Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa
File:                     b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa (raw, json)
Hash identifier:          c4Tz3bk/uj8Rz+hAqJrXpkcvxwxWe7c7WFr499RbFTY=
Subject key identifier:   38:9C:F2:F7:2F:61:2C:79:0B:F2:D6:A4:9B:C4:B9:13:E0:F2:53:CC
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845777DBA88D87C891DFE1671C0
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16904
IP address blocks:        68.169.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:ba:88:d8:7c:89:1d:fe:16:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=7bbcf546-ce20-476f-83d4-fb3af028b174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:db:1e:15:c8:a7:00:12:9d:57:20:7b:ba:
                    8c:c1:60:ef:17:da:1c:2e:4e:f6:3f:d8:5a:83:cd:
                    53:fb:7d:6d:5f:56:67:f8:f1:64:0f:c3:0c:e7:72:
                    1a:85:2f:79:28:d1:1f:d7:13:9c:aa:98:e9:71:a6:
                    23:d4:e4:c0:02:f9:a3:44:f1:e3:07:32:3d:68:fa:
                    5f:a9:7c:e9:23:06:0e:78:4a:48:58:f5:6f:93:20:
                    62:92:f2:67:0c:4f:d3:e7:e1:59:52:2a:c5:e6:9f:
                    68:e0:17:45:3a:6f:20:9c:69:7b:e4:b5:c8:34:40:
                    f8:90:da:af:6b:80:37:78:f7:81:02:35:37:2d:cf:
                    b1:22:54:ed:d9:2b:c4:f1:a0:4f:24:ba:1f:08:63:
                    e4:ad:67:4a:64:88:96:26:04:4b:60:c5:c1:7a:c2:
                    a5:fe:7e:c7:dc:78:13:ce:eb:45:ba:22:55:38:0e:
                    5c:e2:e8:23:39:93:ef:2c:66:89:7c:e7:cd:4b:f2:
                    a6:6c:b7:94:10:46:6f:7b:c2:31:9f:cc:85:bc:e6:
                    26:cd:8d:d1:3c:c9:fe:5a:34:d0:df:85:30:5e:9f:
                    10:81:0d:5b:00:f6:11:ec:3b:91:37:60:ed:7a:c7:
                    74:62:e2:f1:5f:f4:e3:cd:b3:d5:b2:63:1a:c3:4e:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9C:F2:F7:2F:61:2C:79:0B:F2:D6:A4:9B:C4:B9:13:E0:F2:53:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.169.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:14:60:0d:f0:4f:61:ff:03:d7:af:10:31:1e:c9:4a:30:b2:
         fc:22:d7:aa:5a:a5:dd:5d:98:1c:33:06:9a:f5:77:d6:3c:0a:
         f0:a8:d2:1b:83:32:c8:b4:18:10:0b:98:6c:55:f5:10:79:6a:
         9d:1b:00:2f:5d:d0:ae:0c:f8:03:e6:52:66:43:3f:57:07:e1:
         2f:15:34:57:e8:34:2b:21:67:00:3f:03:58:70:4b:20:b5:25:
         91:3d:a7:41:bf:1f:63:28:4f:30:92:93:98:cd:eb:11:ac:24:
         d1:48:cf:ec:63:72:a2:a5:68:c0:11:6f:5b:cd:b8:ee:c6:e8:
         0d:00:d3:92:a2:c7:36:3b:84:e0:2d:18:31:0b:12:7f:58:89:
         e0:c7:86:1b:c3:1b:33:7a:da:7f:cc:09:b3:19:a9:e1:2e:59:
         7b:67:2c:4f:a1:0c:40:52:e3:3d:70:69:9b:8a:e5:13:a1:5b:
         08:8c:c2:f3:69:7b:57:b3:5f:3f:9d:d2:4d:74:38:c1:30:e4:
         5d:bf:aa:94:79:b7:0c:2f:d6:a1:04:a3:06:a9:19:48:01:53:
         ac:86:82:4b:bc:c5:62:2b:68:e6:b3:8e:b2:fd:ca:68:2b:bd:
         6f:65:f7:7a:1f:3f:b0:d9:26:67:61:bb:8c:55:06:a1:68:04:
         57:94:49:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:02 2024 by rpki-client on console-fra.rpki-client.org