Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e101c4a-a0da-35e0-9bc5-e1f123c8e78b.roa
File:                     2e101c4a-a0da-35e0-9bc5-e1f123c8e78b.roa (raw, json)
Hash identifier:          +WdQmQ07//hdhKzg/tG6nDdMepwy/ai+reWe/JMc1Ug=
Subject key identifier:   A2:07:FD:A1:AA:96:CC:01:2A:91:3C:32:DC:47:22:22:D8:D4:60:89
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584546A2B2C913BCE23F7F504BC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e101c4a-a0da-35e0-9bc5-e1f123c8e78b.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     7018
IP address blocks:        68.234.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:b2:c9:13:bc:e2:3f:7f:50:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=b75d586a-7646-425f-9a78-f276ac98419a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:29:b0:72:08:d6:9b:df:02:bd:33:d8:f9:
                    00:3a:06:f0:bf:ef:93:61:15:98:00:b1:6a:8d:3f:
                    ed:6e:dd:8a:c3:fc:f7:a3:8f:d4:43:a4:97:2d:fd:
                    fb:e8:4a:98:39:ab:03:65:ef:99:39:ef:35:ec:78:
                    97:65:fa:6d:87:f3:79:03:64:e4:de:29:5d:99:e3:
                    18:d1:f8:8b:36:c8:1a:ef:33:53:49:01:26:57:f9:
                    f8:a9:50:1c:83:0b:8d:5a:f0:c7:37:e3:2d:59:78:
                    c9:79:96:0f:74:b3:da:c6:ca:40:6f:67:e6:e9:46:
                    90:8e:85:c7:1c:e2:f0:1b:e5:89:d3:8b:c5:fa:46:
                    18:f4:2a:3d:61:6d:bd:f0:72:40:35:ed:05:32:40:
                    e2:80:ab:45:21:2b:bc:4a:d6:5f:49:58:d0:f7:28:
                    f9:25:e6:06:7e:38:9c:69:1c:58:3b:6b:e9:af:c8:
                    d8:2b:e6:71:cb:20:b3:57:43:10:34:88:2b:e3:ea:
                    51:95:b4:04:76:f8:8e:a6:89:ac:9b:47:f8:49:47:
                    9c:3f:7b:0d:1f:78:15:9f:de:20:d8:66:c6:7a:47:
                    10:a4:ac:18:60:1d:d5:94:89:bd:10:3e:30:32:43:
                    ca:d6:9d:d6:3a:0b:53:a9:20:8c:85:0e:5e:e9:97:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:07:FD:A1:AA:96:CC:01:2A:91:3C:32:DC:47:22:22:D8:D4:60:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e101c4a-a0da-35e0-9bc5-e1f123c8e78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5d:dd:11:4f:8f:be:4b:81:bb:e2:6f:6d:67:22:d5:07:05:
         21:fe:e4:21:10:9a:ad:03:7b:bd:d4:28:2a:40:05:33:9a:65:
         21:3c:ee:10:b0:ad:81:8c:36:23:ff:52:99:de:13:1f:5b:e2:
         04:8c:db:64:5c:50:96:0c:af:03:9b:67:ce:5c:d7:4a:f7:f9:
         8c:8b:d3:f3:d5:c5:a2:de:c9:cc:83:5f:a5:4e:92:42:e5:22:
         50:9a:05:3e:ca:48:1a:34:3f:7f:35:7e:87:9c:66:28:fa:09:
         aa:5c:d7:83:a3:7a:6c:a3:8b:44:98:48:25:ce:a2:79:b1:24:
         52:b9:6a:5a:b3:7d:e1:e1:89:57:d2:a6:da:de:26:63:a1:a2:
         3a:d5:54:73:26:d9:a0:5e:c5:2f:10:5a:f1:92:23:67:9b:45:
         fc:00:f2:29:50:4d:10:70:51:27:d6:d5:fe:32:2b:65:d2:32:
         f4:57:72:9c:62:69:2b:99:1c:25:52:de:e8:f3:a4:26:35:1b:
         60:b7:a5:9b:56:9a:ca:9f:93:02:7f:bc:e9:61:68:b8:47:34:
         5e:0d:8a:d8:28:c5:e1:cc:d6:3a:b8:5e:9a:c7:c6:c9:b2:80:
         8f:95:c2:f4:9c:66:e8:3c:72:e3:f8:36:05:12:94:f6:a9:d8:
         ca:0d:b2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:49:30 2024 by rpki-client on console-ams.rpki-client.org