Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/20b441c7-8759-3fff-8d9a-456dc9b8a427.roa
File:                     20b441c7-8759-3fff-8d9a-456dc9b8a427.roa (raw, json)
Hash identifier:          7Gt000P1qYRZvIPTb5P48HhGJXMOXXB1D07ClPPXojk=
Subject key identifier:   51:DE:9A:BD:1F:72:AF:8A:E5:1B:10:05:FC:C6:1F:A3:82:C1:0E:00
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F43285844A4D4D463B04D7C28F5455600
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/20b441c7-8759-3fff-8d9a-456dc9b8a427.roa
Signing time:             Tue 23 Jan 2024 02:00:25 +0000
ROA not before:           Tue 23 Jan 2024 02:00:25 +0000
ROA not after:            Mon 22 Apr 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        192.184.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a4:d4:d4:63:b0:4d:7c:28:f5:45:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Jan 23 02:00:25 2024 GMT
            Not After : Apr 22 01:00:25 2024 GMT
        Subject: CN=11495c51-1942-49e5-88c3-159112dde216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:62:de:05:8e:08:00:6e:e0:9f:c6:5c:d8:
                    bd:97:8c:3e:ab:17:26:0e:59:bf:c5:44:be:2f:0c:
                    9e:87:16:b0:ff:fe:7b:35:0d:5a:00:1d:70:3e:a0:
                    86:b1:c0:83:24:9d:09:66:bf:10:91:76:42:d7:0e:
                    79:48:96:1a:24:8c:2b:32:70:b3:a6:47:19:fd:3b:
                    1f:78:08:c1:b4:66:1a:55:45:c3:07:dc:de:c8:45:
                    d5:84:f0:fb:1f:f1:5a:8c:1a:73:09:3d:07:bc:6c:
                    3a:73:3c:05:9f:f1:61:e3:50:61:34:f8:e1:0c:78:
                    fc:a3:de:ec:74:27:bf:d8:21:c0:2d:6a:e8:81:bc:
                    c3:01:5f:77:b5:6d:b0:48:de:5b:45:e4:ae:12:3f:
                    22:ca:25:6a:13:d1:b1:01:13:9e:e2:02:84:54:c7:
                    7f:d9:24:16:99:3f:5e:9d:8e:84:c1:d7:e0:25:03:
                    f2:dd:4d:10:76:95:99:81:43:5c:83:c1:eb:bf:79:
                    49:2c:59:36:0f:18:82:7d:42:fd:eb:c7:e9:b3:19:
                    03:d3:29:bc:d7:94:1a:19:4b:45:82:bf:95:0c:fa:
                    9e:5c:d0:f6:cd:04:e4:fb:c1:b4:3e:21:26:e3:86:
                    9a:46:41:22:74:ff:82:ca:f0:50:3b:90:e3:cc:f1:
                    d0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DE:9A:BD:1F:72:AF:8A:E5:1B:10:05:FC:C6:1F:A3:82:C1:0E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/20b441c7-8759-3fff-8d9a-456dc9b8a427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:11:f3:a0:6a:6a:6f:31:cb:79:30:90:e6:f5:a0:f9:20:19:
         51:fb:e5:62:8e:2b:8b:97:ce:90:6a:e7:06:26:13:e1:9d:73:
         40:5e:8b:e9:27:df:7f:d0:a8:44:0c:59:25:d2:6f:36:5f:0c:
         e9:9e:6a:f6:4f:bc:8b:48:d0:a3:2a:85:e1:c9:27:6b:64:f1:
         bb:52:8f:34:ca:23:cc:cf:1d:d8:52:0a:16:31:3c:88:5d:a7:
         fa:0f:61:ae:55:a2:d2:da:95:a6:00:58:11:c4:da:79:6c:13:
         bf:f0:ca:d0:d7:7e:9c:85:39:be:bc:49:08:b7:6e:89:c8:53:
         97:20:4f:35:5a:b8:78:7f:d9:92:df:02:f0:ca:39:4d:1c:ec:
         a8:ac:ab:07:34:c7:96:4e:80:d7:18:6e:39:22:bd:ae:3f:87:
         77:e5:6d:f4:fc:cc:2b:2d:d2:0f:cb:2b:e4:a1:2f:00:c5:e3:
         01:db:8f:f2:ba:82:8d:00:01:47:69:24:09:13:ad:78:5b:93:
         59:69:30:a7:8d:f7:d1:b3:d2:32:cc:70:c9:59:fc:06:42:d1:
         a7:44:d4:d7:68:d3:42:ba:74:a8:4e:c6:b2:20:5e:64:98:a8:
         36:58:15:f6:c7:ce:0a:dd:c5:21:08:eb:da:34:d8:2e:f5:e2:
         fe:ec:0e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:00:43 2024 by rpki-client on console-fra.rpki-client.org