Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa
File:                     d3144be4-dbb0-30da-85fc-0254be5834d1.roa (raw, json)
Hash identifier:          9nhr9co/BUvfmAQwG9tqucrrb4QUaMo3kVOdqAmWmqY=
Subject key identifier:   D4:B4:86:FC:9E:FD:54:50:56:B1:CD:4C:06:E9:2F:8F:39:F0:97:23
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285845BA7E354E569ED143CDB936E0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     31898
IP address blocks:        68.64.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:35:4e:56:9e:d1:43:cd:b9:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=3be55998-2f22-4e1f-8245-1929d0e00cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:76:7a:ef:1d:6f:26:5c:1e:5c:a9:8e:e3:bf:
                    e6:c0:72:ef:8d:26:04:ee:d7:28:fe:3a:b7:f3:a6:
                    b2:e5:9e:aa:52:77:80:17:ee:2e:f3:7f:bc:9c:ae:
                    e7:f1:3a:84:d7:69:9e:59:7e:6d:8a:28:0b:db:8e:
                    0d:e8:5a:37:2b:c0:13:e4:eb:d4:f2:b7:f0:4d:2e:
                    27:35:cb:42:c5:f3:19:3b:80:25:31:fe:4c:9e:90:
                    f4:23:c0:bb:b4:7c:4a:21:b2:c7:0b:79:41:20:28:
                    c3:51:73:ee:7b:a4:8d:a9:41:f2:84:e0:3d:d0:5f:
                    b9:b1:29:9c:67:59:03:29:0e:df:79:91:0d:0b:9a:
                    e7:25:52:87:f8:bc:76:7e:45:e6:41:7e:db:7b:d4:
                    dd:fd:3f:f6:58:10:2e:c8:81:15:67:89:9e:ef:2f:
                    da:d2:ca:ab:90:c1:f1:f3:54:60:7b:f2:85:d1:c9:
                    d7:b4:4d:73:07:bc:d5:fa:3d:90:32:47:b8:05:c1:
                    0a:5f:87:84:50:51:71:57:75:8f:aa:93:b7:b9:91:
                    84:e9:6e:7c:37:6d:69:79:3e:27:d9:0b:64:15:d0:
                    92:cc:ad:62:90:d9:bf:27:17:19:a3:7b:e5:58:4e:
                    39:b9:3f:dc:3e:fa:40:63:ab:e5:d3:79:03:c0:a5:
                    a6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B4:86:FC:9E:FD:54:50:56:B1:CD:4C:06:E9:2F:8F:39:F0:97:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:d7:fe:55:ff:68:d3:36:1a:a1:7e:18:69:b5:50:17:45:
         ef:89:51:c4:9b:fe:15:64:b3:e9:5b:c5:99:0e:a2:24:56:68:
         af:21:f3:05:64:7b:0a:36:42:d2:62:94:24:16:07:67:8c:19:
         7d:3e:6f:13:7d:e4:b0:88:ac:88:c6:15:1b:39:ea:e5:ba:23:
         ff:c8:ba:3a:8a:ec:8c:c9:24:f8:7d:75:fb:cc:06:1f:15:51:
         0b:f6:f5:eb:d6:67:7a:0e:f6:2a:69:8e:f0:25:96:77:21:1a:
         ea:6c:8d:f9:33:e7:38:8d:c1:bf:61:0e:b7:83:7d:6b:4d:3e:
         d6:68:5a:5c:71:63:2d:d2:af:fa:1f:4b:ec:ff:1f:96:6b:ab:
         ce:b3:3b:8c:6f:ec:e6:a0:da:10:7d:c9:01:2a:44:fa:d6:12:
         4e:ba:78:5b:5e:8e:f7:87:71:db:1f:94:29:d9:38:22:c8:5d:
         58:4e:54:61:c7:08:6e:45:a4:4f:00:46:fc:2d:5c:99:5c:ac:
         35:01:11:8d:a0:c7:64:71:85:8b:44:07:ea:3a:e1:34:f9:23:
         43:37:0f:44:83:00:69:9f:c5:57:0e:8e:3a:f3:53:6c:2f:28:
         d6:cd:0f:21:b5:b4:38:b7:3f:e3:25:b6:53:f7:99:70:27:01:
         c5:36:d0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:28:50 2024 by rpki-client on console-fra.rpki-client.org