Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a05d26ed-3c7e-3346-8d91-8ea446b9c880.roa
File:                     a05d26ed-3c7e-3346-8d91-8ea446b9c880.roa (raw, json)
Hash identifier:          QlDjcyjW+OuaQTWy3lPuhcif3Fr04L9zNF/4+PhVV+s=
Subject key identifier:   6D:AE:A2:82:91:57:4E:D7:29:82:B5:92:41:B3:EC:78:43:40:7C:F2
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584742BB58BEB4EB279B75031680
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a05d26ed-3c7e-3346-8d91-8ea446b9c880.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     63023
IP address blocks:        68.233.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:58:be:b4:eb:27:9b:75:03:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=83ad5e06-111f-4b45-92c1-b1dcdcde1888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:92:dd:2f:bc:91:32:18:8c:90:d9:3f:74:12:
                    84:0c:2c:85:20:99:f8:f0:a2:30:21:5b:6a:dd:0f:
                    6b:aa:ee:8a:b1:64:3c:19:10:f2:a3:a6:ef:bc:f2:
                    35:3f:85:e7:6c:8e:66:c2:92:1c:0d:59:a4:48:d1:
                    6b:97:67:8d:20:dc:80:18:85:98:9c:5b:6f:64:83:
                    bb:f1:c1:d0:a8:17:da:1e:3d:01:69:6a:f5:84:26:
                    f8:54:8a:9d:4f:a4:65:27:e1:ed:89:bb:ba:03:8f:
                    fb:0b:e0:d5:e1:3e:e5:a6:3e:5c:5d:e1:f2:8c:6e:
                    9b:25:74:1b:8e:22:76:04:fb:6b:2e:63:54:1e:50:
                    24:e5:df:9b:57:02:54:93:bf:c5:8b:3b:5a:52:cc:
                    a9:97:94:0f:eb:b5:34:d8:96:4d:ca:99:83:e9:94:
                    cb:ac:bc:77:52:d6:d8:47:7e:c6:a4:e7:7b:1b:f0:
                    3d:c6:a3:d7:ed:16:80:f5:b5:9c:c1:a1:41:d2:ba:
                    2c:7d:7b:33:75:b8:7f:ad:e8:a8:d6:9f:13:9b:36:
                    b5:89:da:0d:6f:2b:df:a9:a5:c2:b2:7f:54:c9:2e:
                    3e:ee:bf:cb:6d:22:35:f5:d4:95:ce:85:2b:7b:65:
                    be:6a:6c:5b:b9:b3:6f:fb:5e:8e:21:14:65:16:8e:
                    3a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AE:A2:82:91:57:4E:D7:29:82:B5:92:41:B3:EC:78:43:40:7C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a05d26ed-3c7e-3346-8d91-8ea446b9c880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:8b:f5:3f:f1:f8:d2:dd:35:ec:1c:26:c0:c0:f6:9d:c0:
         3a:eb:e4:2b:5c:29:97:00:07:18:b2:bb:35:52:f3:e2:c4:e9:
         54:3c:28:ca:2b:88:2a:2d:c2:cd:8f:e2:0c:3d:bc:50:27:1a:
         27:78:d2:54:db:a0:7e:db:78:a9:84:a4:86:ba:c4:57:d2:7d:
         78:a6:3a:3b:99:35:4b:fc:c9:0d:c0:4c:32:cf:f3:be:23:40:
         cb:75:f8:7b:6f:d4:96:16:e3:c9:c5:8e:67:79:b0:c4:b9:ec:
         ee:dd:f2:f1:c9:44:32:8b:23:bd:64:2e:a9:49:2a:6b:7e:82:
         f9:09:ec:29:1b:49:ad:b8:c5:e7:77:ba:2a:d1:65:8b:cb:c5:
         8c:d6:7b:1d:4d:32:db:d7:eb:3a:cd:08:7d:36:71:18:54:75:
         1d:f5:8c:ea:92:25:0c:85:00:3b:51:25:de:83:5e:f8:f4:19:
         a8:ee:89:a8:fd:77:94:99:90:dd:c9:3b:0c:6b:00:d4:10:b4:
         65:22:65:90:6e:c4:08:03:db:32:ba:1a:68:ac:e7:f8:17:03:
         4f:41:77:5d:5b:df:d0:12:28:14:09:8d:7b:24:f1:f2:c8:b4:
         05:eb:be:68:6c:7a:6f:30:eb:d9:d4:91:dd:42:96:02:06:fd:
         f7:65:c5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:20:44 2024 by rpki-client on console-ams.rpki-client.org