Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/e30dedd6-340d-3771-b7e4-3005039839f3.roa
File:                     e30dedd6-340d-3771-b7e4-3005039839f3.roa (raw, json)
Hash identifier:          3L6qrg1K8XkZnzxUtBgWNJDZuffmJxKt4GFPsnyA8QA=
Subject key identifier:   E1:81:22:FB:C9:BD:6A:DF:16:BF:E0:AE:52:7D:41:51:08:F5:6A:D7
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F43285845840DC2618B6DF78074152660
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/e30dedd6-340d-3771-b7e4-3005039839f3.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     10929
IP address blocks:        68.71.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c2:61:8b:6d:f7:80:74:15:26:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=73d0e879-6e3d-4b12-a0bc-f6eab80b98bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e0:a9:96:67:9d:f8:83:f8:d3:41:98:26:fa:
                    42:e8:00:54:bf:50:d5:89:4e:72:b5:f6:66:4a:dc:
                    80:0f:3b:1b:c8:98:d1:4f:2a:a4:01:3c:da:ce:a2:
                    ad:96:c1:c5:4b:2e:34:75:53:e7:d0:96:e0:0c:3b:
                    b8:1f:60:b8:81:30:2d:c4:23:b0:5d:a0:a3:9c:71:
                    9f:a4:95:99:86:2a:b8:c3:84:13:69:de:6d:4d:b4:
                    2c:d6:c3:78:01:87:ac:c6:d3:a4:f4:9f:79:1b:fd:
                    33:d7:24:59:ae:61:bd:9e:43:38:ad:45:f9:24:dd:
                    fa:4a:04:dc:1e:46:d7:0e:2e:c3:fa:e7:c0:08:97:
                    fc:44:a4:51:2a:4d:44:07:73:69:a3:ca:42:d4:e3:
                    a0:38:2a:0e:88:8e:9b:53:34:72:ca:07:91:cc:5d:
                    d5:74:13:89:d4:42:d3:58:ce:56:af:bf:09:0e:14:
                    f9:e0:6c:d0:0e:67:87:4a:fb:a9:1e:e8:5e:3c:36:
                    82:b9:d7:af:5e:ba:70:cc:c4:d6:f6:44:9c:34:0f:
                    02:17:67:39:a5:b0:ef:f0:a0:48:6a:0d:5b:d0:75:
                    0a:23:eb:29:6c:e8:3a:af:52:4b:bb:ba:f5:c5:33:
                    49:f0:28:ff:6a:d5:50:26:01:03:0c:25:83:92:3e:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:81:22:FB:C9:BD:6A:DF:16:BF:E0:AE:52:7D:41:51:08:F5:6A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/e30dedd6-340d-3771-b7e4-3005039839f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:97:12:13:ca:e0:4f:fa:33:9d:8d:bb:31:a6:de:b5:a4:4e:
         69:3a:fe:47:a1:0b:de:bd:cd:a1:97:6b:05:35:4e:e6:5b:ac:
         90:d0:c0:c9:a1:bb:a9:e1:40:35:4e:54:bb:a8:25:6d:1a:fc:
         d0:e9:7c:6c:ec:63:f6:10:ba:50:78:17:90:cd:4d:7f:bf:69:
         a3:e8:47:c9:a4:13:4f:04:c9:22:c4:ce:13:2d:3b:ce:54:f8:
         c3:b2:9c:fd:a5:43:bc:65:ad:84:a3:aa:77:a0:b1:15:ba:48:
         05:72:0e:cf:2b:65:3d:ad:94:01:26:9c:ac:1b:43:a6:35:a6:
         f5:31:60:05:05:35:0a:35:2a:02:93:13:35:ce:fb:57:1e:df:
         64:7f:eb:97:b6:6e:dc:40:e0:0d:7a:9f:aa:c8:7f:9a:52:fc:
         87:de:bf:74:49:a5:10:ad:6d:53:90:b7:5b:4e:e0:8a:0d:3d:
         3d:b8:0e:df:b8:80:2b:99:51:b6:ca:a7:e9:8f:c0:a9:48:b2:
         6c:cc:2a:c8:74:d0:9e:2b:25:ef:2b:56:8c:90:bd:af:9b:ab:
         be:d9:5e:ed:d2:77:3c:94:2e:08:df:d3:f7:fd:52:80:f4:e8:
         af:4a:c4:cf:c7:f7:5e:1c:c8:fa:82:6e:ab:a1:bf:37:4b:26:
         31:30:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:00:59 2024 by rpki-client on console-fra.rpki-client.org