Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09163cd8-61de-3af7-8ccc-df814b411076.roa
File:                     09163cd8-61de-3af7-8ccc-df814b411076.roa (raw, json)
Hash identifier:          cITop9SE+7GdTzCxJkECpP4kBW6lX3Takp9NOWYHbsU=
Subject key identifier:   68:BC:6C:A7:18:70:C9:E8:07:81:1E:16:01:3F:6B:44:F9:20:AF:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584600495EC7FB8A04942369AD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09163cd8-61de-3af7-8ccc-df814b411076.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        68.84.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:5e:c7:fb:8a:04:94:23:69:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=5f816f71-6196-4f52-9252-bcae57f7d362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a8:5b:f6:51:91:b0:96:08:de:9b:a8:5b:40:
                    54:9d:e9:c3:4c:7f:98:66:25:4e:f3:82:d1:97:c6:
                    57:c7:23:26:f6:a1:ea:23:ea:b7:45:8a:24:de:f3:
                    47:a6:3c:3a:7a:d9:23:d7:68:53:36:9f:35:17:13:
                    c4:1d:7d:61:40:df:88:ba:f2:57:af:6f:82:64:05:
                    9f:13:d4:5d:c2:e2:75:ea:fc:f0:b4:a8:c0:50:68:
                    bd:ff:16:27:85:f8:eb:81:8c:87:99:10:07:18:0f:
                    97:84:63:97:fe:bc:d4:ff:ab:3d:23:5a:51:b3:24:
                    89:a7:8a:7e:f0:77:ac:54:60:6e:f7:7a:3a:d6:8b:
                    35:9b:d0:c4:3f:ed:71:2a:b3:19:69:33:25:ab:5c:
                    cf:ea:60:65:90:da:94:1b:b2:78:6e:22:84:bb:c3:
                    93:ba:33:19:8b:97:c3:cb:fe:46:96:b4:05:6f:20:
                    7b:2a:6e:04:7c:4c:fb:62:80:b3:51:d0:10:79:d8:
                    dd:74:a2:fb:66:1a:f1:78:69:cf:ea:32:b2:a1:bb:
                    ae:63:db:69:bf:ca:f4:2c:0d:80:9c:bc:8f:27:91:
                    9c:d1:cb:59:7f:1b:0e:e7:f1:04:a7:47:e9:ce:85:
                    87:ed:3a:b6:3f:25:07:f7:bd:de:a6:7e:73:23:79:
                    d6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BC:6C:A7:18:70:C9:E8:07:81:1E:16:01:3F:6B:44:F9:20:AF:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09163cd8-61de-3af7-8ccc-df814b411076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.84.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e3:64:78:49:4c:83:1a:4e:6f:d6:47:33:22:cc:f7:b0:c2:
         d4:2b:1f:2b:39:09:13:9e:a0:92:26:16:40:56:99:c9:23:e0:
         68:de:8b:f2:ff:3f:51:6d:6c:28:34:bd:7f:73:44:43:5c:f7:
         1d:a7:1a:cc:42:67:74:ba:b3:bd:45:74:39:f9:57:d7:19:cd:
         ab:bf:01:aa:f2:42:b7:ac:1e:76:9a:a8:65:7a:aa:7a:ee:79:
         33:f9:96:2a:e9:77:f0:d2:f2:b1:1e:7b:db:97:3a:c8:15:94:
         b3:3a:22:f7:a1:1f:db:c5:cb:97:8d:71:06:f8:fe:51:9f:ce:
         ee:e8:db:24:ab:1c:1e:0b:b3:f9:9f:cd:b7:bc:c8:f0:c8:76:
         9c:72:84:67:a2:4c:26:88:97:f0:85:ba:a1:67:9b:fe:42:2d:
         a3:6e:dd:e4:60:fb:41:97:81:91:57:de:48:74:53:40:b6:fc:
         2f:14:04:f4:bf:17:d4:3b:78:30:ee:52:15:e6:4a:df:3e:5d:
         32:5c:80:3d:55:b4:df:8c:6b:72:15:5f:91:f1:55:99:e5:42:
         df:35:77:7e:1c:7b:df:ed:7e:f4:87:26:84:de:1d:c9:de:07:
         24:b1:63:66:cb:b2:c9:02:5b:23:77:7f:5e:e1:63:0d:81:79:
         5e:ad:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:28:16 2024 by rpki-client on console-ams.rpki-client.org