Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa
File:                     d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa (raw, json)
Hash identifier:          NqNjRhpSgmar0yu9PO6sAzL9993FWtgLg90WKDLs8vw=
Subject key identifier:   00:F9:9E:1C:4A:0E:1C:3A:15:B7:5E:5E:A2:E5:CF:C9:6F:17:35:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD4C95BBBBEEAD1162D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        68.238.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d4:c9:5b:bb:be:ea:d1:16:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=9071978f-2f94-4112-9569-633c8a069b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:0e:25:e3:dc:5c:f5:49:4a:a0:8a:94:7a:
                    e8:16:14:3d:84:b7:7c:05:a7:e4:ea:62:48:96:ea:
                    5f:08:7f:37:71:f8:cb:2a:69:d6:1f:06:99:89:b9:
                    82:ef:ce:66:87:65:c5:a1:57:14:8f:1e:15:9c:6f:
                    a2:50:c2:67:0c:7e:39:d0:f4:ee:e3:ed:40:a0:2a:
                    fc:4d:33:c6:cb:0c:5b:37:30:1e:37:35:bb:01:cd:
                    c5:57:79:c1:d0:37:d1:0e:fe:fb:af:3f:3c:1d:34:
                    9d:ed:74:04:01:26:71:43:f9:c9:05:ba:9a:ea:15:
                    5c:7a:c5:89:79:2e:a6:06:c1:af:99:b7:62:43:b5:
                    ed:8d:ff:76:f1:f3:95:19:a5:ad:08:d8:9c:28:5e:
                    da:32:cf:ce:c5:22:c3:a6:fc:29:aa:ac:3d:fc:63:
                    4d:2b:ed:22:32:57:21:fd:68:5c:82:ec:f0:e6:66:
                    a9:38:ec:d4:24:20:e6:cb:ef:fe:e7:cc:4f:92:0c:
                    b9:9c:a7:30:c3:65:a2:a8:f5:55:4d:b2:dd:ca:25:
                    d7:d7:c9:b3:2b:a3:81:52:39:b1:41:3a:bf:8a:61:
                    99:61:d9:26:22:83:cd:fa:b0:81:62:64:14:17:91:
                    c2:03:24:2e:d4:11:de:b3:d4:f4:ee:a7:0d:65:0f:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F9:9E:1C:4A:0E:1C:3A:15:B7:5E:5E:A2:E5:CF:C9:6F:17:35:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.238.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b1:56:4f:17:a4:6d:89:ca:a9:ea:d5:fd:f6:da:5f:59:53:
         bd:8f:6e:c6:f3:b4:dd:04:94:cb:1f:23:f5:19:d3:6c:97:d6:
         01:a0:50:6a:7a:5d:fb:e9:8f:57:ad:cc:d4:77:7a:49:14:5d:
         61:92:3a:f3:21:9a:7d:86:89:d8:63:d3:29:2e:0d:c7:90:bb:
         47:44:fc:81:84:50:53:d5:b5:b4:e0:51:ea:69:14:be:98:b2:
         5d:d5:2d:04:39:b2:18:8e:8f:56:dc:1a:66:e8:89:5f:bf:fb:
         95:a3:87:fb:10:5f:f8:4d:e7:2a:91:42:27:2b:31:bf:99:7e:
         0c:14:9e:c5:d1:be:b4:eb:5c:de:d6:d4:ee:db:45:9c:83:2f:
         4f:c4:0c:bb:97:6d:7a:e6:f1:50:61:32:f8:e0:59:88:41:86:
         8f:2d:86:49:0c:88:0a:5a:5f:2d:b3:a6:fa:aa:89:13:24:0a:
         4f:4f:27:3f:e7:fa:5e:b7:35:d9:df:3f:9f:2f:c6:47:aa:f6:
         f1:dc:98:24:8d:e7:e2:31:5a:86:b7:4d:be:aa:df:fa:92:d3:
         d6:6c:d9:f6:19:a6:28:29:94:01:cf:06:ab:40:f7:9f:d9:67:
         22:48:67:85:05:57:cc:8c:89:63:67:a8:58:e3:41:35:0b:e5:
         5c:1b:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:25:06 2024 by rpki-client on console-ams.rpki-client.org