Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/43fcd001-71e5-3bc0-b239-799031ea87ed.roa
File:                     43fcd001-71e5-3bc0-b239-799031ea87ed.roa (raw, json)
Hash identifier:          J5gDS8CtwjdH/s71exiLOWEGjIT3L0RJ+JY5gIFtZag=
Subject key identifier:   18:B1:AB:15:A1:A4:59:E7:5C:F3:C8:C8:BF:15:F2:67:5B:8E:64:53
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F432858477660F8EC3D252CDA82F82840
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/43fcd001-71e5-3bc0-b239-799031ea87ed.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     13213
IP address blocks:        68.169.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:f8:ec:3d:25:2c:da:82:f8:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=f0db13b3-01a4-4d20-bd9b-97ad0b95f4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:60:bf:16:c7:81:a9:96:98:80:56:23:df:
                    5c:4f:07:76:76:f9:b1:56:a4:8a:de:20:42:8d:99:
                    0e:dc:92:7d:cb:2d:0f:cb:03:9c:cb:77:c1:cf:dc:
                    74:24:d8:75:75:24:94:ee:a1:1c:5f:98:97:c8:2e:
                    d0:ea:c7:fb:21:da:10:d7:62:66:35:71:19:81:28:
                    f6:96:31:c4:47:94:a6:10:32:c7:7c:1f:6e:e2:75:
                    b7:ac:ea:82:85:cb:6f:28:85:e7:6f:ce:bc:0f:fb:
                    dc:5a:12:2d:0a:ce:d5:fc:ec:3d:64:c2:5f:fe:e5:
                    00:e3:e2:30:53:0a:aa:ef:e3:08:f4:63:9a:23:71:
                    26:f1:94:f8:94:30:e7:e7:6e:e0:9e:41:01:6f:2d:
                    88:ec:c4:81:94:37:ef:e6:9f:5b:26:ed:50:d3:a1:
                    2e:27:17:a0:f8:c3:fa:68:e6:46:39:04:50:3e:ba:
                    b7:6f:55:c8:08:fa:12:37:a9:88:8c:49:04:0a:93:
                    29:c2:29:d1:20:72:45:49:14:85:e0:d6:4d:98:78:
                    5a:02:17:2e:e2:e4:be:82:13:e5:30:f1:7b:8f:fd:
                    ca:f0:a9:43:85:38:32:93:ed:1a:e1:84:b5:0d:bf:
                    21:4a:20:26:c5:70:be:50:ec:d4:8d:ad:f2:13:29:
                    9a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:AB:15:A1:A4:59:E7:5C:F3:C8:C8:BF:15:F2:67:5B:8E:64:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/43fcd001-71e5-3bc0-b239-799031ea87ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.169.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:60:7f:c6:15:75:6f:e4:c7:67:eb:bb:76:25:74:2e:5c:
         8f:dd:5b:7e:cd:88:e8:61:5c:23:13:f5:34:15:11:e6:75:6e:
         ba:92:ee:7d:27:09:a5:8c:c6:65:04:b3:db:12:cb:59:35:ea:
         6d:dd:d1:17:4a:0a:db:21:69:2b:7d:24:9d:5f:ab:e8:9f:a1:
         d3:91:f5:a8:f5:9f:61:30:ec:e0:a4:5b:ef:60:0b:44:52:a0:
         62:92:bb:0e:1a:96:08:d5:e3:ba:ed:3f:a4:e1:20:46:0f:65:
         6e:67:d6:ed:4e:57:f4:79:df:73:e1:38:64:5a:2e:ce:1b:43:
         11:b0:92:bd:0a:b6:d5:3a:86:a8:3b:d3:6b:9b:aa:bf:b5:5e:
         47:69:e9:a7:35:cf:00:b6:3c:cb:e7:95:f7:7d:de:96:c9:f9:
         28:7a:a6:d8:f6:ba:09:66:0a:0a:73:eb:26:b6:6e:bb:eb:d8:
         34:f6:50:63:7c:06:e4:28:e8:8e:57:ed:48:20:36:c6:92:c0:
         2d:24:30:21:63:5c:38:e5:0f:bc:95:43:ab:d1:7f:de:2b:b3:
         97:4a:99:05:db:51:99:19:a5:7b:6a:86:1e:8a:f4:37:f8:b1:
         dd:64:ba:b8:49:7d:d5:25:27:af:d3:91:40:58:22:96:88:90:
         76:f3:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:30:13 2024 by rpki-client on console-fra.rpki-client.org