Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa
File:                     36234625-4a26-3605-90a3-4b465a3b61b7.roa (raw, json)
Hash identifier:          HWXznTh0TqhkpjspjYKdYyCvfbyf39f91ucG2ORBrEo=
Subject key identifier:   9D:9E:B9:FC:CD:2A:48:59:E5:83:B0:7D:D4:0F:60:7C:FD:17:CA:E6
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F432858471D0B14AEE305D4B24CE1D580
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     4476
IP address blocks:        192.68.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:14:ae:e3:05:d4:b2:4c:e1:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=f74311ba-6c20-4aab-9175-e31ea987b6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:55:19:d9:a0:a5:14:99:e3:7c:d8:af:42:
                    c5:e0:23:af:96:eb:8b:7c:64:62:1b:63:14:e5:02:
                    5e:f9:33:67:d1:de:38:53:33:81:20:a0:b3:b2:2b:
                    44:e5:f5:08:61:16:59:4f:58:4b:4e:e1:29:e2:a1:
                    51:c5:86:49:1b:5e:e2:8b:e6:8c:f8:5f:da:4c:e3:
                    2d:7e:1b:0d:1f:ef:5a:90:a3:92:a6:cc:72:01:07:
                    2b:52:53:db:ed:d6:d1:c1:2f:a7:6c:ec:55:ce:7d:
                    66:6e:e3:2f:97:92:0d:19:80:61:ff:9f:19:21:9b:
                    6e:9a:1f:80:08:93:e3:40:08:70:0b:37:9f:eb:4c:
                    8e:66:6a:e8:89:7c:fd:0d:15:f6:ec:3a:ff:0c:b8:
                    73:7d:ab:4a:f8:16:48:2a:ae:18:71:8f:1d:e5:54:
                    e1:6c:41:a3:d7:4a:72:2c:89:1f:62:aa:51:ac:d9:
                    db:ed:7c:20:02:01:c0:ba:70:53:3f:f4:65:9b:93:
                    32:e3:d5:aa:85:85:6c:4d:80:42:8c:15:86:83:3a:
                    d8:1e:cb:1e:70:06:53:2c:d9:23:f7:46:50:85:c4:
                    ca:35:7d:f4:7a:7c:08:41:6c:2f:31:20:55:5c:69:
                    2a:76:eb:ab:89:26:3b:3f:4e:55:8e:a4:00:01:b5:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9E:B9:FC:CD:2A:48:59:E5:83:B0:7D:D4:0F:60:7C:FD:17:CA:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b7:93:a9:f9:53:70:64:bb:6c:22:2f:d8:2f:19:67:e0:df:
         94:d2:ef:af:00:c1:c4:95:63:71:09:f4:2a:e9:2b:b1:d8:59:
         5c:a9:5f:fc:69:9c:8d:03:5b:a8:19:49:e7:1c:55:4a:3f:39:
         23:6f:da:84:74:d3:3a:3f:c9:cc:0b:17:f7:ab:8e:ed:e7:d5:
         21:6f:ad:33:09:cf:bf:e1:30:db:b7:40:8e:c9:2b:de:03:1e:
         4d:0d:01:f2:87:ce:da:d6:ef:1a:4d:90:f1:18:90:3c:1c:0d:
         42:45:04:e2:27:1b:44:3c:4b:06:02:44:93:11:74:77:a1:c5:
         ec:fc:e4:8e:07:d9:fe:c2:6b:76:23:ef:23:28:b6:56:e4:c3:
         a5:2a:7c:63:e8:7c:a6:41:4f:6e:0c:47:1d:c8:ca:53:b7:85:
         96:a2:6d:02:6d:d9:1a:47:31:f1:4b:04:18:bb:e9:c2:89:05:
         58:16:c6:69:c0:ca:15:28:a6:3a:ff:38:d0:26:85:d3:bd:b3:
         ec:e3:02:30:9e:56:8e:63:c0:12:5b:c2:40:d6:bd:cd:8a:93:
         02:7f:63:9e:44:68:f0:07:7a:37:f0:76:86:e9:44:4d:84:b1:
         85:36:19:6a:01:d7:cc:b3:45:dc:df:58:4c:fe:22:06:77:a3:
         89:86:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:41 2024 by rpki-client on console-fra.rpki-client.org