Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/e9558cb9-04af-30b7-b473-79dc5cf0389d.roa
File:                     e9558cb9-04af-30b7-b473-79dc5cf0389d.roa (raw, json)
Hash identifier:          +uNkBZ+tdVh9vusf6MkLUdmtNi7h0eABpCowG8cj7ss=
Subject key identifier:   27:B9:A8:C6:87:32:8C:7D:D8:EB:6E:92:A1:BF:2B:05:39:E2:7E:5C
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F432858475EA62BDA8A6A5FDFF2090E80
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/e9558cb9-04af-30b7-b473-79dc5cf0389d.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     18779
IP address blocks:        104.223.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:2b:da:8a:6a:5f:df:f2:09:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=371e40fc-1946-4505-b511-02fa304d04f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:50:da:e9:be:f7:56:b5:61:9c:06:f5:14:
                    0d:df:4c:00:8c:f6:80:ff:5c:3b:81:9b:30:cf:2f:
                    cb:f0:5b:90:c4:b3:4e:2b:f8:a4:28:1a:51:12:b6:
                    93:ad:2e:dd:ae:5a:55:9b:84:b6:ac:cd:a1:8e:a9:
                    ce:2a:ac:be:3d:1e:f3:21:75:f7:19:97:3a:0f:bd:
                    fb:93:b5:bd:ad:a7:c3:82:2c:0b:e8:65:86:f9:d1:
                    c4:70:23:f4:d4:77:3f:66:c4:12:d6:bb:e8:2c:54:
                    6d:07:4e:17:7f:79:33:59:df:ef:12:0c:54:9b:72:
                    dd:1d:53:39:75:3b:b6:db:4c:16:1d:25:8d:8d:b8:
                    3a:06:de:72:ab:73:86:7b:2d:ea:04:3a:75:47:f8:
                    0b:86:9b:b1:98:56:82:38:27:b4:92:16:c8:b2:33:
                    ca:7f:59:41:c6:cc:31:e3:1c:dc:c0:fc:b0:32:d0:
                    24:23:a1:1b:0f:97:13:59:be:8b:7a:71:19:2e:46:
                    4a:ca:10:f7:03:db:8f:d3:50:04:4f:c8:55:83:ef:
                    f4:93:ed:21:92:c2:86:f1:75:c7:e2:e8:33:cb:d5:
                    ee:ce:8e:08:2d:bf:21:98:d4:69:be:23:c2:53:50:
                    a1:df:86:d3:af:c7:3f:26:f8:4b:29:c1:f3:8f:85:
                    5f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B9:A8:C6:87:32:8C:7D:D8:EB:6E:92:A1:BF:2B:05:39:E2:7E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/e9558cb9-04af-30b7-b473-79dc5cf0389d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.223.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:9b:88:ba:af:f3:be:8a:63:f3:8f:f6:28:ad:8c:ab:c9:
         07:1d:4b:bc:86:04:e8:99:50:02:8f:36:dc:c0:92:3c:2d:e3:
         bc:a8:0d:34:bd:65:31:4b:e9:57:1c:1d:15:66:76:9e:99:3d:
         fe:e0:4a:bd:ff:ad:bb:a9:f0:12:1c:ad:b6:a8:77:26:01:11:
         d3:93:42:99:6a:4e:97:1e:41:17:76:16:07:cc:d9:6f:11:85:
         4b:f9:a4:16:60:9b:cf:f9:51:e6:a5:79:28:89:60:27:71:d6:
         06:8a:5c:e8:66:57:21:a1:57:a7:f4:1f:55:2d:52:41:4f:12:
         2d:6e:83:f6:35:7d:6d:b0:ab:d3:8b:9f:93:d1:46:fe:6a:10:
         99:93:d4:fc:63:ac:17:48:e4:ff:88:d8:10:ef:75:9d:49:b8:
         ae:a3:e1:a1:48:49:9d:6c:04:26:52:bc:cd:49:79:f2:b0:13:
         4e:c5:20:db:11:66:b7:de:10:ae:51:9f:9c:d4:ff:f0:58:f6:
         7d:fb:b9:44:06:a6:47:4d:1c:39:82:0a:e5:20:1c:7b:50:fa:
         df:39:d9:70:9e:3b:a8:31:c4:76:25:63:91:90:37:a2:17:c8:
         c8:42:a5:a8:0f:c3:ba:20:76:30:5a:29:b8:c5:40:3c:49:dc:
         0b:b9:f7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:30 2024 by rpki-client on console-ams.rpki-client.org