Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/007f24cc-fba9-31c7-874d-1e34664494bf.roa
File:                     007f24cc-fba9-31c7-874d-1e34664494bf.roa (raw, json)
Hash identifier:          CdOqzspXOCU/tljeHeGmKGC04lWf/Hwbw7XuDUBnnH8=
Subject key identifier:   97:08:7B:FA:A7:E1:23:2C:33:1F:E3:A9:5F:DE:8F:B7:79:C9:45:FB
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584769D0DAF7FCF68C5873FE1E40
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/007f24cc-fba9-31c7-874d-1e34664494bf.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     31898
IP address blocks:        199.68.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:da:f7:fc:f6:8c:58:73:fe:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=7f3f61d6-e21c-410d-a859-ca13e98c6640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:5a:55:73:5c:ba:34:f7:62:cf:02:6e:04:
                    e4:8e:76:81:ab:4f:22:b1:c2:eb:af:cb:39:99:fc:
                    90:7f:65:3f:28:97:13:e8:43:77:51:1d:af:97:84:
                    35:41:40:cb:2c:a3:90:7d:1b:36:99:74:84:42:cd:
                    c6:ab:48:26:c1:8a:e9:5f:82:a5:f7:0f:ca:da:20:
                    7f:17:3c:0d:b9:3f:14:2b:af:4b:7a:8e:f8:a4:5a:
                    16:6d:3c:0e:ae:6a:ec:68:e6:84:3a:a2:32:67:87:
                    14:d3:fc:aa:8a:fb:f4:51:09:49:b5:42:02:6e:b5:
                    5b:f3:c1:32:fe:2f:0d:ab:3f:ea:5c:fb:f7:fc:dc:
                    29:89:de:fe:c1:42:17:5e:c6:7e:d6:60:dc:0a:b9:
                    45:c7:ae:22:09:f8:f2:ad:56:20:c4:04:8f:fd:e0:
                    99:f9:c2:11:da:b2:ed:7b:3d:e7:fe:ff:df:46:5b:
                    36:54:36:85:4e:64:0f:21:98:92:21:e1:ae:ba:45:
                    9f:e2:d1:3c:07:e8:2a:09:96:31:b7:2b:8c:fe:cd:
                    25:dd:5d:87:66:93:0e:e9:3f:7f:d4:b8:65:ab:07:
                    8f:29:8b:e3:b9:8b:36:70:2e:4d:89:53:de:7f:7d:
                    a0:25:aa:65:15:4b:ca:3e:bd:ee:62:ed:07:0c:68:
                    93:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:08:7B:FA:A7:E1:23:2C:33:1F:E3:A9:5F:DE:8F:B7:79:C9:45:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/007f24cc-fba9-31c7-874d-1e34664494bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:3c:69:19:95:d2:fe:84:e2:6b:2f:69:16:41:3c:fa:f7:d3:
         11:96:a1:e6:37:68:06:1f:92:1e:06:41:18:f6:29:ab:1b:6f:
         c6:7b:38:54:c6:5e:69:90:98:cd:af:a3:97:78:c9:80:fc:d7:
         3c:79:37:87:d8:c5:d8:d5:29:d4:ae:a5:e2:19:2a:92:3d:60:
         ff:bc:15:eb:8f:1e:35:be:aa:df:6b:3d:3b:d9:bc:06:f0:12:
         3b:c3:f4:e2:14:3f:83:5c:46:3a:7e:cc:bd:3d:5a:86:6d:95:
         a9:99:86:91:76:52:d8:ea:a1:3e:a3:04:15:45:14:fc:16:a6:
         e7:b9:1c:03:8b:c2:cb:00:76:42:aa:3a:0b:f2:08:46:44:fb:
         14:14:9f:c0:31:07:50:b5:91:08:ad:92:e5:8b:5d:41:7d:43:
         4f:d9:3b:78:a8:0f:97:16:17:9d:b4:44:7c:fc:a8:83:ba:87:
         43:cb:d1:9a:53:e2:9d:09:71:2a:0b:86:f4:5a:2b:04:9d:1c:
         5e:9d:cb:c3:6b:d8:27:fc:d2:f3:ff:11:88:c6:f9:31:2f:36:
         0e:45:ce:f0:23:d4:03:8a:0a:5d:5a:21:83:3b:f1:5f:f0:3f:
         ae:a1:c4:5d:1a:2e:7a:dd:89:c2:bb:b6:5a:9c:61:45:fa:59:
         00:98:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:01 2024 by rpki-client on console-ams.rpki-client.org