Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5c966ff9-0f83-37fc-9f66-b1986bfcb96b.roa
File:                     5c966ff9-0f83-37fc-9f66-b1986bfcb96b.roa (raw, json)
Hash identifier:          fCl1D7rKo8V1lyC7aGmJd0cjemRs3kNLaGnBClvZSaE=
Subject key identifier:   54:06:03:29:77:CE:21:B5:F9:73:57:31:F4:F8:AF:47:C0:CA:92:82
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285845C2DE33F6D37C9DFB61612580
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5c966ff9-0f83-37fc-9f66-b1986bfcb96b.roa
Signing time:             Sat 04 May 2024 13:00:35 +0000
ROA not before:           Sat 04 May 2024 13:00:35 +0000
ROA not after:            Fri 02 Aug 2024 13:00:35 +0000
asID:                     19237
IP address blocks:        68.67.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c2:de:33:f6:d3:7c:9d:fb:61:61:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: May  4 13:00:35 2024 GMT
            Not After : Aug  2 13:00:35 2024 GMT
        Subject: CN=97d69b48-17a4-4472-9206-09a51ce351f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9c:84:40:23:1c:b3:67:cd:6c:1a:1f:0f:79:
                    f9:74:2f:bf:10:6a:77:a8:8b:c6:a2:c9:f3:6c:52:
                    60:1b:ac:21:67:d7:0c:e8:35:54:d9:1d:43:3f:33:
                    cc:60:9c:c7:e6:1a:5e:80:13:ba:01:3f:54:e6:e1:
                    b8:64:b0:0d:34:94:6f:5a:b0:13:89:7c:8a:72:bd:
                    80:ee:11:81:29:a3:b9:ce:f4:ef:04:75:53:6d:f0:
                    79:ce:cf:3d:9c:5d:ac:b3:81:46:44:af:d3:34:b1:
                    fe:9f:2c:5d:83:35:e9:90:a7:76:55:e3:38:1b:67:
                    5e:57:59:5e:b6:90:9c:55:c4:30:2d:19:0a:26:44:
                    78:43:f2:6e:01:e0:59:6b:31:6b:d9:4a:67:5b:25:
                    2b:cd:82:8b:81:60:5d:76:37:ab:4a:17:78:aa:ad:
                    41:36:08:b7:8e:e7:ce:14:0b:2a:df:20:45:27:6d:
                    e8:b8:b5:b7:99:10:fe:6f:2b:09:0c:fc:28:ce:a6:
                    be:c2:9d:fb:1e:86:0c:b2:26:ff:b1:af:4f:9d:53:
                    b5:62:f8:cb:17:60:8f:09:cf:71:74:c2:e6:a1:cf:
                    6c:82:f3:c8:85:b0:87:c9:c9:cd:d1:6c:4d:18:b1:
                    88:15:27:e7:18:ed:d7:21:a1:df:34:19:42:4f:1d:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:06:03:29:77:CE:21:B5:F9:73:57:31:F4:F8:AF:47:C0:CA:92:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5c966ff9-0f83-37fc-9f66-b1986bfcb96b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e8:15:2b:54:79:c6:d0:6a:d4:cb:8c:af:b1:8f:d8:a2:cc:
         59:6a:e4:74:49:96:58:f0:b4:3c:64:ae:28:32:3f:d3:79:fb:
         f9:db:a5:ea:aa:b1:29:e6:4f:f4:bb:16:30:f8:bb:a4:52:82:
         9e:91:8b:9e:0c:4c:ed:70:f0:9f:23:db:7b:24:3d:2e:5b:80:
         3f:f9:92:7b:cf:d7:bc:2e:1d:29:87:3f:d1:17:50:b4:6c:e4:
         be:78:ea:02:0d:8a:01:ea:b6:db:85:64:39:64:ab:e7:e4:76:
         d2:c3:e9:94:66:83:de:3e:38:59:9a:a3:b1:4c:4c:9e:d7:d1:
         33:17:1f:cd:9b:9b:e8:8c:0a:a4:0d:b0:7a:72:59:98:95:7a:
         db:3e:f7:c2:5f:a3:a4:2c:b5:16:03:ef:f5:20:21:54:7e:24:
         33:97:28:6c:e8:89:36:b0:0c:62:b8:f7:1b:4b:6c:7f:e7:38:
         4b:f1:62:f4:81:e7:26:d2:b0:b2:6f:81:f3:bc:ac:7c:b8:0a:
         5d:db:f1:5b:e0:23:33:32:43:13:66:e3:a9:80:98:ea:06:bc:
         a1:e6:48:84:c3:1f:24:c0:99:6a:93:eb:5a:b8:f0:a7:0c:7a:
         86:6a:fb:7b:4d:51:bc:b9:6c:e1:44:5e:38:df:5d:70:d3:c8:
         1b:f4:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:00:29 2024 by rpki-client on console-ams.rpki-client.org