Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa
File:                     dfaa2688-c8ee-3021-915c-efda099beed5.roa (raw, json)
Hash identifier:          KgLJn/vTWgYtQ9QiUsQ9Wc4D3Vnj+kReer14Hc847oc=
Subject key identifier:   56:1D:07:FF:41:4E:48:B5:06:E7:87:FC:97:72:DF:41:D8:16:7D:89
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584558C835D9C550E29BB4D19E80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     31898
IP address blocks:        68.64.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:35:d9:c5:50:e2:9b:b4:d1:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=149f296f-ab64-4ee3-b4fa-f1b7963e3da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:3c:f5:80:e2:bd:f0:1f:6d:5f:45:15:ba:
                    76:68:34:39:eb:58:ae:ae:f8:74:08:a6:86:87:0a:
                    1e:02:d4:be:a4:94:1c:e6:d7:cd:71:43:4c:d5:0d:
                    e6:ea:8b:2b:02:4f:4e:26:18:e8:bf:b7:30:d8:e4:
                    27:0c:03:bb:9c:0f:34:ab:23:c3:cb:62:33:e3:f5:
                    51:af:17:9d:65:be:d5:92:5d:1c:7f:b8:53:70:f1:
                    68:fd:bf:9c:ee:74:fd:11:10:df:ce:71:d0:86:1f:
                    31:c2:86:b1:82:9b:b1:7e:1b:b8:d4:44:14:3f:63:
                    f1:23:a1:8a:ca:2f:7b:9c:19:92:87:62:97:43:1a:
                    70:70:b3:88:01:7b:ad:c2:67:fe:60:89:01:a2:a7:
                    c3:6f:01:2d:31:37:12:51:34:b7:6b:7f:d6:73:c7:
                    e3:84:ec:d8:04:78:93:d0:ee:8e:2e:7f:ec:0c:4b:
                    93:76:4f:f2:cd:0f:34:ef:b0:60:63:7a:9a:3e:f2:
                    6f:d1:d9:22:32:7d:0f:47:19:88:8a:be:ac:b5:45:
                    be:01:93:dc:9d:d5:3a:46:ce:0b:ff:b1:84:0b:5d:
                    3e:b4:a5:43:3d:51:ff:bb:52:62:18:ac:31:f1:19:
                    d4:93:d6:32:34:4f:42:23:2d:17:1e:2e:ea:fd:27:
                    6d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1D:07:FF:41:4E:48:B5:06:E7:87:FC:97:72:DF:41:D8:16:7D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1c:60:15:58:ef:2a:e8:ff:a5:a7:16:90:ee:40:33:f4:2a:
         35:d3:6d:78:1c:fe:f1:24:d2:13:75:88:b9:cb:2b:2b:2c:a7:
         5d:d1:23:ff:cb:60:93:99:ed:f7:31:87:47:b6:2b:bb:95:83:
         f9:cb:b1:f1:73:99:c3:7b:de:5d:c3:9d:d5:ea:ce:a9:a5:1d:
         6a:1c:0a:81:d5:cb:14:20:9c:6b:8d:83:8c:c5:d0:b7:05:73:
         c8:07:cb:8c:8b:1e:70:b4:fe:05:c5:dc:f4:d8:c6:51:da:c9:
         30:d1:8d:1c:91:60:6d:8c:5d:c4:18:5f:7a:f6:25:7d:18:61:
         f4:ad:19:37:58:94:99:42:94:38:9e:dc:e8:c4:34:b6:3b:81:
         93:04:45:2f:8c:ec:17:5e:34:70:4c:fc:a2:ea:b1:e5:6f:c4:
         53:ab:3b:83:35:50:01:09:7d:08:2e:75:0a:ad:5c:f6:5b:e3:
         10:92:d3:73:b4:a9:e3:12:9c:92:f3:1c:e3:c7:b6:f9:37:e8:
         29:1d:a5:df:6e:3d:7d:ab:c8:c0:95:a9:fd:28:e8:b9:60:48:
         81:4c:10:03:21:c8:80:ee:c7:b8:8d:ae:08:33:67:bc:ed:e5:
         3d:13:d8:e5:e7:7c:f8:df:12:88:75:b1:b9:38:b0:58:ea:12:
         b0:20:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:25:52 2024 by rpki-client on console-fra.rpki-client.org