Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94979a66-8847-32a3-9341-57549297f3d8.roa
File:                     94979a66-8847-32a3-9341-57549297f3d8.roa (raw, json)
Hash identifier:          ddc+dC6yg11/vhhBnJthcpw6pqF7b6PcGHhYFIN26AY=
Subject key identifier:   79:0C:05:13:D1:8D:B7:C6:A7:89:68:E3:7B:FD:43:FC:45:24:AA:2D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76C986578A2D902AD15400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94979a66-8847-32a3-9341-57549297f3d8.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        68.238.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c9:86:57:8a:2d:90:2a:d1:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=fdeb7892-6caa-46d9-a8a6-d359003b0919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:1d:a5:93:20:ec:9e:a5:96:9c:b4:a4:74:
                    91:20:83:c1:e9:00:1a:a8:50:c1:72:ba:8d:f8:a2:
                    fa:35:46:e8:04:05:e9:40:88:d2:0b:3d:74:44:31:
                    e0:16:7f:d8:df:b0:dc:7e:7c:12:eb:74:3f:b3:00:
                    ca:3c:15:b6:14:71:e6:2d:ab:a0:10:e5:0c:83:f1:
                    6b:52:af:6c:55:2e:57:5f:94:4d:83:a4:e2:b8:54:
                    b8:fd:b0:f4:54:5e:ff:a5:97:a8:76:9b:25:8d:89:
                    ab:79:9c:9d:30:10:ff:57:a4:a5:29:7a:91:1e:05:
                    ef:60:25:4b:91:00:6b:a3:4f:5f:e2:4c:06:b1:a9:
                    66:44:7d:2e:d6:b8:08:6f:ac:b9:f7:4a:e4:93:41:
                    e0:61:63:ea:85:77:a2:ad:73:03:3f:73:7f:c5:6d:
                    f2:54:bb:0a:34:36:1f:fa:7e:80:ef:1d:7d:d3:ac:
                    d8:5a:4a:ff:e4:6f:86:76:0b:af:e8:37:79:e3:59:
                    02:1d:83:6c:cc:be:46:13:33:a9:d7:a3:04:8e:fb:
                    e1:1a:bb:e7:72:de:08:4b:be:46:de:c9:8b:45:98:
                    50:af:9a:2a:d4:8a:cd:2f:54:29:86:28:6c:94:43:
                    3b:11:30:57:d2:49:a8:53:f4:ab:0f:76:23:60:89:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0C:05:13:D1:8D:B7:C6:A7:89:68:E3:7B:FD:43:FC:45:24:AA:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94979a66-8847-32a3-9341-57549297f3d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.238.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3d:de:5e:fe:71:f2:3e:c1:db:15:4e:ba:5e:f5:fb:62:84:
         6b:a8:2d:ef:4d:62:a4:71:85:ed:0b:cf:c5:a8:96:c3:52:9c:
         00:58:0f:d5:cb:bd:34:9a:83:b2:4f:7c:1d:a3:f3:e6:04:e5:
         4d:6e:af:d0:98:4d:f7:00:af:da:a4:a4:69:7d:93:b9:6b:82:
         9e:4f:c1:27:4a:ac:4f:26:e6:1c:d2:5f:57:42:82:8c:52:6d:
         af:89:a3:78:f5:84:e6:36:07:c0:fa:b6:12:fa:94:18:71:07:
         73:d0:73:f8:d5:33:14:84:f8:11:6c:6c:bf:29:aa:f8:5e:cb:
         ce:63:77:4b:cc:7d:b1:dc:fd:c1:00:b1:d2:2c:a1:25:33:91:
         b0:32:c0:21:89:cd:4e:36:c4:fa:68:cf:6e:07:d6:02:e7:8a:
         44:25:61:0e:e6:04:64:28:ee:4d:5f:b0:06:80:81:a9:2e:c1:
         47:6b:6d:05:c8:9c:bb:5d:d6:9b:35:d0:cc:e0:45:0e:55:52:
         c9:db:c4:ed:a7:59:9f:bb:c1:5b:78:0e:a7:93:c4:e9:49:36:
         fb:16:90:64:16:d4:58:4f:da:43:cc:a8:75:05:50:57:c7:99:
         24:67:34:cf:5f:6e:94:b2:21:91:66:a1:1c:b0:aa:b7:2a:21:
         70:eb:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:43 2024 by rpki-client on console-fra.rpki-client.org