Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d8679ba9-14db-3152-8178-e6bf1680f5ff.roa
File:                     d8679ba9-14db-3152-8178-e6bf1680f5ff.roa (raw, json)
Hash identifier:          w+Sk01o5rzjX3fxXXIetFRnwszLLTrj52o+xF+wvxX0=
Subject key identifier:   DE:9C:46:44:A5:33:87:6B:80:99:3D:FD:CA:0A:6F:BE:F7:F9:2B:D4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0BAB56F15B49D90FB4C20
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d8679ba9-14db-3152-8178-e6bf1680f5ff.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        68.207.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:ba:b5:6f:15:b4:9d:90:fb:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=461c7f09-ef5c-4baf-84a7-5ae75ba55c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:99:0c:b2:10:47:99:ba:55:29:29:db:55:
                    cd:68:4e:7f:88:19:86:df:5a:c4:64:20:e8:b6:c9:
                    07:02:3f:2a:63:ae:00:75:29:76:03:9a:33:75:36:
                    e0:c0:dc:27:d0:0d:64:35:fa:ca:ff:bc:64:4b:56:
                    af:c9:c8:82:97:27:28:a0:50:07:bc:3f:b5:fb:76:
                    6d:bd:6c:f7:2b:1b:de:30:23:69:70:ae:2d:29:48:
                    1b:09:a7:b2:0a:e0:8f:63:44:77:1c:8f:4b:08:19:
                    59:25:a0:ee:91:2c:8c:eb:b4:94:2a:59:11:6f:58:
                    3f:f7:68:09:43:24:e3:f9:d2:33:80:81:32:d6:bc:
                    23:b5:51:13:48:2b:85:2e:b6:3c:b0:f1:70:0a:1f:
                    d1:f6:14:40:0b:17:b9:1c:60:de:2f:a7:7f:dd:ed:
                    20:6d:8d:b8:6c:36:15:07:d5:2d:b1:4c:3b:28:53:
                    b2:fb:f5:3f:f2:54:b3:cb:70:98:09:0b:19:9a:24:
                    ce:b5:03:72:22:d6:97:db:ab:05:ac:ae:a1:1a:a4:
                    e7:df:96:74:2e:a3:f4:e4:c1:10:67:f0:61:e2:91:
                    7e:12:c0:91:aa:84:a2:04:66:29:06:a7:ba:3e:3e:
                    d2:62:d9:d0:20:6a:04:51:17:02:f1:7c:85:53:75:
                    bd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9C:46:44:A5:33:87:6B:80:99:3D:FD:CA:0A:6F:BE:F7:F9:2B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d8679ba9-14db-3152-8178-e6bf1680f5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f9:1c:3d:96:ea:cb:06:af:45:f9:55:14:70:f1:37:d6:95:
         cb:3e:3a:e9:3c:fa:fe:54:dd:be:ad:d5:00:1c:89:1c:66:9c:
         9c:c2:9c:ad:53:66:67:da:e9:1a:38:4f:5e:5c:c1:7c:f8:a0:
         13:c8:dc:9a:cd:5d:fc:82:79:bc:ae:2b:63:5c:dd:98:66:86:
         dd:39:ad:b2:a5:13:72:3a:a3:72:0f:8f:21:cd:29:47:f1:52:
         71:60:48:f0:f9:57:16:85:1c:21:10:ba:56:70:36:ae:60:2a:
         04:72:4d:35:c6:8e:57:7c:57:2e:18:8c:7b:d7:db:84:d0:cf:
         93:d8:e5:db:64:a9:a2:92:48:44:34:d3:88:f3:a0:aa:9b:07:
         a7:7c:e1:1f:a6:6c:31:f5:bc:7d:af:71:1f:ab:0a:2e:7c:d0:
         6e:2d:2c:79:ce:3d:93:8a:52:cf:9c:70:10:e9:bc:a0:af:e6:
         18:3b:3b:17:43:72:9a:0a:f7:54:41:7f:b6:86:ac:5b:5c:fb:
         e3:7f:ed:81:c9:d7:40:f2:e6:d8:e6:df:ce:38:95:c1:fd:99:
         ac:17:78:95:e1:90:db:22:17:94:c7:bc:f9:0b:df:d2:9b:43:
         a7:12:5b:3b:18:49:ef:60:23:bc:64:bb:1c:6e:fc:69:f7:b4:
         7a:4f:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:38 2024 by rpki-client on console-fra.rpki-client.org