Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa
File:                     1a07af80-4f86-3445-9db1-9d3ed1101688.roa (raw, json)
Hash identifier:          GvWfTdeGZ330ywlPDsmbFhAjbZSQYxetGimuI4pSuCk=
Subject key identifier:   64:76:AC:88:99:F5:32:8D:8C:8D:93:E5:7B:2A:14:D0:16:B2:8E:87
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285844FCC5669A0EE2D68B52D73BE0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     61317
IP address blocks:        68.67.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:66:9a:0e:e2:d6:8b:52:d7:3b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=831c8eee-1406-4f36-893a-b3a7a4b57aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:05:dc:d8:5e:92:f2:f4:46:b8:59:3f:1d:
                    34:69:14:1e:19:e6:77:d6:7e:64:a5:cb:47:20:2d:
                    87:87:63:ff:48:ad:2f:32:f7:96:f3:2f:6c:f3:75:
                    6a:f7:b7:a9:8c:33:3f:6a:4e:aa:74:21:30:37:9b:
                    d2:77:ee:7f:f6:97:b4:25:1c:a6:a5:d1:9a:f2:ac:
                    26:f0:d5:96:14:69:aa:7d:0b:48:80:e6:08:34:1a:
                    3e:c1:ad:f5:1f:6e:a1:53:74:7d:85:6e:99:e7:04:
                    18:37:1f:ab:e4:19:99:2d:57:8b:b3:23:28:0a:77:
                    66:0c:ef:36:75:76:82:9f:b1:f6:d9:f5:f3:cc:2f:
                    36:82:3a:48:db:8c:b7:5a:70:6a:94:a6:9c:6e:06:
                    8b:5c:29:58:9e:a7:a5:a4:fb:44:bc:1c:46:d5:26:
                    d8:bb:a6:be:e9:44:9c:95:69:f5:45:60:df:62:84:
                    f1:80:ad:83:d8:4b:aa:00:66:2b:08:9d:2f:53:1b:
                    83:a8:d4:72:71:7f:f6:42:63:c4:79:0a:a3:ea:34:
                    7d:67:1c:11:0b:88:ed:6d:85:78:63:8d:0f:17:c3:
                    9e:09:40:35:6e:ec:cb:bb:ae:93:07:c5:fb:e1:87:
                    f0:b9:13:b1:a4:f5:41:da:e1:24:d5:b9:9d:e9:ea:
                    02:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:76:AC:88:99:F5:32:8D:8C:8D:93:E5:7B:2A:14:D0:16:B2:8E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:91:df:03:6e:b3:df:51:08:77:f8:37:76:f6:86:89:4e:64:
         c2:c6:47:5b:4b:6a:f1:eb:b2:8d:ea:c6:0b:39:7f:8b:19:a7:
         e2:fe:78:e0:eb:f2:92:2e:ce:30:04:f0:9e:d4:14:df:ac:e1:
         a5:4d:a5:2a:5a:3a:b2:0b:0c:a5:d1:84:10:f9:ce:13:ec:de:
         7b:57:52:69:20:49:b1:68:b3:04:35:83:74:0c:fc:91:0d:5d:
         ff:05:68:c3:ad:c2:71:f0:35:61:6e:74:fe:81:bb:c4:ae:a8:
         ce:87:49:6f:6e:06:e7:1c:7b:15:fe:ab:0b:f7:f0:71:05:4e:
         92:81:6a:d5:fa:f7:50:15:cc:13:7c:9d:53:95:9e:ec:74:0a:
         37:b5:7a:04:6d:e2:c8:36:7e:4c:c8:97:c4:3a:3e:60:f1:df:
         fe:f7:b1:ce:25:49:83:f3:46:73:e6:17:24:3b:4b:ca:ad:70:
         dd:3b:05:24:d7:28:91:3a:f0:04:c8:8d:6e:ab:2e:4f:e9:fa:
         e9:26:bd:5e:b6:dd:c5:41:cc:a0:aa:7f:07:ed:9c:da:04:06:
         ff:6e:df:b5:25:aa:bf:f6:65:de:fd:35:07:4e:f9:14:78:38:
         80:88:07:a1:df:c9:5e:71:6a:49:db:34:d8:36:3a:b6:27:be:
         e3:bc:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:55:36 2024 by rpki-client on console-fra.rpki-client.org