Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa
File:                     c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa (raw, json)
Hash identifier:          jTwq/YrdsiCPE6uja+7tPYpsu//4QhEnu8RmnbMUUdM=
Subject key identifier:   D2:B0:45:00:DB:2F:42:8C:D9:3D:75:4A:8F:B3:19:65:7B:DD:9B:73
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285847C1DF49BC6CFEF05D4DEF5538
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     30058
IP address blocks:        198.16.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:49:bc:6c:fe:f0:5d:4d:ef:55:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=727a3448-29a7-4bb7-96f7-c183bee33464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:46:ce:61:e4:79:5f:47:98:2e:90:72:00:
                    c5:ed:a8:c8:d9:16:54:d3:15:6a:ea:ce:59:17:2f:
                    f0:93:18:af:d7:f6:b7:c5:e2:91:01:32:2b:61:57:
                    e8:3c:a2:10:44:6f:a6:84:76:da:14:f1:3b:d0:50:
                    be:73:0c:c7:aa:47:f8:8f:91:d8:f3:05:9d:60:ba:
                    64:bc:88:b5:47:99:f1:fd:e0:90:49:3b:56:47:b2:
                    d1:78:c0:5b:82:13:7f:62:5b:96:62:5b:d0:cf:e8:
                    3d:6d:28:50:45:3b:b8:f6:b6:bb:dc:ae:11:ef:0d:
                    62:bf:90:04:87:31:67:e4:f3:f6:88:80:8a:68:d5:
                    57:28:eb:89:1c:ae:c5:55:aa:9c:89:13:5c:6a:05:
                    88:d4:18:e8:42:d7:7c:37:e5:e5:c5:dd:da:c6:7a:
                    cf:08:b1:a5:1e:23:89:99:c3:86:be:db:61:f9:be:
                    a1:5c:7d:7c:39:50:3c:7e:a8:92:6e:0d:cb:e3:68:
                    52:9c:d2:93:d3:64:2a:34:2c:6d:2b:6d:6e:dc:c1:
                    c0:5d:f4:06:d7:a2:23:ae:2a:0f:d6:ae:d3:79:40:
                    8c:f9:54:9c:b1:89:49:3c:2c:14:4b:67:6e:32:72:
                    ec:2b:23:74:bd:f8:11:91:4a:31:ad:e4:73:2f:89:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B0:45:00:DB:2F:42:8C:D9:3D:75:4A:8F:B3:19:65:7B:DD:9B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.16.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e6:a4:15:6f:74:24:94:df:88:32:4a:84:ac:7d:2a:e6:a3:
         b1:df:11:ac:08:1d:ee:95:6b:c7:5b:f4:4c:d6:a7:ae:26:05:
         23:8d:df:19:90:8f:0a:e6:24:cf:57:05:5b:e0:a9:bb:5b:11:
         d1:b1:fb:f3:c3:60:d4:66:d9:1f:fa:f7:c7:7f:5e:a7:0e:fe:
         59:42:f4:49:ac:ea:bf:f0:d4:75:52:27:f0:70:35:f1:21:5e:
         3a:76:04:22:16:0f:d8:b2:48:f2:90:2a:fc:d3:53:55:8a:55:
         54:6c:6a:6a:07:b4:e8:cb:1c:d7:4e:5f:7d:85:ed:31:bf:4b:
         4c:94:21:24:74:b8:07:ba:b5:36:b2:99:e8:cc:ac:5e:3e:55:
         8f:09:9a:53:3e:d2:83:47:f0:84:a0:4b:f6:27:ab:bd:51:24:
         de:1a:e5:d3:85:29:ed:5a:e8:19:5c:e2:2a:87:0b:92:79:33:
         28:06:cf:83:2f:c0:c1:c0:38:32:0c:91:03:77:93:68:4b:21:
         b7:c5:8f:a9:c3:aa:b6:5b:b5:fb:e3:8d:ba:66:ca:26:e1:a8:
         ba:7d:23:36:70:20:a8:1c:0e:d1:0d:b1:59:3e:d3:87:3f:70:
         a5:a4:79:45:4f:8d:cd:39:27:b5:01:06:01:de:4b:23:5b:72:
         cd:56:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:23 2024 by rpki-client on console-fra.rpki-client.org