Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/33db0f06-ced8-3d82-99ff-dbdd0f95a1bf.roa
File:                     33db0f06-ced8-3d82-99ff-dbdd0f95a1bf.roa (raw, json)
Hash identifier:          ecaqoKa064898Ogy7hnQyf1iJugHSbsbztZmSyLuxbk=
Subject key identifier:   33:09:02:7A:C9:C4:42:66:F8:ED:4F:8A:A1:25:DB:A5:73:CF:B0:3F
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584726D08E36E6B86C8C537A8E00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/33db0f06-ced8-3d82-99ff-dbdd0f95a1bf.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16417
IP address blocks:        68.232.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:8e:36:e6:b8:6c:8c:53:7a:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=da87ea61-8120-4f72-9a13-b971ef653866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:d1:00:77:a0:1c:96:b6:69:83:89:7c:46:
                    7b:75:50:4e:80:49:8e:27:dd:49:ae:b3:11:e1:51:
                    b3:25:9a:c9:16:82:cf:8f:61:33:4d:f2:0c:d7:90:
                    98:77:38:80:b7:20:66:f2:3f:4b:97:49:32:57:76:
                    9f:e8:92:12:f7:23:9b:f0:f3:98:05:22:86:dd:97:
                    9d:ca:1a:ee:4e:05:d8:f1:bd:7e:1d:44:fe:1f:fa:
                    12:e0:99:bb:14:de:be:7b:b0:21:af:87:f4:03:12:
                    b2:07:99:d5:f8:8d:f0:0e:98:f6:fd:38:79:84:df:
                    68:f4:e3:42:4d:66:d5:76:2f:2f:8b:8e:ba:71:c0:
                    96:d1:7d:19:09:92:02:86:20:61:a7:fa:22:6e:19:
                    64:61:aa:90:c1:b9:9b:61:58:46:d7:ab:c5:66:b9:
                    34:88:18:b8:24:bd:c7:e5:b8:55:98:c7:ca:7a:b4:
                    85:e0:6f:82:56:e3:4f:fd:ea:55:e4:c4:0e:fd:11:
                    b8:05:ec:3a:ee:6c:21:88:3d:65:15:98:1d:34:81:
                    29:33:0a:b7:80:6d:14:e1:93:68:b4:d9:57:df:9a:
                    df:b6:b7:77:47:e7:d5:9f:28:48:e4:f7:0f:90:84:
                    1a:e7:ec:4c:02:6a:d3:08:e5:a2:56:b3:eb:30:19:
                    43:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:09:02:7A:C9:C4:42:66:F8:ED:4F:8A:A1:25:DB:A5:73:CF:B0:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/33db0f06-ced8-3d82-99ff-dbdd0f95a1bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d2:1b:b8:68:6a:e6:de:0a:56:cf:a4:fa:62:bd:81:bc:2e:
         ab:d1:d2:f5:8c:85:f6:d0:ac:97:a3:23:39:f0:88:ef:e2:79:
         a0:8f:74:63:26:5b:19:b4:a9:29:c3:fc:97:42:7e:f6:c1:d2:
         48:19:09:10:08:81:24:7b:a3:7f:74:b2:25:6d:50:67:b9:2c:
         d3:1b:97:7e:fb:64:d9:f0:4b:94:79:96:7a:de:28:b7:90:0a:
         9b:86:d5:a8:b6:41:bc:54:b6:48:79:4a:3a:c6:ad:3c:44:03:
         e6:c7:25:e8:fe:39:2b:52:f9:f9:bc:f4:11:92:9e:a1:b7:98:
         c2:71:d6:27:68:29:18:16:50:0c:d7:41:2a:79:bd:83:49:f1:
         ba:2c:22:7b:83:8f:9a:45:1f:b3:e3:4e:92:30:2d:4c:ea:65:
         9b:7d:c6:d0:6f:a0:9f:6c:15:be:a2:ba:c0:4d:0d:00:a6:b4:
         d6:c1:33:b2:9a:a8:dd:46:ce:69:59:16:1c:44:1c:de:33:27:
         fd:d6:e0:d8:64:7b:ff:71:63:5c:29:56:79:d9:5f:ac:a2:87:
         8d:f1:b7:1e:38:22:95:bd:d2:b1:9a:b3:e8:4b:e4:62:6d:08:
         a9:02:c6:ef:1d:ef:14:b7:7a:4f:c3:ba:6c:a5:80:5f:37:eb:
         10:b9:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:34 2024 by rpki-client on console-fra.rpki-client.org