Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bd826b7d-b38f-3c03-aa27-a395a8facaf7.roa
File:                     bd826b7d-b38f-3c03-aa27-a395a8facaf7.roa (raw, json)
Hash identifier:          dfCx2KcyiQZFFQ5q4N8GZsSpfWYzt0Lv0jAmGnSoFsU=
Subject key identifier:   B0:6A:D7:52:87:1B:4D:FB:0C:A4:F6:F1:59:FC:10:B3:2C:60:4D:FF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DE8162D43DDDD33236480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bd826b7d-b38f-3c03-aa27-a395a8facaf7.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     16787
IP address blocks:        68.114.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:e8:16:2d:43:dd:dd:33:23:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=ece058ad-675b-40ca-b33f-6b84353c2ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cb:c4:44:15:63:cd:ec:17:7b:74:79:19:f2:
                    90:de:c2:1e:34:df:de:67:e2:a3:a1:d3:ba:9a:be:
                    3e:f4:60:28:ac:4d:d7:ae:50:8c:3f:1d:f8:4b:25:
                    92:5b:af:62:d1:bd:5a:12:98:f0:60:da:cf:64:78:
                    d5:f1:11:24:a9:e3:bf:ab:1f:57:60:3e:fc:8a:32:
                    2d:6e:69:89:54:6c:f5:d5:66:21:3a:43:06:36:6b:
                    3e:eb:ca:ab:33:8f:d3:04:ef:08:da:25:9e:b2:e7:
                    a5:fa:02:de:f0:6a:bf:94:96:2f:4f:83:f1:d9:71:
                    04:87:31:62:71:74:35:f0:c3:3b:cb:3a:61:a3:1d:
                    a6:8b:08:8b:17:d3:23:09:ed:8d:e7:51:e4:a9:9a:
                    ce:e4:b0:78:be:62:2c:ca:1e:4e:c7:80:04:d1:29:
                    b8:2b:ae:48:ba:dd:dd:34:65:30:4e:eb:c3:bc:b2:
                    c5:8e:af:b4:49:c9:06:b9:5b:c9:d9:30:16:e8:78:
                    4f:f8:8f:08:03:69:ce:f1:97:61:39:6d:5b:9e:a1:
                    57:b5:65:8d:28:eb:66:3c:a0:9f:f3:6b:56:2d:d4:
                    62:0c:02:c1:15:d3:7d:0e:40:97:00:18:cb:c7:6e:
                    12:58:42:3f:eb:7f:18:07:50:fa:a3:f3:8c:d5:20:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6A:D7:52:87:1B:4D:FB:0C:A4:F6:F1:59:FC:10:B3:2C:60:4D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bd826b7d-b38f-3c03-aa27-a395a8facaf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.114.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a6:06:bf:91:a9:57:cb:55:eb:b3:29:47:4c:1c:1e:7a:9f:
         83:86:49:ee:da:75:9b:27:a9:c2:52:72:43:ef:4d:f0:8d:1f:
         da:68:73:6f:68:ee:09:f4:9d:29:bb:69:d0:6d:f3:56:fa:d1:
         f9:f3:01:7d:2d:e8:fe:b2:a1:9c:08:7b:41:a3:41:b1:4c:68:
         28:56:f1:ff:91:bd:58:4b:b0:04:73:c7:0c:73:a4:47:f4:56:
         55:3c:b8:33:c3:4b:a4:66:83:9c:dc:1f:28:46:b9:3a:4c:9a:
         03:e3:57:5f:6d:00:4a:81:5e:58:a8:dd:03:c8:d3:39:fa:02:
         47:ef:96:b0:a9:9b:d8:44:bd:34:19:4a:a5:40:2a:8a:68:ce:
         f6:43:4c:ff:6f:ea:aa:38:fa:42:41:6e:c7:e4:e2:31:79:38:
         34:9f:83:e3:12:9d:37:cf:6d:1b:77:fe:f7:5c:65:b7:db:b9:
         c0:12:b8:14:db:f1:a0:47:2c:10:05:7c:5a:23:31:b6:42:73:
         b1:aa:73:bd:20:d8:6d:bc:f6:2c:b6:6f:55:8e:8e:69:7e:86:
         13:09:a5:34:fc:a8:70:2f:cd:df:e5:04:3f:df:c4:f5:ef:0c:
         16:9a:35:16:ad:e0:1d:a9:50:1a:bd:0b:32:56:96:1f:d6:45:
         d2:7f:bb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:42:11 2024 by rpki-client on console-ams.rpki-client.org