Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
File:                     2d398258-1b86-35d8-933f-e3df7eab5377.roa (raw, json)
Hash identifier:          zpOGKZC4sZnhv/MaTuky5Q56AYbs5bOdvla2AP/sxlM=
Subject key identifier:   6C:98:D8:57:84:1F:F3:10:37:62:4A:56:9A:A0:D9:A8:7A:D4:FE:18
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F43285846B673F1959A13C492EDEFF500
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
Signing time:             Tue 30 Jul 2024 19:03:45 +0000
ROA not before:           Tue 30 Jul 2024 19:03:45 +0000
ROA not after:            Mon 28 Oct 2024 19:03:45 +0000
asID:                     396239
IP address blocks:        68.69.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b6:73:f1:95:9a:13:c4:92:ed:ef:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: Jul 30 19:03:45 2024 GMT
            Not After : Oct 28 19:03:45 2024 GMT
        Subject: CN=54b949bc-14b2-407d-b8f2-54f19a4f6317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:aa:77:32:59:58:fa:4a:51:a1:d0:73:ef:
                    7e:ca:da:56:11:2a:80:d5:f5:4b:bd:9c:19:38:82:
                    1b:b7:30:0f:ae:c9:7d:ae:e1:2a:b0:31:64:a0:94:
                    10:24:b4:b0:3c:1f:45:56:cc:3a:1a:30:06:80:fa:
                    7c:3e:93:79:93:7c:c5:5d:59:2d:79:55:25:02:24:
                    80:03:d0:6e:6a:0c:de:1f:ab:81:16:ba:e7:05:09:
                    34:a4:4f:61:4d:9f:d5:fe:87:8f:3a:3d:9c:dd:5e:
                    86:25:38:71:c9:a6:5e:eb:ac:36:6b:b3:c1:c7:ff:
                    a1:11:98:73:90:60:d0:80:90:3e:ab:e6:d9:ca:53:
                    43:2d:e8:9f:7d:1b:72:87:13:91:7d:c3:29:51:e9:
                    46:00:3f:5c:7a:62:91:23:30:97:e7:ea:61:c8:b8:
                    37:9e:02:02:c3:a3:78:3b:1e:55:ab:e3:fd:07:7c:
                    47:84:11:ef:c2:75:66:8e:83:42:94:9a:9a:47:43:
                    1e:c7:98:22:f2:1e:cb:9d:c7:34:57:a3:e5:1c:a3:
                    40:d4:ec:8e:eb:3c:dd:f5:c2:d9:08:74:51:4f:47:
                    14:0a:23:f3:5b:ac:21:06:8f:1d:03:d8:6b:86:91:
                    df:cb:d6:39:47:66:1f:48:e4:24:2b:dc:0d:29:b4:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:98:D8:57:84:1F:F3:10:37:62:4A:56:9A:A0:D9:A8:7A:D4:FE:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:71:c6:4c:54:b0:14:6f:39:11:a1:b1:8c:a1:3d:35:68:b5:
         23:33:f0:13:f5:1a:1a:aa:f4:ad:86:28:95:39:03:59:f0:04:
         1d:96:7d:f8:01:22:1b:9c:f8:5b:a7:13:ac:be:34:3a:7a:95:
         84:31:72:13:41:eb:06:cc:3f:88:88:90:7e:27:ff:07:92:68:
         0a:f3:ee:a3:cd:46:ec:52:97:6c:62:87:40:5e:2e:cc:73:ee:
         7c:5f:6b:b2:5c:d2:55:d9:cc:b7:ff:9a:1e:e2:fb:45:6d:9b:
         97:ad:70:af:f8:8a:15:c3:72:19:bc:30:2e:fb:db:22:92:7c:
         cc:4d:e1:b2:06:b8:04:2e:83:75:76:ea:a0:5d:07:23:77:c1:
         1c:d8:c9:e7:58:92:f4:b5:32:76:e0:72:56:38:8f:97:00:86:
         4c:6a:43:92:82:49:2e:bb:7a:00:3c:15:d3:24:34:c4:05:17:
         7d:c0:54:a5:98:6f:b1:f7:56:76:c3:a3:97:a6:4c:66:1d:9f:
         81:89:af:6e:00:21:23:a9:84:26:73:73:a7:e6:74:a6:06:13:
         e4:87:a6:ce:31:da:8c:91:f8:fa:2a:fa:3c:5a:9a:9f:b2:46:
         db:f7:69:02:da:d5:b2:10:44:23:3a:a5:fa:78:80:26:85:83:
         0b:f4:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:18:19 2024 by rpki-client on console-ams.rpki-client.org