Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9fe6568-1160-3b9a-b04c-cb2ff740416f.roa
File:                     f9fe6568-1160-3b9a-b04c-cb2ff740416f.roa (raw, json)
Hash identifier:          LZDIY3XEOjmAIq8oIOLba8byICmnK3ohYd+jIBHeDEM=
Subject key identifier:   FF:D6:AB:14:62:5B:6D:5C:E4:83:14:6F:6E:AF:C7:B1:BC:66:15:7D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76C85C3084FEE508920A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9fe6568-1160-3b9a-b04c-cb2ff740416f.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        68.161.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c8:5c:30:84:fe:e5:08:92:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=535558d4-c0cb-4736-966f-42d2ef83163d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:20:f2:30:b8:52:0a:d6:67:22:0d:ee:9f:
                    85:e5:d1:2e:e4:7e:04:85:03:86:e4:df:41:10:46:
                    4b:0d:ad:1a:13:16:6f:ab:a9:c8:06:02:fa:78:50:
                    e4:20:6d:9b:e4:0a:1b:ed:48:ca:c9:cf:0a:11:c0:
                    49:b4:60:49:c2:7f:55:cf:57:f3:54:44:65:d6:a6:
                    3d:a4:95:36:10:03:7a:1a:f6:e9:f1:ac:15:af:a6:
                    a3:d1:f7:a3:db:b7:4c:8e:35:1a:36:5d:a2:aa:35:
                    1e:17:5b:90:9e:19:be:58:42:41:c7:5e:04:bd:9e:
                    f9:03:05:c3:95:e4:81:43:96:df:6b:27:3f:f4:42:
                    54:de:f8:42:af:f4:61:ee:a8:d4:6c:d7:ca:9d:1d:
                    d4:ff:61:d5:db:34:93:e6:e7:31:87:9e:ed:ae:7e:
                    05:de:c5:43:3e:66:8f:02:1a:7b:a2:8e:22:8b:1a:
                    33:da:7c:5e:64:6f:a2:be:4e:89:a0:8c:c4:f1:eb:
                    b3:72:cd:c0:5c:32:1e:9b:88:90:a3:db:b3:5f:78:
                    43:62:17:f7:63:92:eb:66:d9:27:83:60:67:e3:71:
                    56:6e:40:32:a3:79:91:8d:4c:be:98:c3:9e:12:62:
                    b2:a9:3d:46:47:9c:e7:5f:f4:c4:28:8b:9a:00:93:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D6:AB:14:62:5B:6D:5C:E4:83:14:6F:6E:AF:C7:B1:BC:66:15:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9fe6568-1160-3b9a-b04c-cb2ff740416f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.161.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:25:eb:f6:57:a4:20:82:c7:58:33:72:f4:a7:54:4a:47:
         19:60:19:c1:2b:2a:cf:ae:f9:07:2a:86:91:f8:7b:75:a7:59:
         f2:b3:91:d2:50:cc:27:61:0a:ff:0b:e3:a5:64:00:b8:87:d2:
         6f:20:3c:fa:10:16:37:94:c0:17:5c:b5:9d:37:0e:07:9b:70:
         3f:66:d1:9d:f6:cb:19:9d:39:9b:50:2a:8c:13:2f:3b:93:cc:
         4c:90:b6:11:1a:5b:99:1d:5c:b8:92:b3:6a:47:ae:5e:39:4f:
         d0:14:52:e0:db:b7:cb:60:93:38:fe:34:9d:48:18:e6:04:c4:
         de:a5:b9:6a:6a:5c:66:21:07:4d:2b:c2:21:2e:f5:f1:10:bf:
         eb:01:78:af:45:a4:84:ea:aa:2a:fd:74:eb:cf:6f:ce:4b:3c:
         f4:79:89:3f:a6:95:5f:ca:ca:07:3d:fa:2a:fc:33:5a:af:f6:
         3c:29:32:c8:0d:44:14:1f:d5:ed:01:c5:6d:fc:e5:0e:f6:47:
         aa:ed:2b:b1:ad:47:60:84:f5:ec:a9:fa:23:29:aa:ac:d8:f3:
         84:c9:c8:a5:cc:c4:b8:6b:0e:cf:e3:d9:4e:f7:e0:a4:19:41:
         0e:6b:da:21:f9:2f:27:78:d1:f6:d9:e0:61:1c:f3:87:53:5d:
         68:57:ae:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:03 2024 by rpki-client on console-fra.rpki-client.org