Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa
File:                     40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa (raw, json)
Hash identifier:          lALBJfEcp8O4W/pf8hDDrNRsdI9J1k6OGmIVwSJr9OE=
Subject key identifier:   19:2F:4B:37:15:A1:77:2C:82:4E:19:60:CA:38:5F:CE:08:8D:B9:F6
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F432858475910CBE0B139D0E5AD272880
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     30238
IP address blocks:        68.232.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:cb:e0:b1:39:d0:e5:ad:27:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=1574338d-c082-4eb5-84ee-c94ee6b0509d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:ae:9d:9a:95:c5:d0:38:5d:d4:62:bb:ff:
                    40:2f:da:f9:dd:9a:2b:d0:18:1b:88:b6:1c:1d:9a:
                    63:e5:b2:2d:7d:a7:31:63:46:0e:1b:d4:26:07:da:
                    66:39:fe:dd:e0:5b:be:77:a1:4a:49:b3:97:ef:05:
                    e6:e8:10:85:39:07:08:e3:9f:c0:12:88:1c:14:90:
                    06:d5:d2:33:55:f4:04:91:a7:2d:90:35:2d:71:b2:
                    40:55:90:2f:60:78:ff:6e:81:e0:7f:ac:68:8e:48:
                    74:c0:ad:20:c6:bb:59:79:23:a9:19:f4:10:96:52:
                    c8:10:7e:c3:6b:e9:b6:0c:8a:d9:ce:df:f4:e3:ce:
                    d6:d0:09:dd:ab:bc:73:30:10:83:28:d1:64:11:93:
                    5e:00:be:0a:97:58:03:00:32:f6:c0:e2:db:c6:6a:
                    5d:cb:41:41:11:a0:ed:0c:67:10:23:b7:b6:32:00:
                    08:2e:cc:d3:3d:33:21:0e:9e:fd:1c:3b:aa:e3:54:
                    7a:ac:cd:39:eb:a0:5d:80:58:98:70:ed:e6:96:5a:
                    74:5e:03:8e:14:72:ab:1d:3b:61:55:9a:e0:7f:1f:
                    41:1c:23:7d:16:ad:7a:f0:50:6e:e8:7b:95:22:24:
                    ac:35:eb:36:3b:3b:93:79:80:b6:53:64:c7:a0:b7:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:4B:37:15:A1:77:2C:82:4E:19:60:CA:38:5F:CE:08:8D:B9:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:19:56:62:ab:a1:af:17:2e:5e:20:6f:09:1d:ca:b4:aa:
         71:bb:13:4c:b8:75:46:dc:e5:6e:3e:2e:67:67:45:02:b3:5f:
         f7:b0:17:c7:7c:72:66:d0:03:8e:1c:b0:0c:70:df:a9:62:64:
         00:ab:e6:c6:1c:06:58:f2:b0:7e:24:5b:92:dc:1c:26:33:a0:
         00:87:1f:77:4b:0f:65:91:c5:5d:3c:9a:30:46:80:a8:93:5a:
         cb:03:b3:ff:10:d5:77:9b:4f:f8:97:7c:b4:b3:9e:12:3f:be:
         64:ec:3f:94:21:b8:e0:4e:7c:98:44:00:14:27:c2:d6:26:85:
         e5:c7:69:5f:89:0b:7f:5d:b8:6d:e4:84:e0:56:1a:34:4b:d3:
         97:ce:fc:27:47:1b:21:00:6e:08:53:10:ad:58:a4:3b:08:b4:
         8e:38:25:bc:c8:23:49:78:29:19:30:32:a3:25:92:89:55:cf:
         46:64:4c:05:67:12:f8:6a:e1:da:6a:43:1b:1a:1e:37:4d:2c:
         4c:1d:c3:55:1a:0f:99:e8:78:59:8c:26:26:37:ed:f5:ae:b7:
         77:72:cc:c0:6a:42:47:2e:40:81:07:d6:40:25:96:32:09:e0:
         f3:ca:3f:55:40:ab:67:6e:3b:1a:27:32:c1:13:18:f6:e4:8c:
         a2:a8:14:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org