Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa
File:                     fd852497-bc9a-3b30-ab74-cc2c337021d5.roa (raw, json)
Hash identifier:          2eFEpql+yUPK18KvcwCD1PA6MmqCJlIpMBr7lIcnmW8=
Subject key identifier:   4F:83:AD:86:1F:4D:F0:43:99:71:5E:1E:4E:B3:25:C1:46:F0:43:DF
Certificate issuer:       /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial:       010D0C9F43285847B696B807F128B3779B5171C0
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     395853
IP address blocks:        208.68.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:b8:07:f1:28:b3:77:9b:51:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=2594b4fa-09c5-40ba-8cd8-1d7861c10491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:be:bd:84:07:4f:90:07:e8:34:4f:ff:96:29:
                    39:60:56:fd:50:b7:78:42:9a:b7:fc:52:59:65:6a:
                    e8:2a:40:df:fd:f0:3f:a3:0a:ca:35:90:8f:2f:c1:
                    7f:a4:7a:97:29:85:7b:08:84:8c:a0:dc:df:36:ad:
                    c1:4a:df:2e:6f:41:e5:7e:cd:1d:87:49:f7:bd:14:
                    c9:9c:d1:2c:1f:b7:d7:01:6c:cc:1c:71:1b:14:c5:
                    b2:ab:87:8d:6a:47:08:79:56:2c:5d:e9:80:86:d1:
                    9c:ef:c0:94:93:ed:2f:23:88:24:e7:8d:80:a2:b4:
                    16:5d:a9:92:5c:5c:a5:9b:72:6a:bb:73:83:24:58:
                    d5:c9:71:f1:f5:49:4c:79:e3:7a:f4:30:6c:8d:e4:
                    bf:a3:95:e9:4c:d2:1b:85:af:10:95:3a:6f:d9:6f:
                    ab:26:72:3b:47:a3:f0:9f:dd:18:79:6f:01:d6:66:
                    92:c6:ef:19:9f:6d:f0:47:8e:ab:58:c2:7c:25:7d:
                    76:ae:6a:94:4e:bf:f5:a6:b6:8f:6e:53:74:6d:b1:
                    3a:4b:d9:d4:e9:6e:0c:a4:c1:30:4b:d6:a5:fc:57:
                    97:1b:ea:ac:16:90:94:49:65:5a:33:64:6b:f1:4c:
                    28:3f:35:51:c6:72:8c:dd:a3:51:89:3c:e6:da:a6:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:83:AD:86:1F:4D:F0:43:99:71:5E:1E:4E:B3:25:C1:46:F0:43:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl

            X509v3 Authority Key Identifier:
                keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f5:a4:a9:27:86:97:f6:3b:1a:7d:d2:bc:1e:50:af:1e:42:
         90:54:af:69:a4:5e:cf:c2:25:c9:08:1a:31:b8:74:d7:fb:c8:
         3f:03:9f:2c:8e:29:c0:08:05:34:58:89:95:8d:96:e6:30:6f:
         ab:a9:67:60:38:84:d5:f0:d3:b6:0b:b2:86:69:92:c1:9f:32:
         55:10:a3:b2:e8:5f:57:99:54:6a:e1:c9:c4:e1:50:48:7b:90:
         31:cc:4e:61:e2:a9:5f:09:48:b2:a0:d5:fe:ac:76:f6:8a:41:
         cc:13:49:0b:e3:e5:64:94:74:5d:6f:b7:6f:88:81:17:05:4c:
         c2:53:57:63:54:42:f8:cd:54:92:36:c9:60:f6:fc:8c:87:b8:
         b3:5f:5b:23:40:a2:cd:39:c8:f6:28:69:66:f4:87:f7:d9:80:
         a1:3e:23:e2:1e:50:21:01:05:4f:56:32:d1:4e:07:3c:14:a3:
         de:01:64:96:06:a4:bd:4f:a6:5b:b4:45:34:37:f3:98:3c:63:
         fd:ed:22:b3:41:c3:a7:b8:45:3e:79:c6:38:ae:da:89:1e:54:
         b5:0d:32:90:a5:4a:d9:13:10:d1:12:81:30:58:73:44:d7:ce:
         e8:ba:af:2f:f2:2b:56:07:0e:ec:9c:89:88:0c:40:7d:99:c6:
         93:d9:2c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:55:56 2024 by rpki-client on console-fra.rpki-client.org