Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5faa47f1-d0bf-39bd-b9a0-ef0661662036.roa
File:                     5faa47f1-d0bf-39bd-b9a0-ef0661662036.roa (raw, json)
Hash identifier:          DJJDMuFc0DinOUAI5f850zk3zwWUC+XBL5uyYEAiCWg=
Subject key identifier:   B9:00:7A:AC:1A:27:74:D0:F9:19:31:DB:68:FD:AF:94:31:1A:24:46
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F432858452D82937787DA0DA29CACFC00
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5faa47f1-d0bf-39bd-b9a0-ef0661662036.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     14477
IP address blocks:        68.70.53.0/24 maxlen: 24
                          68.70.52.0/24 maxlen: 24
                          68.70.55.0/24 maxlen: 24
                          68.70.54.0/24 maxlen: 24
                          68.70.60.0/24 maxlen: 24
                          68.70.57.0/24 maxlen: 24
                          68.70.62.0/24 maxlen: 24
                          68.70.61.0/24 maxlen: 24
                          68.70.63.0/24 maxlen: 24
                          68.70.48.0/24 maxlen: 24
                          68.70.51.0/24 maxlen: 24
                          68.70.50.0/24 maxlen: 24
                          68.70.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:93:77:87:da:0d:a2:9c:ac:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=01ba7bac-064e-4ce3-b223-efa2f18031aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:c6:be:a5:48:16:9b:83:0b:1d:0e:5b:14:
                    4a:ff:c9:5b:28:93:67:d2:87:9a:48:35:62:56:08:
                    d1:bf:2c:55:e9:bc:7e:07:55:7b:24:6c:bd:6c:79:
                    4a:25:85:11:f6:d0:3f:fa:94:cb:3f:28:6a:fe:d3:
                    78:00:45:67:80:eb:50:6d:e3:2e:df:f8:8d:ca:46:
                    21:2a:ba:c8:bc:0d:42:5f:e4:fa:38:64:7a:83:24:
                    fb:cf:61:00:83:80:55:78:72:2c:b0:45:ae:f3:11:
                    84:7d:82:48:d0:e6:f8:5f:1b:38:ea:5b:f3:68:db:
                    a0:9d:3f:18:5f:68:1d:27:08:22:df:5d:ec:6d:c4:
                    e0:eb:ea:17:de:9e:49:93:32:36:54:4f:29:35:d4:
                    2f:c7:07:22:2b:60:ee:f2:98:1c:17:ab:59:ba:7d:
                    60:fe:db:c2:dd:4f:cc:44:40:1b:1a:e6:fd:71:fd:
                    f7:e1:1e:2b:dc:d7:86:d0:be:88:fa:ff:fe:b3:1d:
                    40:7f:7e:54:36:90:6a:2d:f1:01:db:31:51:54:3f:
                    43:85:aa:61:1b:00:46:13:d4:03:62:ff:08:cf:3f:
                    9a:ba:af:b4:11:f6:c9:4d:fc:32:9b:c4:51:e0:48:
                    e9:8b:a4:a5:35:c4:79:6a:58:0a:96:7c:11:4c:33:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:00:7A:AC:1A:27:74:D0:F9:19:31:DB:68:FD:AF:94:31:1A:24:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5faa47f1-d0bf-39bd-b9a0-ef0661662036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.48.0/21
                  68.70.57.0/24
                  68.70.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:97:63:17:57:96:c6:d6:c6:8e:05:26:f5:38:b5:75:bf:f9:
         57:81:64:e8:8e:b8:18:30:9a:06:0d:65:bf:32:cd:3a:c0:49:
         91:35:c9:54:20:35:02:8b:d5:73:c5:89:d5:4e:60:23:e4:5f:
         4c:c5:cd:33:9f:cb:75:b3:7e:03:f7:4d:32:59:50:75:6f:1e:
         54:0f:90:3a:50:14:4e:f7:c6:16:28:17:dc:e3:54:36:1a:76:
         cd:e4:3f:63:4b:5f:92:5c:1c:d8:64:4e:25:8f:fe:c4:db:bb:
         dd:38:84:7d:a7:36:7a:0b:cb:0d:ec:3d:7d:10:bb:ec:12:fe:
         45:1e:30:e0:b9:0a:6b:d1:61:7d:f5:ed:a6:b4:c6:7b:fd:2d:
         d6:72:47:d3:f7:12:c7:61:2e:95:92:d5:37:9e:94:d1:92:16:
         1b:e6:b4:49:cd:59:66:9f:ed:61:24:e1:d2:a9:59:42:80:16:
         5f:17:ce:29:f6:5e:04:d9:c3:8a:84:d4:c4:dd:2a:b6:2d:64:
         52:01:10:2c:5b:13:d9:8d:b0:5c:84:3e:dc:a7:af:d8:ed:eb:
         34:40:e9:4e:bf:0f:b5:ed:f2:02:8c:45:48:45:56:03:3c:dd:
         7f:22:88:e0:cb:a1:12:48:0a:a8:9d:cf:8e:2c:12:ca:fb:7b:
         39:57:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:55:13 2024 by rpki-client on console-ams.rpki-client.org