:a9:40:8b:d6:9a:c0:8f:ff:d3:
         ab:ca:d9:d3:6c:d5:1a:01:1c:5e:ba:a3:41:35:73:21:80:17:
         2b:06:8e:e5:73:df:91:f1:1f:f8:e8:8d:d3:a6:b0:db:c6:23:
         40:cf:38:0e:dd:62:e2:a4:2d:43:f4:f8:d6:d0:06:3f:50:d7:
         a2:f4:40:bd:d5:1e:42:d4:c4:11:d9:04:bd:c1:e1:9f:8c:0c:
         36:59:7e:72:0a:27:de:5d:b2:b9:e5:4d:61:42:39:11:dd:72:
         79:0d:30:49:67:a4:0a:d8:00:d2:95:69:e3:13:5d:d5:0b:3c:
         74:70:f3:f0:74:be:18:ab:e4:f6:d0:ba:24:fb:ed:64:e4:e4:
         61:18:98:54:36:95:3b:68:ec:f7:7f:05:a8:44:5f:bd:9c:8d:
         8d:ea:c6:cc:0c:97:7d:63:b2:5f:5d:ea:46:f9:a7:62:87:a8:
         93:79:16:89:f6:10:5d:d4:58:87:dd:23:e6:fc:f7:f7:ac:2b:
         6c:02:d1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:35 2024 by rpki-client on console-fra.rpki-client.org