Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94e2edd7-7018-3b97-91eb-41ab44f1f438.roa
File:                     94e2edd7-7018-3b97-91eb-41ab44f1f438.roa (raw, json)
Hash identifier:          wh1pjbdiWQTfyvgmWSoiPPBL1mrLAsoypwLztywYptg=
Subject key identifier:   56:98:02:69:00:FD:05:5F:5C:DD:D2:60:E0:23:A6:E1:A9:AA:0A:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76C9A766674C4F1932CE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94e2edd7-7018-3b97-91eb-41ab44f1f438.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        68.238.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c9:a7:66:67:4c:4f:19:32:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=03a59834-a014-4030-90db-f5cbc38272c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:4c:73:c8:41:f5:27:82:72:d3:22:eb:db:
                    08:70:4f:89:24:20:d9:2e:8f:f3:ad:8e:51:db:e9:
                    f2:c2:c2:fe:a5:2d:9b:8b:89:ae:e0:d0:7d:47:fa:
                    7b:fd:bd:12:89:57:ba:f7:a0:64:57:40:f8:03:42:
                    95:61:9b:ba:34:be:65:d6:d1:21:5a:82:92:af:e1:
                    06:f1:de:2d:04:7d:b9:83:6d:d0:ae:74:dd:32:87:
                    85:a5:ab:c0:b3:41:c5:35:27:d2:e6:48:be:b1:39:
                    7f:93:da:22:e9:d9:45:40:e6:aa:d4:f5:7e:cf:db:
                    9f:03:a5:eb:f7:ff:34:51:a2:fe:e7:96:ed:5d:1c:
                    5f:70:bd:fc:5b:54:f1:93:58:22:af:74:03:ba:fb:
                    ef:2c:28:f4:15:69:3d:b7:f6:16:c9:9d:85:42:87:
                    68:84:69:25:d7:ca:2a:d1:32:e7:e4:96:1c:e7:a8:
                    4d:2e:af:d1:b8:3f:2c:63:92:9c:62:b3:88:8d:bb:
                    89:87:a3:1a:69:f0:fe:60:8d:1c:7c:dc:a2:a0:f1:
                    b8:7d:89:65:ab:69:4b:98:b5:64:fd:08:48:5c:b3:
                    64:32:87:75:f4:69:c0:ff:53:ce:98:ee:06:61:0c:
                    77:6c:96:73:ca:a3:78:7c:b0:1c:84:9c:a7:d9:6c:
                    6e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:98:02:69:00:FD:05:5F:5C:DD:D2:60:E0:23:A6:E1:A9:AA:0A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94e2edd7-7018-3b97-91eb-41ab44f1f438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.238.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:70:fa:8f:f4:59:b8:0d:33:c2:48:97:46:09:64:ff:88:dd:
         f5:ad:d9:0b:34:71:9c:6b:0e:1e:75:71:cb:a8:2f:8c:05:04:
         33:2a:c4:9b:31:6f:60:44:4b:cc:a6:d4:f4:91:10:7a:3b:33:
         9c:20:e1:3a:30:d1:17:ca:82:5e:f5:38:6d:91:39:ce:e7:16:
         6c:80:9d:f5:37:ae:6f:9b:6c:07:76:b0:a2:31:78:02:19:f3:
         42:30:57:61:99:3a:87:82:10:1d:9c:58:25:64:6b:d2:ba:57:
         74:69:9d:f7:cd:ec:a2:25:3e:12:ba:d5:62:20:b6:b1:1c:00:
         ca:7e:46:0c:6d:e9:85:87:fe:f1:00:db:6c:20:16:f8:c3:aa:
         e5:57:63:a1:5f:1f:fa:97:b7:28:71:49:d6:a1:04:fc:34:a7:
         22:a8:8d:83:65:f9:2f:38:c5:5b:ea:d0:d3:74:3b:be:88:60:
         13:42:3a:37:c6:70:28:08:0e:99:4b:e3:ad:23:84:19:ba:49:
         8b:61:9e:44:be:76:f9:49:28:42:c0:6c:72:7d:4e:3a:cb:1a:
         c7:00:39:f9:cb:8f:5b:3c:3f:cd:a8:9a:eb:5d:73:a8:2e:df:
         34:c1:df:64:38:31:9b:54:b0:41:6d:59:36:bc:35:b8:43:d7:
         ae:e9:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:39 2024 by rpki-client on console-ams.rpki-client.org