Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/64b554a5-9671-3d1f-95a8-c3d633997c7f.roa
File:                     64b554a5-9671-3d1f-95a8-c3d633997c7f.roa (raw, json)
Hash identifier:          Dhpax6pPEqC2Ggypzy2LK10qF7N2bU4aJGewu9zOFfA=
Subject key identifier:   C3:5A:0D:33:38:BC:AE:02:A2:1F:FF:E8:F3:9B:B0:51:71:1D:6E:67
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285845A9BE19B8AA634BF7ED4D3A00
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/64b554a5-9671-3d1f-95a8-c3d633997c7f.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        68.67.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:19:b8:aa:63:4b:f7:ed:4d:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=ac3d9d14-eac1-49c4-b891-b31f97d93b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ad:db:b0:4d:e7:03:15:cb:b3:43:8d:b5:f1:
                    f5:58:84:cd:aa:1e:6c:10:b1:bb:ec:bb:79:0f:31:
                    8e:e1:ed:59:cb:cf:99:8c:bf:49:27:92:a1:9d:02:
                    3b:65:e4:3b:ba:ef:ec:81:1f:b9:f4:6b:01:7d:a9:
                    7a:84:2f:2f:76:22:6b:1c:0d:d1:96:ee:0f:88:07:
                    fa:75:0f:ee:b0:6a:c5:b0:20:5a:7b:11:d4:d9:90:
                    f0:a5:cd:e1:9c:38:a9:e3:5a:33:cd:b8:f1:d7:ad:
                    f1:a4:39:1a:52:ec:e8:7d:78:03:ca:e5:0e:93:64:
                    d1:9a:61:54:60:e3:00:a3:64:f8:b1:eb:5b:03:0f:
                    ff:c2:28:7e:bd:15:64:50:a1:bc:56:18:12:ab:90:
                    77:74:2f:96:10:1d:38:02:e6:d9:48:79:e0:87:36:
                    ac:d7:7e:ba:cc:1f:48:00:3b:87:6f:c3:b2:07:72:
                    24:50:60:13:6c:95:7d:d9:c7:3f:e5:0c:9c:8d:79:
                    9b:c0:a1:48:20:72:32:ad:32:cf:a0:61:cf:32:8f:
                    f0:b6:a2:a1:76:06:61:86:ba:e7:f7:dc:b7:f4:7f:
                    03:e1:68:0b:d9:36:bc:38:ac:d1:ac:9f:d7:07:1e:
                    12:e5:5a:79:6a:a1:fd:26:f8:49:5a:a6:bc:99:6f:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5A:0D:33:38:BC:AE:02:A2:1F:FF:E8:F3:9B:B0:51:71:1D:6E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/64b554a5-9671-3d1f-95a8-c3d633997c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:d5:a5:18:a8:6c:71:67:d3:af:5e:af:19:85:39:92:88:a3:
         e0:f1:f5:7e:eb:29:1a:1c:a5:f2:e7:1f:0a:c8:0e:e3:b5:d4:
         0b:f4:bc:c0:dd:44:20:1c:bb:76:6c:df:44:e8:f3:a7:74:eb:
         ef:3a:d4:05:8a:be:a5:03:59:05:8e:e6:be:9a:d6:62:16:2f:
         c1:93:aa:4c:9c:5a:dc:d2:03:b2:ac:f5:ad:de:a8:5d:80:8c:
         a4:9d:7b:8f:e5:08:91:e9:8c:d0:6b:16:16:d0:d4:e0:23:b3:
         56:59:b1:16:c4:2d:17:ca:f8:55:fb:5b:7c:a7:12:cc:bf:1c:
         4d:32:61:4c:63:a7:08:13:30:ec:de:89:ad:d3:8c:3d:64:ac:
         79:11:6a:5a:6b:da:ef:92:a6:6d:c9:af:c9:35:e7:9c:3c:85:
         10:bc:6e:1b:10:87:f2:d1:73:78:e8:43:e5:d5:3f:92:b5:6c:
         21:80:e3:0e:51:e0:34:86:1e:ec:68:3c:ee:f7:1c:64:3f:4c:
         0f:8e:52:5c:67:31:14:7b:f7:9f:2b:3e:80:60:75:a5:17:a9:
         e2:55:8a:29:78:27:1d:f6:0c:23:3b:2e:4f:42:55:ae:36:28:
         4f:d7:11:2b:97:7e:66:a3:fd:21:fd:b0:77:17:94:c1:e0:36:
         52:87:d1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:17:58 2024 by rpki-client on console-ams.rpki-client.org