Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17e63b6f-b0fb-36e0-9d78-ce07d0919831.roa
File:                     17e63b6f-b0fb-36e0-9d78-ce07d0919831.roa (raw, json)
Hash identifier:          QxTeNg6F1L9QwiXer1A+LnXGeSRVFK2Bred/uzHYAvU=
Subject key identifier:   90:E9:3D:20:D2:C5:C2:A2:5D:B4:B6:2A:CD:69:98:B2:04:A1:A8:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584600495DB1606737F2747E4D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17e63b6f-b0fb-36e0-9d78-ce07d0919831.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        68.59.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:5d:b1:60:67:37:f2:74:7e:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=d8569b28-a4da-4157-b5b2-4fed744b84f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ab:c4:3b:87:6c:32:10:ea:ce:c6:0d:54:db:
                    c8:02:fd:70:49:9b:36:d8:37:00:24:f8:04:76:60:
                    46:0d:00:ad:bd:0a:fa:9e:19:08:20:75:0a:c7:5f:
                    2b:87:69:d3:1e:75:56:5a:de:fc:df:0a:2d:02:36:
                    84:a8:aa:ab:e8:21:ff:db:de:79:d4:50:23:7e:42:
                    bb:a1:b7:e6:e3:69:b6:d7:a9:81:b2:2a:2c:a7:af:
                    be:cb:ee:aa:1c:39:b3:4a:29:67:a9:94:bb:a6:66:
                    aa:ad:2d:57:80:65:ea:37:63:11:5a:40:1c:7c:89:
                    53:8a:04:a8:d4:36:a7:9b:73:84:e3:49:a1:93:d7:
                    ad:bd:f5:ea:a4:85:33:12:e6:f5:fb:24:bb:f8:13:
                    20:3a:75:f8:9c:3c:35:3c:fa:a4:a7:68:9f:d0:0c:
                    b1:a1:85:78:ed:ea:5e:9e:a7:64:74:22:47:8c:bf:
                    54:e3:a1:61:1c:b2:cc:0a:96:7b:ec:28:75:49:f0:
                    64:88:12:37:24:e1:a1:1c:9b:37:22:38:3c:0a:af:
                    fd:40:54:e2:86:c7:2d:be:40:37:91:65:08:00:28:
                    4e:ed:a4:4c:ba:49:fc:a9:f6:28:f1:00:53:b5:fa:
                    17:b9:18:39:41:fe:66:f7:c9:3a:73:e7:62:05:39:
                    54:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E9:3D:20:D2:C5:C2:A2:5D:B4:B6:2A:CD:69:98:B2:04:A1:A8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17e63b6f-b0fb-36e0-9d78-ce07d0919831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.59.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:86:af:2a:e6:20:c5:2e:2f:fa:e8:48:ca:65:89:58:ea:04:
         67:46:36:6a:a2:fd:47:d2:02:ed:da:d9:9f:42:70:6e:9b:18:
         70:86:5f:bc:60:58:7b:96:01:e1:90:34:a2:e7:09:d2:d4:d4:
         44:4c:bd:17:64:79:77:d4:52:57:73:13:84:0d:4b:03:c9:bd:
         7f:d9:18:35:d4:25:89:bd:f5:92:f1:4d:4c:2b:f0:0a:80:8c:
         29:cd:86:38:13:d9:ab:71:37:ea:8d:75:07:a3:a1:7a:ee:ee:
         12:72:9b:26:a8:12:fb:65:b9:2d:e8:98:04:93:8a:55:f2:75:
         d8:29:e3:3c:34:41:f2:8e:05:ee:0f:f4:f5:51:88:c3:70:cb:
         9e:93:6e:95:72:a1:92:55:57:b3:9c:c3:e5:11:75:39:ba:56:
         94:71:0e:73:de:98:14:ce:5a:fa:bf:2c:22:3b:2f:63:07:b8:
         39:fc:1e:7e:44:df:bf:be:e2:aa:e8:40:69:e5:9f:be:95:2e:
         cd:97:28:33:ac:8c:cd:e5:c3:09:e8:ab:86:a7:2b:24:40:14:
         f9:35:21:88:f5:23:1f:4c:04:46:ee:76:8f:74:16:28:26:fb:
         76:0b:c8:28:cc:13:b8:46:ce:1e:a4:4f:8d:9c:e9:59:29:06:
         a9:a9:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:39:59 2024 by rpki-client on console-fra.rpki-client.org