Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c68798de-a500-31e8-955f-1b62b1d2621b.roa
File:                     c68798de-a500-31e8-955f-1b62b1d2621b.roa (raw, json)
Hash identifier:          A4B/rs8d9xIEvIWOtWO2JHLHRXF397jt9CQt59LXkQg=
Subject key identifier:   D5:49:A4:30:6D:91:34:57:E1:A1:AA:48:BF:01:D4:0D:46:6F:66:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049ACADBAB3F97D8BDFD200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c68798de-a500-31e8-955f-1b62b1d2621b.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7725
IP address blocks:        68.63.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:ac:ad:ba:b3:f9:7d:8b:df:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=04497c3c-16a1-4a64-ad50-0eead50d4e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:39:19:22:52:aa:c9:aa:b1:e4:d8:0a:13:73:
                    a2:97:0d:ca:5d:c4:2b:d0:8e:8d:1c:20:01:88:83:
                    38:ca:d5:f8:cb:8d:33:ea:4a:2f:d3:c2:fa:fc:5e:
                    e5:27:fe:69:fc:89:cf:df:37:59:28:aa:4b:ad:13:
                    08:ec:62:d5:02:a9:ea:2e:bf:d8:e0:01:40:bb:1f:
                    a0:65:33:4c:48:a3:07:fe:dd:da:aa:33:43:ae:ee:
                    e4:09:b3:6f:87:94:5a:51:db:8b:da:57:06:84:77:
                    d6:15:c4:dc:ec:0f:0f:95:17:14:50:6b:d3:fc:05:
                    c6:18:3f:c9:ce:a5:54:f0:fb:fc:37:de:29:a4:db:
                    a7:96:04:f5:57:b3:6a:b6:42:8f:b9:3d:44:1e:eb:
                    8f:e6:82:c3:65:a4:ee:26:94:f8:9b:44:2f:9b:bc:
                    22:d8:22:fc:68:df:de:ec:c2:f4:9b:d1:58:3e:61:
                    db:76:52:2d:38:03:b0:b5:d0:91:72:60:e7:df:ee:
                    d1:cc:29:21:74:ce:fb:c4:16:46:1a:f4:3a:72:2e:
                    e0:a9:cc:00:43:6e:10:7a:c0:93:33:5f:be:5a:a0:
                    16:75:22:a4:1b:78:70:e8:6d:cb:a7:77:34:8e:5e:
                    22:98:1f:b9:f5:29:fe:d7:61:fc:80:4b:25:a7:91:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:49:A4:30:6D:91:34:57:E1:A1:AA:48:BF:01:D4:0D:46:6F:66:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c68798de-a500-31e8-955f-1b62b1d2621b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.63.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:26:6f:72:c8:c9:e6:0d:03:fa:76:fc:53:2e:ec:06:c0:9e:
         b0:18:28:bf:a8:e7:ec:31:70:fb:2c:b8:8b:2b:01:50:c9:74:
         55:dc:cf:9a:cf:7b:87:c1:65:1d:22:8f:06:d4:97:29:34:70:
         9f:77:40:ba:8f:09:33:93:b6:83:c3:27:a8:40:df:9d:31:d5:
         10:f9:49:08:19:b4:ec:56:69:5c:0a:e9:83:61:c5:4f:db:1a:
         d2:c2:73:be:ca:5d:ea:3c:41:af:a3:d2:26:ba:61:f6:c5:00:
         a7:03:da:ec:76:e6:71:03:83:31:09:b8:a9:4e:e5:70:be:26:
         2d:35:fc:d6:fa:f1:3d:e0:77:ee:e8:1c:3a:e8:19:d4:8e:de:
         04:d1:e9:9f:1a:db:bd:1d:ad:48:28:88:cd:03:9d:4c:e7:10:
         73:67:fa:b2:f9:65:a8:47:82:c5:7b:20:53:af:11:b6:6e:44:
         e1:e3:b0:df:8d:86:e9:0b:85:f8:c0:7b:0a:18:59:f0:e8:19:
         9e:40:ab:7d:af:1c:52:f3:1e:ca:28:de:c8:13:ad:c2:a4:ea:
         fc:18:ba:ab:d3:93:e2:63:bb:10:30:3a:b7:a7:37:03:a9:0e:
         6d:21:dd:64:51:d2:bf:d1:2d:33:ea:54:36:bf:05:34:cd:40:
         be:47:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:03:57 2024 by rpki-client on console-ams.rpki-client.org