Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/90930869-75da-3709-8b15-025e368d65fd.roa
File:                     90930869-75da-3709-8b15-025e368d65fd.roa (raw, json)
Hash identifier:          vItovrFNnMeuBMIyT3DEhRp93QQDWkG6RxHhPPxRPAE=
Subject key identifier:   01:AA:41:20:21:FA:A0:A1:92:D0:4A:43:E3:15:9D:A9:83:99:95:63
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F432858475910CF1AD9027D464CFD27C0
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/90930869-75da-3709-8b15-025e368d65fd.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     36666
IP address blocks:        68.168.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:cf:1a:d9:02:7d:46:4c:fd:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=757c1cd1-6e6b-4a5f-849e-c5f72b7d96c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9f:7a:3f:78:e2:ec:19:97:11:aa:3b:6a:56:
                    ed:7e:10:62:fa:47:31:da:e9:52:e1:3b:ba:29:20:
                    dc:a9:9f:30:8b:88:80:d9:bc:7d:c2:2f:b6:60:ae:
                    b3:e3:6b:38:a7:14:b8:51:6c:47:0b:af:1b:23:a8:
                    e7:ff:b2:5a:c3:db:24:0e:59:46:be:17:01:85:40:
                    76:67:dc:06:5e:3f:4c:63:2a:c9:75:c6:74:ce:3b:
                    73:cc:e7:4f:11:5b:16:c7:57:be:92:c7:ea:b9:c4:
                    81:da:59:55:16:92:96:2e:f5:fe:a9:b4:90:bd:7b:
                    be:71:74:18:a9:ca:0d:83:81:af:ae:67:77:27:f0:
                    2c:9c:e6:5b:5e:3e:d7:43:0a:57:d2:31:0f:81:bf:
                    bc:5e:72:e7:7d:fe:04:dd:74:58:81:d5:a5:25:29:
                    67:a9:de:4a:e8:13:bf:e5:c4:91:60:73:71:9e:54:
                    94:e7:4a:89:3f:ce:92:61:b7:ac:00:ff:e8:ae:d4:
                    0b:f2:a1:51:60:6a:7b:e6:2c:06:59:dd:b9:3b:66:
                    4d:ab:2f:4c:1f:59:91:c3:79:c4:dc:04:a0:b4:3a:
                    50:46:54:73:15:8b:0b:ba:ca:00:21:41:73:a3:89:
                    70:15:c7:be:cb:a5:86:93:58:f7:42:e5:b2:bd:db:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AA:41:20:21:FA:A0:A1:92:D0:4A:43:E3:15:9D:A9:83:99:95:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/90930869-75da-3709-8b15-025e368d65fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3b:d6:c1:00:d4:65:3b:4a:75:0d:2c:9f:21:f4:37:8f:b7:
         0a:c5:28:ea:92:db:bd:40:e4:14:73:08:93:35:e8:cc:bd:94:
         67:f8:da:3e:82:e5:ae:27:e4:34:a3:0c:43:36:3a:fc:ca:3c:
         cf:a7:05:29:f0:7a:3e:ac:18:49:dd:ad:ca:34:71:21:a8:bd:
         65:6b:24:a8:ff:df:c0:58:c9:2d:41:80:39:4e:01:da:6f:e6:
         ca:08:71:87:83:de:65:63:5d:fb:35:80:d4:b4:eb:d1:78:30:
         20:8a:3f:c2:8f:f6:22:36:d2:45:0f:04:d3:a5:ab:d1:1d:b7:
         5c:5c:08:d6:c6:db:ef:99:0a:1f:bf:a6:e1:3d:e7:7f:74:af:
         a1:f0:59:9a:86:d4:e8:99:4f:c6:7d:8a:90:24:90:2d:24:74:
         2a:b9:18:14:d6:8d:bc:e1:ba:4a:6f:2e:ef:68:6c:39:11:ff:
         33:ab:97:e6:8c:1a:6a:30:89:e1:80:c6:82:54:b3:fc:c0:65:
         4e:b3:67:62:58:ca:ec:a4:35:b1:66:aa:61:ad:af:7c:01:cb:
         42:39:6a:be:ce:15:fa:6f:e5:cc:e7:50:89:66:cb:3f:89:df:
         2a:0b:3f:b4:e9:db:73:d1:e9:0f:a7:11:5e:c2:25:59:3d:65:
         2f:94:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:24 2024 by rpki-client on console-fra.rpki-client.org