Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/d6ba6729-7deb-359e-885d-22025f24ec21.roa
File:                     d6ba6729-7deb-359e-885d-22025f24ec21.roa (raw, json)
Hash identifier:          fApOuw68WZUZqS6S4k+3s2/C69uRNPV0Y/mzYTvtPHM=
Subject key identifier:   50:35:B3:7B:26:AF:3D:36:4E:F7:98:CE:AC:6F:52:19:C2:4C:A6:F5
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285845BD48E51075D8DB5A4A279940
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/d6ba6729-7deb-359e-885d-22025f24ec21.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     19437
IP address blocks:        68.67.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:e5:10:75:d8:db:5a:4a:27:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=019ba615-741c-4c11-a682-6c745e2eb9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:44:bb:bc:bd:6e:b1:14:67:73:d0:97:65:
                    75:0e:c9:62:8e:ad:f5:3b:4d:60:93:f7:d1:a1:c8:
                    a8:bb:69:4f:e7:c6:23:6c:1f:f6:88:a1:84:f9:2e:
                    a4:f4:3e:27:96:d1:57:4d:cc:92:78:98:f4:d9:7b:
                    bb:5b:bc:e8:95:80:3c:c6:34:bc:b5:01:6c:0f:82:
                    0e:09:13:a0:43:c7:f6:3c:92:d1:0f:dd:50:6f:26:
                    26:ba:8a:a5:3e:17:b3:02:2b:6f:7c:d3:20:d4:1f:
                    f0:33:ba:75:76:2c:7c:9b:73:df:af:0c:b9:0e:39:
                    6e:66:9e:76:43:72:b4:eb:a1:33:82:c8:d2:09:46:
                    96:88:b2:57:0c:0a:c9:74:f2:cf:44:d7:d9:d1:e3:
                    36:e0:5a:f0:2b:09:15:7a:39:b0:5b:b7:5f:60:7a:
                    14:eb:42:fe:78:54:b4:44:58:5d:12:d3:7c:eb:a8:
                    cd:7f:33:28:1c:ba:1a:00:9e:d9:8c:1f:ce:5e:1c:
                    92:e4:d6:10:8b:d3:a9:fa:55:23:39:f5:15:46:29:
                    51:88:83:95:a0:8f:c7:21:03:0f:da:ae:c8:2b:de:
                    1e:b4:f7:bd:37:b7:58:de:8d:23:bc:e0:b5:b2:16:
                    a7:57:ef:72:e4:00:37:26:df:ee:66:3c:4a:4d:d4:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:35:B3:7B:26:AF:3D:36:4E:F7:98:CE:AC:6F:52:19:C2:4C:A6:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/d6ba6729-7deb-359e-885d-22025f24ec21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:d4:25:be:ff:2b:8a:cd:13:30:50:26:34:58:db:99:f1:
         32:5b:ad:98:bf:44:1f:da:6b:e2:91:1f:ec:64:79:86:d9:c5:
         1d:25:c7:91:9d:a0:a0:14:69:ac:d9:94:d5:77:60:6e:92:9a:
         07:71:45:96:e7:0e:37:c9:e5:c9:36:3c:23:87:50:89:ca:20:
         b1:e8:d2:79:8b:b9:6c:57:f4:5b:a4:13:d5:ed:9c:f3:8e:43:
         4f:e5:94:b5:d5:49:d9:9b:ba:37:28:f0:39:a5:20:05:1b:40:
         8f:85:e3:06:20:c8:6b:23:cf:d5:6a:37:2e:a5:46:65:2f:ee:
         88:8b:29:bf:ca:14:20:3d:05:ae:16:02:03:4e:1e:ea:3a:e7:
         20:f4:50:bb:d9:c8:44:d4:62:fe:a1:c9:f3:77:c5:54:1d:0e:
         fd:81:31:73:30:fb:54:9f:b9:b1:f6:05:2b:b8:39:fa:de:d3:
         6f:b1:dc:db:01:53:a0:fe:51:46:23:93:51:ec:68:1f:29:b3:
         78:a3:51:30:1b:b1:3e:04:bd:7d:41:56:4f:b4:67:f2:b4:91:
         e0:75:dc:f0:39:84:7e:df:26:1e:0e:94:58:95:31:2b:8a:01:
         b3:fd:14:ca:f7:02:9b:3d:5a:f6:96:64:56:8a:df:a1:ba:86:
         19:a8:eb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:02:45 2024 by rpki-client on console-fra.rpki-client.org