Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d944b207-da0f-3b34-bebd-f9b1f7f14a84.roa
File:                     d944b207-da0f-3b34-bebd-f9b1f7f14a84.roa (raw, json)
Hash identifier:          gjwfkDU5NGRdqzg9yxAKBrk2zmdBpoxhDQ9L3VB403s=
Subject key identifier:   1D:6C:AC:74:8D:84:FB:44:16:15:42:07:A5:47:B0:D0:BC:94:16:19
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2ADE0AE3C30E4074A0F580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d944b207-da0f-3b34-bebd-f9b1f7f14a84.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        68.161.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:de:0a:e3:c3:0e:40:74:a0:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=bc1753b1-b1ec-4a55-8913-b5ceccdcc06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b9:44:81:2f:16:f7:cd:c8:ca:27:0b:23:40:
                    7e:35:d0:93:74:3c:86:b1:77:d7:89:f2:94:4f:e4:
                    08:78:a7:0e:0d:b4:9d:1f:19:ad:45:2a:af:5f:90:
                    82:70:e9:88:74:e1:3e:2b:8c:22:ea:04:9f:b8:92:
                    7b:7d:21:56:d6:2f:d6:ea:02:6b:d6:e7:41:40:50:
                    92:ec:70:a3:b2:3f:b2:c2:8d:68:20:96:ec:c2:31:
                    cf:cd:70:c1:ef:f9:05:e0:12:11:1b:4f:7f:7e:54:
                    bd:39:0f:22:6b:c3:22:8e:44:ba:0d:40:98:25:91:
                    3c:77:ec:19:e0:62:61:e4:8c:24:e1:14:d6:b1:71:
                    cc:d4:7a:b1:ad:87:6a:69:f5:b8:ec:4e:e4:c1:5a:
                    7b:66:9d:90:05:b3:b7:8d:a3:85:25:6b:c2:ee:8f:
                    73:df:43:4c:c2:6b:1a:65:d8:44:52:82:bf:ef:8b:
                    0b:32:27:f0:2a:42:8c:1c:e8:bf:d5:8a:02:0e:3c:
                    f1:7b:5c:77:d6:ee:1f:9b:34:3a:47:d2:f2:04:59:
                    ef:69:f4:69:95:27:65:0d:f9:63:42:23:e6:2c:32:
                    90:33:03:04:35:51:b9:75:f7:45:e0:16:6c:0b:fe:
                    00:1c:c1:1c:0f:66:8c:be:bc:61:a9:9e:f3:f2:c0:
                    17:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6C:AC:74:8D:84:FB:44:16:15:42:07:A5:47:B0:D0:BC:94:16:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d944b207-da0f-3b34-bebd-f9b1f7f14a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:11:36:1a:db:f7:7e:39:38:ad:3e:0d:00:e1:85:19:20:3a:
         93:e4:0d:8d:b8:ee:56:f7:08:63:d7:2b:75:dd:ac:55:95:b3:
         bd:04:7f:13:b9:c3:39:3f:84:bf:45:56:d3:a8:32:99:1b:a8:
         0c:a1:1e:5b:5d:c3:08:85:35:01:1e:9d:40:cb:0e:4a:4d:70:
         e3:75:d5:44:f3:39:d2:4d:9e:98:e9:95:b2:9a:32:06:72:86:
         4e:4d:cb:f4:dd:93:46:9e:0d:c2:c9:bd:71:c7:27:cb:e6:51:
         04:7b:62:93:b1:b9:3e:56:63:41:9b:05:0b:8a:af:34:e4:2a:
         1e:0a:a6:b9:59:4a:fb:49:ed:6e:38:90:e3:61:8b:f3:a6:cf:
         12:ad:40:f6:8a:75:a6:eb:9b:da:f0:2f:db:72:28:d2:f9:e2:
         39:25:76:3a:16:4a:38:b3:10:2a:10:f2:81:7d:3e:71:a7:fc:
         ae:0f:93:7e:f8:00:c3:1c:3e:15:96:42:ab:60:64:49:b2:06:
         43:8f:7e:a2:d2:ae:51:8b:6c:00:28:69:33:2e:e0:d2:24:31:
         59:e1:43:10:9f:ad:bc:ad:d7:14:e9:c0:67:3a:ac:c6:4b:0b:
         98:ee:27:db:99:71:f6:b8:8f:39:21:69:c3:6a:c2:e2:d7:cf:
         d1:57:f4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:34 2024 by rpki-client on console-ams.rpki-client.org