Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/64b554a5-9671-3d1f-95a8-c3d633997c7f.roa
File:                     64b554a5-9671-3d1f-95a8-c3d633997c7f.roa (raw, json)
Hash identifier:          i1FivpGu2SlpQRClkd3FvcJUYPbVtSJxkEArqPu6jnE=
Subject key identifier:   FC:C8:C4:27:89:A8:AD:3E:EA:15:EA:DD:2E:BC:61:F2:60:45:7C:A1
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F432858468A7A0EA4ADDAC0F582EC99C0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/64b554a5-9671-3d1f-95a8-c3d633997c7f.roa
Signing time:             Mon 15 Jul 2024 01:00:24 +0000
ROA not before:           Mon 15 Jul 2024 01:00:24 +0000
ROA not after:            Sun 13 Oct 2024 01:00:24 +0000
asID:                     3356
IP address blocks:        68.67.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8a:7a:0e:a4:ad:da:c0:f5:82:ec:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jul 15 01:00:24 2024 GMT
            Not After : Oct 13 01:00:24 2024 GMT
        Subject: CN=c5ffbd40-379a-41d7-a631-99ad6bae4454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:80:24:cd:97:9f:1c:b5:53:64:bd:dc:83:
                    ac:9b:40:c8:05:b4:25:e3:dc:f6:a0:6b:09:52:3d:
                    0a:0d:2d:66:bb:39:78:be:97:6d:77:29:f0:07:45:
                    8f:00:68:d1:bc:6e:c1:75:d7:37:b3:aa:2f:29:a2:
                    87:93:05:46:0a:bd:f4:64:99:41:a6:7c:a8:bd:ab:
                    e1:81:fb:f5:ef:55:d4:ae:14:84:fb:43:c4:e4:d1:
                    38:3b:62:62:69:f8:18:a0:57:fb:5c:06:43:3f:eb:
                    43:10:27:cd:12:a3:90:93:73:26:84:bd:63:11:ac:
                    1a:36:c9:35:9b:aa:e4:6e:36:7b:7f:46:9f:d1:d5:
                    b6:d3:e2:f4:a8:a4:5c:53:78:10:08:da:c5:1d:6b:
                    1c:02:32:f5:56:b8:98:b6:6e:2f:1a:c6:14:0e:ef:
                    b9:c7:5e:77:18:64:08:cf:49:50:90:68:c3:2f:59:
                    90:90:8f:ac:73:b2:ef:e1:a9:dc:5a:08:0a:4e:05:
                    0c:f1:61:1d:a0:5b:55:73:ac:3d:96:23:b5:d6:9b:
                    cd:ae:b9:8a:d0:b5:ef:32:03:06:fe:b7:b3:49:c3:
                    66:c7:2f:45:ca:b9:52:cb:d3:91:bd:e6:6e:98:79:
                    f2:78:74:27:6b:09:42:cb:7a:e3:2d:8b:9d:e0:52:
                    b5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C8:C4:27:89:A8:AD:3E:EA:15:EA:DD:2E:BC:61:F2:60:45:7C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/64b554a5-9671-3d1f-95a8-c3d633997c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:86:ee:8d:e1:b6:bc:ec:4a:e6:9c:04:9d:41:1b:8a:34:cd:
         89:fe:d8:53:4f:ba:8d:13:dc:19:25:89:d4:aa:df:f8:db:bd:
         1e:af:82:f1:44:bd:70:e8:11:9e:26:92:65:12:cf:44:65:af:
         41:c3:87:ef:71:a8:68:5f:12:89:ca:0e:56:af:e7:b4:7e:a4:
         e5:96:b6:07:57:9f:52:86:be:03:b4:37:a3:95:e2:d2:43:ab:
         96:4f:51:99:b3:68:ec:c9:32:25:2b:b0:7c:7f:4d:5e:39:26:
         f6:96:a2:7e:e2:ab:48:e7:4a:98:54:7e:54:a1:c7:2f:cc:0b:
         55:fa:f6:a8:7f:45:aa:a5:2a:50:83:c7:40:07:dc:b5:b8:43:
         f2:c2:4c:43:79:07:8a:e7:c8:c8:5a:f9:59:51:e0:d9:7a:3a:
         83:e4:82:13:5a:0f:9e:ed:a3:d2:af:3c:7c:1b:eb:7d:73:76:
         5c:db:59:fd:14:ed:77:ac:26:b1:85:50:f9:37:01:c0:61:d9:
         17:fb:bf:60:58:4d:55:40:b5:63:61:56:a0:ef:a0:cc:b5:04:
         26:49:80:c3:35:1c:57:cb:2c:f1:36:74:a9:a4:4c:3d:09:03:
         10:e6:b1:a2:0c:44:ad:67:42:f8:f8:38:d7:3f:00:a5:d1:5d:
         6f:6b:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 20:21:02 2024 by rpki-client on console-fra.rpki-client.org