Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/ca524647-f98d-390b-ab07-9cba43409f7b.roa
File:                     ca524647-f98d-390b-ab07-9cba43409f7b.roa (raw, json)
Hash identifier:          raNMyFtPXDGspamVwJbz7F+ekK5fFyNI6xQIUrbCUvY=
Subject key identifier:   BC:9F:ED:C5:B1:F4:C8:A8:34:90:7C:64:E2:6C:1A:58:15:5B:02:4F
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584780265A305059C1251068F700
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/ca524647-f98d-390b-ab07-9cba43409f7b.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     46873
IP address blocks:        68.233.32.0/24 maxlen: 24
                          68.233.33.0/24 maxlen: 24
                          68.233.34.0/24 maxlen: 24
                          68.233.35.0/24 maxlen: 24
                          68.233.36.0/24 maxlen: 24
                          68.233.45.0/24 maxlen: 24
                          68.233.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:5a:30:50:59:c1:25:10:68:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=fb7383b4-1116-4874-8e1e-4714e290be0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:0a:3d:71:71:9d:16:96:e9:0f:1c:de:1e:
                    bd:61:81:c5:4c:3f:32:df:7f:f7:e1:4b:5c:a3:49:
                    79:e6:7e:6b:cb:3f:fc:45:e6:ad:52:39:90:87:97:
                    94:eb:83:5c:e3:b6:9b:69:34:a7:67:49:0d:d5:ed:
                    a1:db:97:05:0c:1e:82:6c:99:59:c1:49:d3:c2:b0:
                    76:7b:39:ff:0e:42:ea:c5:00:f6:1c:b3:8c:a0:c8:
                    89:ad:a0:4b:82:e6:49:01:b2:96:fe:1b:84:e0:95:
                    43:a7:5e:d5:3e:a1:79:b0:81:00:e6:bb:f4:be:3f:
                    cf:26:10:e0:52:90:27:bc:ff:99:c9:35:dd:ce:56:
                    e6:01:d4:7d:a4:36:e6:8e:5e:b0:12:d3:c9:53:cb:
                    48:a5:d0:d4:b3:b5:8b:c3:6a:aa:ef:69:67:d6:ec:
                    0f:95:9f:93:96:d8:c5:9f:f9:13:9f:3a:87:86:19:
                    af:29:de:9b:b1:cf:17:4e:ff:34:94:29:28:07:44:
                    6a:70:b7:54:61:9a:b1:f7:79:75:51:e8:83:9b:22:
                    21:25:28:68:c9:07:e9:25:34:47:68:be:1a:76:f4:
                    b4:00:30:22:67:cf:26:82:ac:8e:e9:d0:8a:90:62:
                    b9:b9:9d:79:dc:38:95:63:67:0b:49:b9:99:69:13:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9F:ED:C5:B1:F4:C8:A8:34:90:7C:64:E2:6C:1A:58:15:5B:02:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/ca524647-f98d-390b-ab07-9cba43409f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.32.0-68.233.36.255
                  68.233.45.0-68.233.46.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:39:6c:e1:3f:2f:dd:1a:d7:d8:da:20:48:b9:cf:7a:fb:ff:
         06:60:08:db:98:fc:aa:e3:aa:19:ab:3f:cf:a4:35:24:c8:46:
         0e:31:0a:95:ba:dd:b8:12:36:56:91:ce:74:ae:4e:56:fc:81:
         1c:2f:ac:e8:bc:3d:24:23:b4:7e:f7:eb:bb:e6:ca:49:b2:19:
         90:b9:e1:cc:97:39:01:24:4b:79:f0:18:b3:6f:49:63:ca:89:
         b1:83:88:6e:fc:13:0e:8f:ab:cb:1f:f1:ee:68:61:7a:f3:36:
         4e:f3:6a:ee:9b:ad:28:6b:00:80:f5:28:8e:9e:8f:65:cb:4d:
         ee:89:9b:79:15:39:bb:de:72:26:04:3b:f3:a2:53:68:9e:0b:
         40:b3:a4:34:6d:18:c5:61:18:c6:b7:eb:17:bc:7f:55:50:a9:
         0c:10:b0:40:78:81:7e:95:5f:eb:ab:3a:63:3a:a7:1a:8e:4a:
         b3:f6:80:6a:39:ff:c7:e2:f8:75:24:56:90:38:2d:06:79:94:
         6e:56:7d:1a:de:72:4d:de:1d:be:81:24:f2:fc:72:c6:c0:6f:
         f7:ce:83:65:1c:ef:8a:93:78:b2:e4:3e:55:16:e5:53:fc:c4:
         db:d4:81:a0:fb:b2:39:be:46:3a:74:18:37:88:d7:2c:79:f2:
         e7:64:ea:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:27 2024 by rpki-client on console-ams.rpki-client.org