Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa
File:                     c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa (raw, json)
Hash identifier:          ZmHLgd4/CEr3t4YHntbQcr/ZjidWOIQYNFz/ucEChkQ=
Subject key identifier:   F6:2D:7D:73:99:8F:24:9E:78:A0:F9:2F:2E:2D:53:6F:1E:7E:59:C9
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED0066E389F03C83409D600
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     11404
IP address blocks:        68.66.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:06:6e:38:9f:03:c8:34:09:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=ffaff542-e70c-4022-948f-7e1a16ca7fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d8:84:01:a4:0d:9c:89:e0:4b:44:c4:5e:f9:
                    31:e5:55:dd:93:89:8a:e1:ba:5a:ad:b4:f0:24:63:
                    04:2a:50:25:7f:e2:07:30:f8:60:de:64:92:8a:0d:
                    a2:de:db:a5:6b:f5:bb:ff:7e:0c:2c:1e:81:63:b0:
                    5b:df:73:2c:7e:56:e4:d5:90:89:99:06:cb:de:65:
                    37:2e:e8:4b:34:3c:40:e3:b4:40:26:b2:cd:14:ec:
                    f2:ce:0d:71:da:13:0b:1d:3c:51:00:af:58:12:62:
                    d0:2d:ce:e9:8c:04:1d:1c:65:fd:3c:b5:37:ec:b9:
                    3b:17:30:02:44:07:35:b8:ea:d1:41:43:38:c0:ba:
                    e9:67:13:9d:b7:11:54:d8:f3:ea:fc:f1:5e:b3:7f:
                    1b:6c:9d:fd:b0:d8:87:6e:0c:21:8f:05:9d:fb:fd:
                    5d:04:a3:5d:90:93:13:e7:e1:d9:31:c6:a0:e9:ac:
                    26:53:0b:e4:9f:82:8f:f5:bb:02:83:08:57:d4:97:
                    de:b7:d7:62:b6:4d:8d:32:d2:75:53:1a:2f:ae:e7:
                    a2:e9:f8:87:a3:9c:34:28:9f:fe:76:3c:a4:04:61:
                    7b:d3:65:5f:bb:c1:a7:88:96:af:a1:07:ad:16:47:
                    74:ec:25:5f:da:d1:28:79:ca:98:e8:f2:0d:07:e4:
                    92:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2D:7D:73:99:8F:24:9E:78:A0:F9:2F:2E:2D:53:6F:1E:7E:59:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b7:51:15:f1:12:9f:8f:ac:be:d9:46:6c:c8:99:34:7b:55:
         92:dd:d5:f9:0c:23:c8:83:ff:11:b7:2d:2a:d4:14:d7:d3:34:
         a3:d9:65:0f:c5:fd:73:79:70:f1:af:e7:c2:16:0f:23:cf:ac:
         53:a1:15:3e:0e:9c:65:c6:fe:ec:cd:30:59:75:c5:d6:b7:14:
         b2:f2:c0:b2:16:c3:4b:b6:ed:9b:a1:68:7c:d9:44:ca:7f:c3:
         5e:e2:0e:09:4a:09:28:b3:5f:94:12:7b:46:59:4e:b1:2f:fe:
         7d:47:36:e9:c4:16:fd:ee:d0:98:53:ef:7c:70:ed:ba:c8:65:
         71:e0:8d:00:f1:f0:09:79:21:4e:f7:4c:54:fe:2c:81:0b:80:
         74:d3:34:46:d4:ee:de:d0:e7:f7:64:69:3b:b4:20:37:ec:00:
         68:6a:d5:a5:d5:17:d8:ef:16:80:55:22:d0:0e:a0:3d:d4:71:
         18:1a:0c:7a:a1:92:9b:30:c4:d1:1a:cf:6c:20:fd:e4:37:95:
         de:72:3a:9d:61:92:51:76:b5:3d:bd:4a:ef:12:8f:6f:33:ac:
         f6:df:ae:57:23:9c:39:d8:76:6a:00:54:d8:3b:f6:98:b6:bd:
         db:c8:1a:a2:ee:b2:3a:95:3d:87:96:f0:8b:08:d7:85:28:85:
         46:3b:07:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:52 2024 by rpki-client on console-fra.rpki-client.org