Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa
File:                     aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa (raw, json)
Hash identifier:          3iVBHdy4x9WcT72Z4756TLSzyohaScmfbUY59V79bh4=
Subject key identifier:   C5:28:CF:F0:1B:36:B6:59:B9:31:AA:C9:71:6F:07:4F:BB:F7:D7:7E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584546A2B5927B9427118D6AADC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     64267
IP address blocks:        68.234.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:b5:92:7b:94:27:11:8d:6a:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=1dfc1473-cb4c-4e96-be34-b609c00c6e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:46:c0:59:f5:3e:3a:3c:5b:4e:f1:01:dc:
                    a3:36:fd:fa:51:bb:b6:e4:95:0d:cf:8c:e8:ac:e9:
                    7c:14:91:5b:3c:22:12:7b:1a:65:b4:15:0f:e6:c5:
                    08:03:89:40:f2:fd:1f:6c:09:fa:1e:81:c7:4c:84:
                    77:97:48:a2:66:b3:0e:06:a1:d5:84:63:3a:4b:06:
                    c4:4e:e2:cd:29:61:fd:06:b8:47:24:3f:90:a3:21:
                    1b:43:41:db:53:dc:e7:34:09:13:ef:d8:2a:1f:a7:
                    28:16:fa:56:a4:c4:6d:82:0c:44:77:80:65:44:dc:
                    f9:84:a3:6d:09:19:9f:bf:63:f3:e6:57:5e:64:6a:
                    a2:eb:1e:46:d3:07:e9:60:50:1f:7d:35:47:32:66:
                    d6:cc:52:e6:88:d4:12:aa:00:a1:35:b8:6a:19:d3:
                    fe:22:93:6b:94:18:bb:6c:06:ab:d7:86:91:7e:d2:
                    b7:c7:65:0b:49:3e:b4:85:92:d1:76:9b:8b:fa:ea:
                    bf:ab:82:c4:ac:ee:33:90:d0:3e:bf:16:5a:d3:47:
                    0c:39:f7:41:38:62:3c:f7:68:33:88:c7:ef:2c:58:
                    fe:3f:69:fd:f5:7e:3a:f3:6a:36:db:58:ee:65:6c:
                    1f:b2:1f:c1:05:19:52:e2:4a:bf:e7:44:cc:88:8c:
                    88:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:28:CF:F0:1B:36:B6:59:B9:31:AA:C9:71:6F:07:4F:BB:F7:D7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:1c:4b:82:3b:e7:2d:9d:24:e9:d7:e8:43:0c:8a:5b:4c:2a:
         37:42:51:a4:8c:75:86:2c:95:91:42:b1:e2:7b:20:62:1b:59:
         f9:64:f7:fc:07:01:d1:32:b6:62:b5:0b:7b:eb:ff:98:68:48:
         9d:d8:87:45:5e:e8:c1:c6:21:b5:1c:47:fc:b1:69:48:95:34:
         a7:d8:cd:57:26:bf:54:ac:c4:e4:c8:80:a1:a1:9d:5b:26:ed:
         bd:50:4d:39:46:47:e1:e6:5a:fa:6b:7b:8e:69:51:00:54:3a:
         40:8f:4f:66:78:43:71:d4:3e:a6:7f:a9:5f:02:d8:27:47:12:
         e5:e2:f1:66:70:91:7e:11:2a:d4:b5:d0:e9:8d:24:a2:6e:85:
         2c:1b:71:d3:f8:8c:d0:67:d2:78:3c:c5:97:4e:dd:d8:58:14:
         dd:8e:61:a7:1a:c7:f3:45:bc:59:95:01:a6:37:b8:cd:bd:d9:
         b3:62:fa:b4:e2:ac:df:33:fc:09:0e:05:99:78:a2:26:9d:de:
         17:1d:c6:82:39:97:5f:24:35:61:e9:e3:27:47:f1:2b:8f:02:
         2a:85:1a:f7:ce:c7:78:ed:ab:b0:00:bf:98:e2:a0:70:11:fd:
         d8:af:b9:bd:99:dc:be:d9:0f:c8:a3:fb:87:64:76:74:48:7c:
         ba:7b:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:08:49 2024 by rpki-client on console-ams.rpki-client.org