Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3d69a221-2629-3643-b96e-fc3c55e18e62.roa
File:                     3d69a221-2629-3643-b96e-fc3c55e18e62.roa (raw, json)
Hash identifier:          UwxJu+GJUtO87HpCjorBjZ55VU7QmT6Y0AVwsXSUpsE=
Subject key identifier:   0B:30:49:23:B4:63:2B:90:50:86:D1:21:AC:B8:3A:64:64:06:89:44
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F432858455B92ED711AC8CE9E14FC7340
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3d69a221-2629-3643-b96e-fc3c55e18e62.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     14315
IP address blocks:        68.67.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:ed:71:1a:c8:ce:9e:14:fc:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=85b3c915-e109-40ff-a585-fc0dbc3fa74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:64:5a:cc:1d:ad:bf:cd:0a:fa:40:bc:ad:
                    2f:b0:57:12:0d:91:98:c9:bf:93:07:df:4d:5c:cc:
                    c0:62:1f:f1:02:0b:74:3e:a8:5a:cd:f2:3d:27:06:
                    bb:9d:ae:66:aa:8e:b2:be:3a:a9:fd:a8:f7:f9:f5:
                    b7:a6:a4:83:88:28:86:99:a3:4e:a9:13:65:e5:d0:
                    b7:2d:67:b8:a0:98:07:33:89:6a:33:e8:b1:00:7f:
                    02:ee:8b:e5:1b:8c:39:8e:27:6f:65:8d:16:9d:9b:
                    6c:b7:7e:61:1c:36:b2:b8:97:08:06:05:31:31:f3:
                    76:fd:3e:58:a7:ca:67:0e:4f:63:67:42:18:30:e4:
                    7a:a6:ea:20:02:4d:2d:80:ba:fe:d2:bb:cb:d2:33:
                    41:cc:d5:8f:9b:a4:84:78:cc:bf:b8:0d:19:0b:04:
                    22:34:b3:c2:c0:b7:f8:9e:b8:6b:18:5c:d1:ef:34:
                    02:54:8e:c5:3a:43:e4:8a:2b:0c:fc:c6:bd:77:6f:
                    be:5f:f5:c5:06:2b:3c:f8:17:7b:ff:c2:36:9b:02:
                    29:5d:47:10:ee:c1:32:a7:81:48:a1:94:9e:22:47:
                    a6:a7:1d:d3:6c:ae:6c:a1:55:13:85:7e:89:87:56:
                    0b:74:73:8a:1f:ff:4f:e9:b0:b8:05:e3:e2:4f:79:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:30:49:23:B4:63:2B:90:50:86:D1:21:AC:B8:3A:64:64:06:89:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3d69a221-2629-3643-b96e-fc3c55e18e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:87:0a:b7:03:31:30:db:0f:05:d3:24:8f:2c:c7:f5:17:11:
         c6:a0:f5:d6:a0:5a:87:7f:d5:a1:9d:9f:f5:d9:cd:20:e5:f0:
         73:08:1e:17:2a:ea:95:b8:67:3b:98:63:93:c6:a8:b1:86:05:
         c5:67:b7:19:e5:13:64:fa:1e:67:0c:8f:14:50:fb:2e:6f:15:
         5f:ac:f5:9f:7b:b0:e9:b9:45:71:7e:95:3d:f2:ff:24:ea:43:
         7f:20:86:ff:3b:86:da:0e:6f:e3:e0:d0:c6:94:f3:10:c9:bf:
         24:78:ff:d0:e3:e3:da:8c:1d:96:b0:79:2f:88:90:35:79:80:
         c8:83:5a:65:4e:ac:21:06:9f:87:bd:c8:c5:a1:8c:ca:61:c4:
         87:e9:8f:21:f7:c4:2e:e8:7b:21:67:ab:2d:7d:c7:82:ee:e3:
         39:84:7b:5b:51:ca:75:28:5d:5b:89:3f:65:39:04:e4:be:c5:
         57:e1:0b:71:dd:bf:21:30:6f:39:1f:5d:66:8e:af:3a:7b:08:
         9b:b3:85:cb:63:a9:f1:03:5a:63:81:37:f9:a8:df:ea:f5:54:
         bb:e9:c6:b9:9e:8e:e8:37:88:82:39:73:07:97:6c:74:86:dc:
         b1:bd:14:02:ee:be:3e:59:38:bb:d8:d4:b5:aa:0f:e0:8c:b0:
         f9:82:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:07:37 2024 by rpki-client on console-fra.rpki-client.org