Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04735cee-a853-325a-9efa-cdc7c3e1c965.roa
File:                     04735cee-a853-325a-9efa-cdc7c3e1c965.roa (raw, json)
Hash identifier:          3I2QpCVfLZeIDlnfJU6iNXQbiiW3aH94qbQFlXxMdY0=
Subject key identifier:   20:73:2C:39:1F:4F:10:FD:85:E0:C1:F8:2E:EA:2B:67:64:82:E6:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BDA129FF909AC635CDFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04735cee-a853-325a-9efa-cdc7c3e1c965.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        68.45.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:da:12:9f:f9:09:ac:63:5c:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ff4d5a56-5477-4570-8cb1-1ba931f357c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:aa:2e:7d:6d:cc:a9:c1:8d:ca:d0:80:ab:38:
                    43:ae:78:29:00:9d:b6:8d:4e:97:3b:34:43:66:17:
                    3a:ba:67:b4:e3:3b:16:e4:a9:7d:c0:06:65:2d:6a:
                    a5:00:0a:db:66:7e:00:3e:86:d8:af:c8:fd:62:81:
                    ce:6e:56:8b:3e:47:93:af:54:ae:f5:4b:d9:33:a2:
                    9e:1b:fe:88:e1:92:12:c6:bd:49:95:20:43:9b:af:
                    04:06:25:89:b5:fd:ff:39:4b:39:e7:52:00:dd:97:
                    eb:a6:79:49:56:a6:22:b0:82:02:e8:40:1c:7d:dc:
                    5b:7d:16:34:21:68:df:a7:19:d0:d0:cd:05:10:89:
                    6d:c4:de:c0:9e:76:1f:b9:9c:6a:27:a5:a0:6e:a7:
                    7b:0c:05:89:e6:03:9a:c4:ea:a1:0e:19:ce:15:fd:
                    cd:51:84:07:bc:08:1a:88:fd:70:37:6a:69:c7:d2:
                    a6:c3:bd:0a:97:53:3f:fb:ef:ff:1d:1a:52:ed:b0:
                    f8:96:a6:d2:15:da:4a:19:e8:28:cf:ca:04:3e:0c:
                    af:56:92:ca:ab:d3:e2:0d:70:fa:8a:e9:5d:e8:5f:
                    45:70:ed:47:2a:11:33:55:e4:72:56:b3:ab:8d:76:
                    a8:2e:7c:ea:9b:26:d7:73:8e:48:fd:b6:ba:0f:ee:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:73:2C:39:1F:4F:10:FD:85:E0:C1:F8:2E:EA:2B:67:64:82:E6:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04735cee-a853-325a-9efa-cdc7c3e1c965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.45.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:2b:77:2e:ed:f9:44:c6:cd:52:d6:5b:01:92:7d:2f:01:4a:
         12:07:12:5a:8e:c3:01:52:32:01:4b:56:6c:cf:b7:9c:b2:9b:
         4a:4a:df:9b:52:0a:1b:d8:c4:c0:f0:08:07:dd:7f:ca:f9:2b:
         ba:60:34:4c:4d:8f:d6:a1:e1:de:13:77:c5:e8:57:76:b3:80:
         b6:85:e2:f8:24:61:87:7e:09:2f:1e:fb:6a:ca:1b:4b:2b:17:
         de:23:ee:79:d4:7b:8b:a6:e1:96:0c:19:e1:08:51:ca:36:d1:
         aa:67:89:a1:54:7d:07:ae:64:5e:da:b2:ca:eb:9f:c1:c5:6a:
         53:6d:a0:35:ad:44:90:b1:6b:f5:78:88:ef:a3:61:d6:88:22:
         b7:50:79:28:c4:07:bf:f7:48:71:c2:ed:23:45:ed:d0:08:19:
         16:ab:28:41:37:6a:ae:30:45:a9:99:42:cd:c9:3a:83:34:6f:
         fa:dc:1a:71:30:fb:6a:7a:10:00:3a:05:39:87:db:20:f4:a1:
         0c:98:88:84:b8:89:6e:74:3c:d5:0f:7c:de:fd:73:71:75:bb:
         55:f3:16:dd:05:88:92:6f:8a:5b:c5:0d:5d:17:81:6f:74:1d:
         fe:f0:b5:9c:c9:23:ba:93:1c:0a:3a:ac:37:9a:e3:1d:50:4e:
         30:4c:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:33:18 2024 by rpki-client on console-fra.rpki-client.org