Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa
File:                     fd852497-bc9a-3b30-ab74-cc2c337021d5.roa (raw, json)
Hash identifier:          6yY6fK+SrSJy2E604raleFyMLlQketHMvqLXL3mKk4M=
Subject key identifier:   DD:6D:64:12:19:29:82:7C:F8:BC:9B:6F:0D:C7:22:F8:62:D5:50:C1
Certificate issuer:       /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial:       010D0C9F4328584518B04502076672270A10C000
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     395853
IP address blocks:        208.68.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:45:02:07:66:72:27:0a:10:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=40fce91e-c933-497c-b769-f707b267280c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:46:ec:12:b5:95:4f:03:49:0e:1a:5a:56:
                    d9:b3:5e:15:c8:ec:ce:0d:43:19:41:a1:62:0d:fb:
                    ff:dc:f7:05:a6:8d:93:cd:86:59:c8:3f:92:21:50:
                    df:84:c4:d0:24:aa:1d:5d:23:ae:a0:da:4f:95:68:
                    b0:b8:f6:2f:6e:59:91:5d:56:91:c3:d0:a3:ac:ab:
                    93:26:a9:07:11:79:38:05:26:e3:5e:5f:11:29:d5:
                    ea:ac:ba:44:52:33:21:8c:6b:ff:3d:30:54:57:8b:
                    f0:e1:9f:71:36:20:85:e1:fc:69:d5:b1:b7:88:a9:
                    c3:a4:aa:b7:80:db:44:be:e4:55:d2:75:60:24:38:
                    af:5c:25:a8:46:cc:1c:39:c3:a9:87:4e:fe:ee:d0:
                    c3:3e:c7:6c:a8:e8:8d:0a:0d:f8:f1:fc:fb:05:d6:
                    7c:7f:74:e2:87:61:c0:84:a3:b5:94:ec:ef:d7:be:
                    8e:f7:ba:2a:9c:33:0c:39:a8:ec:99:b0:09:dc:aa:
                    49:2b:d0:3e:ef:29:a5:ed:28:67:48:ed:ac:b6:bf:
                    70:2f:99:23:5f:50:35:af:d7:56:70:fa:5c:f8:2f:
                    a9:5f:38:74:df:3f:13:da:86:cb:d2:eb:1a:b0:28:
                    32:02:d1:d6:e2:d8:1a:c0:1f:7a:ed:6d:d5:f6:17:
                    c5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6D:64:12:19:29:82:7C:F8:BC:9B:6F:0D:C7:22:F8:62:D5:50:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl

            X509v3 Authority Key Identifier:
                keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:69:b4:64:a4:75:a1:69:a8:e2:8d:2d:1f:9c:79:eb:78:d0:
         36:62:6d:07:b4:a7:97:9b:77:5c:3e:59:16:ce:32:56:af:4c:
         1e:42:d8:67:7b:4e:79:00:cf:a6:83:94:a8:fc:93:b6:ba:37:
         e8:f5:f9:d9:08:d8:6f:de:ab:9d:2d:16:4e:35:f4:a3:3f:ee:
         52:d2:34:4c:8d:db:71:92:92:9b:2a:b3:e6:6c:83:24:aa:55:
         48:ad:8e:6c:de:6e:17:d8:b2:5f:c1:f1:66:b6:34:e4:74:44:
         ff:1b:55:f2:de:43:82:02:a1:8e:4f:fa:a4:46:c1:be:46:5b:
         19:67:8a:68:13:5c:81:6c:79:8a:c1:6c:04:68:6f:55:03:c7:
         6e:0c:01:07:93:3b:53:10:d1:16:36:55:36:f6:a4:59:ac:5f:
         ac:54:bc:49:df:57:09:df:8f:8a:8d:c6:db:94:2f:30:72:c0:
         34:fe:72:a0:cc:82:ee:2e:fb:80:ae:21:03:5d:8f:25:23:84:
         1c:3c:7e:a4:2f:14:b9:2c:7a:ae:dd:0c:8f:b7:f8:06:c1:da:
         e7:76:10:f9:0e:64:70:93:3a:6e:c6:b7:6b:90:9d:10:45:f2:
         c4:22:47:fd:35:31:b8:c5:47:ec:5e:dc:e5:95:16:b1:a8:08:
         24:dd:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:57:25 2024 by rpki-client on console-fra.rpki-client.org