Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa
File:                     379a4041-9b9d-3d0e-bb79-4431614aa2db.roa (raw, json)
Hash identifier:          yJG4em4AW4oe4IG1/eoTFIIHYqktb4+do+rVcFK1oB8=
Subject key identifier:   9B:B4:15:51:39:4F:73:DB:8D:62:58:34:D0:67:1F:19:30:3D:23:06
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285847D404930899CEFD691068C600
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     212238
IP address blocks:        68.67.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:93:08:99:ce:fd:69:10:68:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=ea92f87c-2bdc-458e-900e-e3396cb204fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:96:a0:24:41:bd:68:b8:ef:41:da:27:3d:
                    97:fe:b8:6c:d2:d3:b3:16:c1:90:23:6c:70:91:b3:
                    63:77:41:e9:cd:30:1d:f4:fd:f2:26:43:21:b8:4e:
                    c2:c4:bf:cd:a8:f6:c1:e7:ea:79:c3:77:94:53:29:
                    f2:52:23:a5:96:d3:5b:1b:b4:37:70:f4:d8:53:0d:
                    fb:09:7e:ba:33:fc:ff:90:24:ab:b7:90:46:57:40:
                    59:98:b4:54:eb:4b:60:fe:7a:65:fe:38:9a:fd:73:
                    aa:fa:23:79:d8:97:a2:c5:cc:cf:cb:60:f7:f4:fd:
                    bd:f7:5a:fb:d0:70:0e:6f:0c:53:52:b4:a8:c6:07:
                    3a:ff:2c:a5:ec:0d:5a:b0:2b:21:ab:7c:e5:59:c9:
                    a7:0f:06:44:a0:d9:b7:ef:d2:dc:34:75:c4:be:e2:
                    f7:b2:8c:65:2d:af:c6:90:54:34:01:b4:88:ce:db:
                    4c:bb:93:f6:1d:9e:f1:b4:f9:f4:92:19:6c:59:4d:
                    88:11:3e:63:c6:72:f2:2f:82:a9:98:87:87:25:70:
                    53:08:bc:8c:60:6f:e6:83:a8:62:32:69:8c:2a:15:
                    5c:63:0a:78:45:16:23:94:15:45:ff:92:1b:3e:31:
                    d3:77:15:b3:49:80:75:ae:93:8b:19:b6:07:7d:fe:
                    38:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B4:15:51:39:4F:73:DB:8D:62:58:34:D0:67:1F:19:30:3D:23:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:62:44:17:07:b3:23:d3:e7:56:42:71:53:61:dd:89:05:ae:
         c6:73:f3:c7:3e:c0:20:84:7e:56:57:5b:34:c2:92:a8:b8:5d:
         2c:be:a2:6f:9b:10:7e:7f:61:22:af:00:16:f3:62:5d:a4:ac:
         84:81:ea:a8:89:9c:fd:5f:53:d7:7c:de:ad:63:a8:26:bf:83:
         a8:92:96:ff:8b:cc:cd:f9:ee:e9:99:52:3c:98:a5:b2:65:7a:
         2b:f5:f3:ea:dc:74:f1:04:c6:b0:9e:36:1f:31:26:e0:b7:33:
         60:2d:e7:56:9d:06:76:f7:59:dc:d1:bd:77:8d:c7:f3:dd:ad:
         a9:8b:f4:bd:2f:18:3d:9c:45:c8:d5:95:31:0f:c1:3a:8d:14:
         1f:38:4b:00:57:a2:9e:12:f2:9a:92:33:f2:a2:77:5a:f4:1b:
         5c:17:70:7f:98:a3:2c:15:ef:da:0d:2f:32:4a:bc:e5:04:77:
         a5:22:7b:4c:2c:ea:e9:95:b9:f6:29:b7:79:48:5f:32:a1:4c:
         f6:8e:69:92:9f:03:52:2a:db:0f:45:6c:f3:97:b0:fc:34:e2:
         d2:c7:2d:c1:89:95:1e:c2:05:1f:2a:83:61:9b:67:f1:c0:3d:
         be:0b:c9:cc:10:42:e8:b1:67:a4:65:42:a4:16:c5:e2:ec:8b:
         0c:62:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:10 2024 by rpki-client on console-ams.rpki-client.org