Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa
File:                     67fb9365-155a-30e2-9cb0-ea2989748078.roa (raw, json)
Hash identifier:          TdXr6+gY4jsj8yj+czLXfMeQPg8rVAzyA2q83gJpwm8=
Subject key identifier:   88:33:9F:B0:8F:81:D9:48:3C:1A:C3:2E:96:6D:FB:A4:6B:6C:7D:51
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F4328584769D0DE4E5982E8C1C6336340
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     46353
IP address blocks:        208.67.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:de:4e:59:82:e8:c1:c6:33:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=75385b95-19e0-41f7-9a3d-54b00d66b8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b1:08:1d:23:34:8a:52:09:85:2e:40:e5:51:
                    98:54:d7:0a:27:45:bf:fd:15:4b:83:0e:c2:bc:13:
                    ff:b5:8d:fd:ef:ef:04:f2:ec:65:65:4d:a2:23:a6:
                    ac:82:b1:ff:20:d0:ff:3c:74:dd:dd:9b:2a:fd:38:
                    f6:ad:06:35:c3:af:84:2d:ff:82:b1:0d:f6:25:4f:
                    6c:dc:f8:e4:3c:89:77:f3:37:93:5e:32:42:09:56:
                    10:7b:07:2e:ed:4b:ef:5d:67:b3:e3:32:8e:45:7f:
                    ee:76:02:12:6b:18:45:51:7a:1d:c7:8c:9f:a2:6e:
                    5f:78:84:84:14:1b:97:02:ac:29:56:ee:45:62:82:
                    b6:dd:ee:d9:13:9d:74:f3:10:ef:f9:a6:66:4a:4c:
                    c5:74:37:9f:4e:83:36:73:98:a8:aa:fe:21:a9:d1:
                    c0:68:84:b7:0f:7f:4f:b9:2d:a9:c4:8e:81:80:f7:
                    09:d9:bb:f8:a8:a4:eb:2e:6d:71:40:30:a8:66:d5:
                    f2:59:7f:b9:d1:64:92:ed:f8:bb:d8:26:be:32:73:
                    73:18:9e:04:5c:93:46:53:9e:f8:63:dc:6b:01:4c:
                    92:e1:2c:15:6b:8b:33:a6:9e:60:84:e8:4d:1d:c5:
                    ef:e6:16:72:2d:d1:21:fb:c4:00:fe:7d:31:b0:70:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:9F:B0:8F:81:D9:48:3C:1A:C3:2E:96:6D:FB:A4:6B:6C:7D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:2a:50:47:33:12:94:a9:1f:61:10:f3:61:db:ac:10:a8:
         81:3a:71:3e:e1:1e:7a:c1:0a:0d:f8:0c:d5:2e:58:fa:e5:0b:
         0e:50:76:dd:f2:9a:bd:14:b6:4a:ae:20:fb:2a:7b:98:19:95:
         2a:d4:84:29:8d:1a:93:3d:5b:58:1e:8a:06:02:ec:84:58:84:
         ef:42:7f:b7:b0:2e:bc:43:a5:17:6b:1d:e8:d1:e6:95:4f:bf:
         27:91:1e:73:fd:f7:e0:d5:e2:7b:85:21:5f:f0:36:a9:66:46:
         17:a7:01:3a:c9:dc:d8:d0:7a:a8:09:37:37:80:e0:b8:9a:14:
         03:65:16:b1:50:12:f1:d2:53:5c:da:7e:67:a5:2a:cd:bf:4b:
         95:02:fd:a7:8f:4a:90:14:3c:70:14:fe:07:a1:bd:c8:2d:e2:
         a4:0f:6c:76:13:17:2e:af:6b:a0:33:d6:21:0d:7a:22:ce:71:
         1b:43:b1:5d:a1:fa:8d:93:80:f1:83:05:20:43:4c:76:ca:ad:
         18:cb:a6:3c:28:ad:0c:41:ee:14:9d:e0:6d:7e:e3:69:6b:fc:
         95:76:19:7c:dc:29:7a:4d:bd:e8:ce:f0:66:af:f6:5d:f4:c5:
         a7:86:96:3f:07:1b:14:57:48:a6:b1:25:1f:2b:05:83:37:4c:
         fa:11:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org