Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa
File:                     6d52598c-853a-33f7-b184-caa86dfc7a61.roa (raw, json)
Hash identifier:          Y5VETIUklNvwcBfv33xB04oNh0+RQfqXYmeIQXGFcLI=
Subject key identifier:   E2:6F:D3:B0:A9:95:B2:46:19:CA:0A:C8:90:9B:20:C9:D2:F9:DE:4E
Certificate issuer:       /CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
Certificate serial:       010D0C9F43285847B96175355408D9AF6298DA80
Authority key identifier: 18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     36515
IP address blocks:        199.68.56.0/21 maxlen: 21
                          209.240.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:75:35:54:08:d9:af:62:98:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=cad56a9c-2cd8-4428-ae6e-12006154b8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2e:fb:fa:c5:4f:0b:ab:fd:58:9e:a3:5a:03:
                    db:2c:b7:92:4b:f7:e9:a8:ad:c4:7f:a6:b5:47:52:
                    a6:53:a2:fa:fb:50:df:0f:51:dc:c7:85:cc:f7:95:
                    71:47:af:2d:04:7a:18:ac:6a:e2:3a:bd:f8:5e:58:
                    0d:28:f9:cd:1a:b2:81:2f:26:40:42:c1:9c:f1:01:
                    a3:f0:55:96:3f:e0:f2:67:5e:23:7d:93:54:b0:66:
                    8b:1d:11:27:c6:e5:91:86:44:b7:cc:4c:ce:95:17:
                    4e:ad:be:74:10:99:0c:12:9d:a6:f4:25:6b:12:7f:
                    6d:12:25:ab:7d:bc:37:31:27:a9:bb:02:6f:1b:dc:
                    4e:27:8d:9e:e8:f1:90:e2:74:0f:a9:7a:e6:f8:ef:
                    9d:c3:bb:15:58:2b:1d:74:a7:7c:de:5f:91:32:a0:
                    8c:7b:15:b9:69:7c:c3:f1:73:f5:63:93:8e:62:7a:
                    78:bf:53:37:52:38:f3:56:f5:62:1b:b2:de:90:60:
                    19:72:dd:9a:57:c0:5c:25:77:95:50:bb:aa:94:79:
                    e8:04:a7:d8:46:79:e7:6c:0c:89:1b:bc:e5:5e:6a:
                    7f:40:8a:07:2f:73:40:c3:98:24:be:42:84:99:13:
                    eb:50:e9:18:f9:12:42:62:c5:55:31:19:7d:35:3c:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6F:D3:B0:A9:95:B2:46:19:CA:0A:C8:90:9B:20:C9:D2:F9:DE:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl

            X509v3 Authority Key Identifier:
                keyid:18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.56.0/21
                  209.240.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:02:64:1b:8f:70:42:a5:e1:11:5f:7b:a8:16:eb:4a:2b:e6:
         27:d1:82:0c:32:18:27:95:30:18:9f:7d:2c:8b:31:60:0b:5b:
         b1:be:f4:78:7e:27:16:88:e0:1c:6f:a5:22:56:e2:5a:f2:9a:
         64:62:fb:95:4c:7d:02:6d:cc:47:cf:fb:f1:77:b6:f7:74:1b:
         a5:8f:e7:df:61:3e:e5:88:58:ee:a0:58:9f:19:51:09:6a:ac:
         07:c0:e8:30:b1:30:fe:5e:ec:c4:7e:27:ad:89:30:04:7c:0a:
         4c:30:1c:06:31:84:f2:9f:b5:a8:0c:97:e7:04:b3:be:10:63:
         88:79:1a:24:99:41:73:3b:c1:00:77:e0:bf:eb:08:3c:83:f0:
         be:ba:0a:4f:ee:0f:c4:a8:a3:42:e2:1e:27:84:7d:43:47:1d:
         5c:3c:28:50:c9:1d:74:bf:a6:a1:1c:d6:ff:86:37:97:ec:ee:
         87:f9:28:3d:b6:9e:4f:b4:fd:11:3f:8e:e5:d1:f1:d2:f4:c8:
         40:d0:76:78:07:f8:00:26:f1:e8:1e:41:ad:2a:20:cf:1c:98:
         31:9b:35:0b:28:2d:33:3e:38:f7:15:34:7a:0f:26:0c:2a:af:
         cc:a6:5e:09:fb:b4:6b:fc:fb:c7:a8:e4:f5:b5:10:da:ef:e4:
         3a:01:3b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:36:01 2024 by rpki-client on console-fra.rpki-client.org