Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa
File:                     98414261-a9c5-331c-907b-334e7923dd0d.roa (raw, json)
Hash identifier:          JaphHb+cNfqf5cJ8wRMFoacVFAKOf6Fj+dwreP3/uTw=
Subject key identifier:   C1:B4:F0:02:2E:2D:ED:CB:53:B9:4F:61:2C:BD:47:CC:CA:93:92:49
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F432858459368BA58F9A31D9060B4D500
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     3356
IP address blocks:        68.67.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:ba:58:f9:a3:1d:90:60:b4:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=29349825-21f2-470b-b0dd-7b9bacf4215c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3a:7e:d5:20:91:28:fe:25:c9:7b:e6:34:78:
                    62:db:30:33:d0:24:4b:e4:72:a8:1b:d2:39:d5:75:
                    02:aa:c4:22:e5:47:f1:55:11:84:6a:57:59:3c:ee:
                    48:80:91:b3:03:40:a6:97:e8:ed:13:0d:95:85:6d:
                    06:33:b1:21:c5:f6:1b:7b:4f:c7:92:fe:48:90:28:
                    bc:d3:ad:b9:f0:63:69:21:12:ac:11:16:9e:60:e3:
                    61:e0:07:24:5f:c3:5c:3b:58:4a:ff:1a:61:19:9e:
                    ad:b4:23:28:7f:25:f9:af:6e:99:c7:3e:0b:3a:9c:
                    b7:d9:0a:cf:1d:4d:ab:a3:6f:2d:a5:91:0d:79:ad:
                    1e:40:33:da:98:8c:cd:bc:10:f7:a1:29:38:63:e3:
                    1e:98:c4:b2:72:43:da:4b:c5:36:5d:a4:77:b4:be:
                    27:e3:ee:b7:cd:37:2c:ba:30:59:a2:50:64:b3:02:
                    6b:90:d8:6e:7e:73:9c:ac:7a:c8:ef:70:56:32:9b:
                    34:8a:87:42:3c:28:2b:a4:7c:2d:f3:4c:51:85:ac:
                    a6:ca:d7:49:94:82:37:83:93:73:7d:e6:5a:d8:40:
                    cd:bc:cd:a6:12:cc:cc:a3:a0:f4:aa:6c:6d:fb:f5:
                    b1:9a:a0:3d:e0:f8:e2:b8:47:28:0f:5f:ae:61:f3:
                    c5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:F0:02:2E:2D:ED:CB:53:B9:4F:61:2C:BD:47:CC:CA:93:92:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:72:e9:a0:88:1a:d2:2b:72:0b:a1:95:ea:18:f6:db:73:fc:
         b2:2a:22:04:78:9f:98:ed:24:07:42:01:ce:94:aa:eb:38:f6:
         02:9f:75:e8:31:2c:db:4a:d1:94:5b:29:cf:0d:e4:be:0a:93:
         78:ee:6d:ee:3d:1b:83:44:62:d2:91:79:bd:43:28:81:f7:84:
         11:b1:85:65:a1:de:a6:2c:22:31:4c:d7:a8:6e:fd:34:68:d8:
         8a:83:63:82:86:21:a4:f1:92:61:ac:29:c8:57:5d:e9:2f:68:
         51:f8:c2:f7:b4:82:d2:51:a0:b4:2e:9f:53:42:37:14:60:cf:
         74:65:ed:6f:2f:4f:2f:cc:51:2f:cb:70:06:60:94:d7:2f:36:
         0e:35:bf:d9:c3:a7:bf:f6:85:de:38:34:32:c7:3b:63:a7:3d:
         65:f3:86:e2:e3:24:51:e7:e9:37:b6:78:a8:14:2f:2c:c1:0c:
         a4:47:2f:30:c5:ae:81:fc:2c:9f:ec:c6:24:6b:da:c9:ae:42:
         da:98:e5:75:21:b3:27:ed:c1:a1:51:9d:5b:8d:14:1a:01:a8:
         98:7e:18:01:2a:fa:5b:28:17:5c:18:74:19:e6:d5:e6:58:3d:
         c9:9b:2e:30:03:02:ab:e4:0b:d2:40:08:f8:e0:5b:35:c2:8b:
         31:d9:3a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:31:57 2024 by rpki-client on console-fra.rpki-client.org