Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/990def7d-a12b-337e-80e5-91948dc77d31.roa
File:                     990def7d-a12b-337e-80e5-91948dc77d31.roa (raw, json)
Hash identifier:          CVTFugRReV9GYNS1DUSjFvZTmea8KMlzzWZKkH9pBek=
Subject key identifier:   07:85:A3:6C:1E:39:02:2F:E0:FE:71:1F:A9:2A:97:FB:F4:15:62:54
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F43285847537B6D5E7DD79530BB0BEE60
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/990def7d-a12b-337e-80e5-91948dc77d31.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     4476
IP address blocks:        192.68.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:6d:5e:7d:d7:95:30:bb:0b:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=09f16f4b-17df-4a74-b553-21475f6e8c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a3:ec:d1:5d:0d:b6:46:b3:e2:d6:6c:73:f8:
                    9a:97:7d:f8:2a:09:6a:94:f5:40:1b:85:bb:40:bd:
                    8b:29:61:61:68:ac:23:01:b4:84:99:ab:b5:aa:24:
                    32:a7:dd:3b:b1:0d:17:af:04:56:51:69:c7:67:69:
                    37:d4:80:d8:bf:50:c9:e6:89:1f:9b:79:dc:c6:ff:
                    38:49:29:49:00:89:f6:46:f0:20:6a:b0:77:01:fc:
                    8d:c8:7e:e8:10:5f:f8:7a:7a:cb:1f:0f:c8:61:48:
                    01:33:92:26:1c:05:f6:f1:20:0a:24:6f:ef:94:e7:
                    83:d1:4c:3b:0e:23:70:a4:4f:d3:51:79:4a:8e:d6:
                    73:d1:85:94:d7:59:b1:8a:71:1e:ee:c6:6a:92:d8:
                    bf:46:73:01:58:b7:a3:69:4d:e6:3a:33:33:c6:2b:
                    97:20:4a:69:4f:bb:2c:86:84:f1:f9:9f:26:76:a1:
                    f5:95:d0:ad:e7:4c:5e:4f:de:d0:05:f0:49:ce:c1:
                    c5:06:08:d0:ad:13:fe:90:b9:b0:3a:45:27:56:11:
                    ad:1d:a9:e4:38:c0:69:98:de:0a:2d:25:40:8f:97:
                    e1:0e:7f:54:f5:42:73:ab:9f:6c:43:ed:8c:12:83:
                    4e:b1:c4:a2:35:5d:18:92:db:12:dd:f1:23:bc:b7:
                    f5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:85:A3:6C:1E:39:02:2F:E0:FE:71:1F:A9:2A:97:FB:F4:15:62:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/990def7d-a12b-337e-80e5-91948dc77d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ad:8d:87:40:cb:c1:02:fa:99:b2:5d:b5:84:27:93:36:12:
         34:af:25:ca:f1:b6:e0:e4:0e:f8:c4:45:b0:71:1e:9c:42:6a:
         ed:5e:77:46:2b:1a:13:94:88:19:5b:34:99:3b:f9:d5:dd:e0:
         2d:cb:aa:94:2a:29:bb:87:04:11:7f:88:86:37:8e:d3:12:ed:
         25:43:dd:22:6a:a9:ed:a6:35:85:83:64:ee:a1:3e:53:4b:d9:
         90:e5:19:54:09:53:16:c1:19:44:b3:1c:ea:ae:1d:29:18:18:
         3f:d8:7f:c4:c2:c0:fc:05:d6:99:26:e6:68:18:75:69:de:19:
         72:12:65:12:aa:3b:1b:42:d1:13:9f:b1:f0:c7:73:45:4f:71:
         e9:08:cf:a2:5a:eb:a4:06:02:c6:19:4d:9c:d5:40:62:dc:d3:
         81:61:ae:b3:1a:0a:41:f1:82:3d:e3:8d:fc:d7:a9:8d:44:62:
         a5:81:e5:66:dc:51:e8:95:a6:0b:5b:98:9d:06:21:0f:af:45:
         24:b2:90:a4:e7:82:f8:24:74:7b:f2:34:c7:c6:35:2d:76:b2:
         dc:df:33:6f:1c:6d:eb:7e:bc:2c:fb:e8:5e:d0:35:d9:b5:cf:
         12:01:e0:ff:32:e5:a4:fa:3d:af:69:da:ce:50:ab:3d:3b:2e:
         45:9f:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:41 2024 by rpki-client on console-fra.rpki-client.org