Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa
File:                     d521f734-db06-319b-86f6-7e5aa43f218e.roa (raw, json)
Hash identifier:          P0x4Bh66VIXiGM3/fPSONwcfQ8idbnufPzoMT/yucs8=
Subject key identifier:   03:DE:47:80:4E:5D:CA:74:9E:85:41:1F:98:8D:97:8C:1B:53:91:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D19B69CCD3B63A5B7480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        68.131.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d1:9b:69:cc:d3:b6:3a:5b:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=2a2b4926-809a-4f8b-9266-d30665881316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:46:88:fa:8f:96:ae:75:c7:ad:20:78:97:
                    1b:1e:1c:26:ce:ff:87:98:62:1f:d8:9f:36:10:6f:
                    48:7e:b5:f8:88:0e:61:cb:7f:3d:2d:a7:66:54:a5:
                    86:db:3b:1c:fe:a6:be:04:80:2b:bf:65:b8:9b:23:
                    bc:aa:c4:ad:58:cd:e5:d4:a3:11:1b:b5:57:69:d1:
                    2a:ef:67:41:10:71:6e:23:83:57:60:fc:9d:49:b2:
                    6c:32:c7:34:23:87:b6:24:e4:1d:46:20:60:97:a9:
                    1f:7f:f0:58:76:d7:d7:b1:a8:95:d5:54:bb:dc:e2:
                    57:01:77:e2:d9:3f:fb:88:62:0c:f0:a4:35:73:0a:
                    a4:73:4a:4f:50:39:00:32:a0:3b:14:4f:c1:dc:c9:
                    78:5d:1e:8e:ab:1b:ca:89:ff:cc:75:df:65:a5:ff:
                    23:9f:32:f3:04:61:b3:b3:84:0f:44:2c:5d:c6:a9:
                    b7:2b:66:97:be:77:6e:4b:95:e6:3c:c9:9c:57:e6:
                    43:25:5e:d7:12:97:77:94:34:f6:17:08:95:14:c5:
                    23:8f:fc:f9:37:2a:44:af:b8:3f:ec:b6:6b:fa:11:
                    81:c9:40:bc:ac:51:76:15:6e:70:0a:5a:59:af:d6:
                    c3:90:12:4e:b7:cb:cb:45:81:fb:62:da:e0:05:25:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DE:47:80:4E:5D:CA:74:9E:85:41:1F:98:8D:97:8C:1B:53:91:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.131.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:79:47:38:35:3e:bb:56:c8:b1:c3:22:b8:f4:19:06:74:c0:
         c6:c0:44:5a:40:76:8b:90:ed:c7:66:d0:3d:07:e5:6d:89:81:
         fd:58:aa:b3:e3:9d:c4:fb:7f:13:de:2a:f6:4e:07:bf:cc:74:
         1e:22:dc:f9:58:a5:02:c4:88:c1:56:2d:72:8f:58:48:6c:8a:
         a1:5d:60:6e:2b:bf:f8:7c:96:e3:91:f4:89:59:60:50:6a:e2:
         3e:a0:47:e6:b8:2e:60:f0:38:00:16:de:a0:11:69:86:aa:5d:
         87:4c:ff:f5:29:ee:d0:ed:cf:6e:f9:0a:f5:1b:2e:6a:c5:15:
         97:b8:8b:87:eb:07:e8:3a:60:46:3b:a8:ed:c7:d2:1b:98:84:
         aa:9e:b0:73:4c:49:65:5b:fb:87:51:ae:c6:93:19:9b:c9:f9:
         6b:fe:5b:be:0d:b6:99:13:63:46:55:e5:e4:48:27:fb:58:74:
         a8:91:c8:07:32:41:50:fa:37:12:ef:2f:09:ed:97:6a:ad:dd:
         2d:15:57:3f:cb:a2:93:67:e8:c2:76:cc:ca:6c:b3:5e:ed:37:
         7b:fe:74:19:19:d5:58:56:48:da:30:92:b2:58:b2:4f:bb:18:
         60:55:e3:c3:10:41:67:e2:c6:7a:ac:31:3a:03:3d:03:d1:75:
         fc:e4:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:51 2024 by rpki-client on console-ams.rpki-client.org