Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa
File:                     890756c8-89bc-3860-9d7e-6e5218522bfe.roa (raw, json)
Hash identifier:          lD2/Jmm1FBC24fmxUDlNB6RVD/imykogHaaQX6uUucs=
Subject key identifier:   6F:44:A7:14:E2:EB:FA:72:BE:E4:D3:92:74:E2:2A:07:01:44:84:F5
Certificate issuer:       /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial:       010D0C9F43285845698869D1361E18AF85920030
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     397444
IP address blocks:        208.68.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:69:d1:36:1e:18:af:85:92:00:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=f98d5591-c5ad-4e5d-9cd3-98caeecdd480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:26:72:f8:1a:2f:96:c7:c1:97:48:de:cc:
                    82:a2:48:38:0d:91:61:d3:56:f8:4b:31:3b:d4:16:
                    03:1b:a5:d8:2b:dd:e5:0b:3a:81:99:d0:88:df:17:
                    ab:17:d5:87:fa:5f:ee:b3:97:85:92:ec:4e:a1:50:
                    82:31:fe:9c:65:e4:8e:5d:6d:3a:b7:99:6a:db:f2:
                    ad:3a:af:96:13:ea:01:7b:db:74:fd:e4:68:45:1c:
                    6c:a4:de:3b:f8:e4:c4:5d:08:71:ca:91:23:3e:dc:
                    82:0a:55:23:3e:27:f8:fa:a6:89:51:3f:c6:e5:9d:
                    01:d5:85:ed:c7:c9:87:4c:b7:87:92:fe:4e:cf:31:
                    d0:67:8c:fd:41:16:5a:6f:ce:4c:ee:66:82:85:70:
                    3c:bb:72:5e:42:f4:cd:50:9a:ca:16:55:87:51:93:
                    63:d5:22:a0:8c:3f:eb:87:e1:79:fc:74:c6:0e:36:
                    89:b3:75:42:24:05:6c:1c:ce:10:8e:3f:f9:9d:32:
                    cd:0b:2f:e3:df:9d:55:21:2c:93:05:c9:e6:f2:2b:
                    d1:c5:50:f4:02:09:da:f3:20:bb:6f:e4:97:cb:95:
                    0e:da:99:94:55:36:b2:93:dd:ae:cb:63:4e:d1:ed:
                    03:12:a1:69:f2:91:0d:11:77:19:6b:5b:99:2c:62:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:44:A7:14:E2:EB:FA:72:BE:E4:D3:92:74:E2:2A:07:01:44:84:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl

            X509v3 Authority Key Identifier:
                keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:4f:99:68:5e:f2:dd:e1:7a:b3:4f:87:e9:3e:3a:3f:79:dd:
         28:46:c0:f1:7a:9b:c1:27:07:ab:a1:61:b4:10:45:2d:20:12:
         8c:14:46:25:a0:bd:27:b1:05:8e:0b:b7:11:bf:3c:fe:b2:b0:
         e4:dc:c2:38:3a:5e:8d:ea:3d:70:15:fa:d8:6d:ef:61:83:e0:
         41:f3:e5:fa:d5:ee:ab:3f:08:0e:20:7c:11:d8:4a:53:46:ba:
         a7:0f:ef:87:ab:6b:50:56:16:24:d3:c2:1b:41:d0:a2:d6:20:
         9f:1a:6c:0b:5a:34:7f:c7:74:ce:19:87:f6:57:ec:cc:ea:37:
         c4:ea:c3:06:84:07:be:f7:c8:49:10:fe:19:de:0c:1d:64:b1:
         44:55:ed:0a:74:b9:e4:59:62:70:28:79:70:94:df:89:5b:e3:
         5c:a1:96:0e:6f:67:8d:41:7d:ff:54:c8:05:3d:eb:e8:5d:3c:
         8d:61:50:f0:77:ff:6d:2b:a3:b7:83:23:42:7b:13:82:ab:14:
         5e:5a:6a:b9:37:97:17:16:4e:05:3d:1c:88:5c:07:09:16:60:
         15:9c:5d:66:87:e9:68:bb:cb:8a:18:b8:cf:bb:ef:44:a7:6f:
         1a:f4:53:d6:4a:b6:7c:b5:24:d2:26:13:fa:cf:22:1b:d8:67:
         11:c2:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:21:04 2024 by rpki-client on console-ams.rpki-client.org