Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/069621c4-b0bb-3796-b799-8669a82008c8.roa
File:                     069621c4-b0bb-3796-b799-8669a82008c8.roa (raw, json)
Hash identifier:          dnS7n284mdtx+pGfkyS6XvzJE0PviNThExO6sMmXHlU=
Subject key identifier:   12:AF:D6:84:C5:FD:AB:C3:9A:6C:77:CF:AA:AA:E8:82:56:13:7C:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DDFD1D24FC82320DEBF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/069621c4-b0bb-3796-b799-8669a82008c8.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        68.83.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:df:d1:d2:4f:c8:23:20:de:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=0e41745c-bac3-4730-b45f-ff9075375299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:92:79:15:d4:8a:95:aa:ed:68:0f:2b:4e:
                    c4:f0:ee:c0:0c:7e:fd:b1:b3:a2:3d:69:2c:20:d4:
                    f2:1a:01:80:40:77:d3:8b:20:b9:d9:df:25:f5:32:
                    5a:83:a1:e4:df:09:32:41:46:77:52:47:75:dc:aa:
                    2d:91:9c:fb:6d:5f:0d:c1:53:e8:31:39:45:f7:2b:
                    af:84:88:29:79:99:9b:ca:b3:af:49:2f:59:d5:ea:
                    f4:3d:32:07:40:08:f3:77:7f:c1:6b:fb:bd:fd:7a:
                    c4:21:4f:42:7b:12:43:b0:5a:9d:ad:ea:f9:9e:7f:
                    c0:f8:1a:1a:e0:05:c4:a3:2f:71:6b:10:52:b8:bd:
                    09:8f:d3:d4:0f:96:0b:43:d9:9c:7d:5b:5e:3a:8f:
                    ca:c1:80:24:c5:f4:29:1b:04:7c:e5:b7:82:e4:20:
                    7a:55:55:ac:d6:4c:2a:3a:c5:31:2a:36:ea:90:e2:
                    07:4d:01:61:0f:89:28:e6:09:3e:cb:b6:63:65:04:
                    85:e5:34:a2:45:5c:cb:34:3e:5f:a3:91:cb:92:03:
                    2f:f0:77:68:90:73:7e:03:ab:51:56:5a:7f:5e:22:
                    3e:d1:17:70:2a:51:af:f6:e3:89:96:3e:77:7c:67:
                    d8:aa:5a:86:a1:b1:cb:20:60:4a:bb:18:35:c7:bf:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AF:D6:84:C5:FD:AB:C3:9A:6C:77:CF:AA:AA:E8:82:56:13:7C:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/069621c4-b0bb-3796-b799-8669a82008c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.83.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d2:ab:d4:51:ec:97:fd:b0:c4:4b:33:f7:77:19:82:d4:d0:
         30:e2:86:87:72:cc:23:bb:71:23:04:9b:c3:04:e8:0b:e3:b8:
         01:53:d4:c0:ec:c2:fe:c4:0f:68:5e:2c:5a:e7:93:3f:a3:ef:
         d5:4a:cd:6e:73:54:31:37:16:ca:e6:7c:12:42:0b:68:4a:3a:
         19:51:18:bd:3c:85:9b:ac:ce:b0:20:49:bd:e5:e6:90:e6:db:
         0b:db:51:fb:d4:51:55:d0:c1:6c:57:8c:c3:be:38:0b:5f:a2:
         5b:6e:4a:f9:80:89:27:dc:60:c1:75:cd:7b:f8:db:b2:01:da:
         55:fd:3d:a3:28:3c:d2:aa:c8:a1:70:0d:cd:ec:dc:60:df:1e:
         a5:80:ef:ff:80:66:9e:c3:35:31:ed:cc:15:1a:0e:60:3b:92:
         fb:2f:71:08:a2:46:83:bd:32:2a:f0:4e:ab:5f:1e:6d:c7:13:
         9b:85:e4:99:24:9c:03:b8:f6:1c:b5:6d:ea:dc:1f:a5:58:34:
         97:31:e5:89:66:ec:34:f3:f5:ee:02:62:85:a0:44:2f:06:70:
         61:28:a7:cb:73:5d:db:04:4a:37:af:a4:0f:95:00:5f:13:55:
         11:48:46:29:e7:39:41:e2:86:b6:6d:f4:9b:ff:dd:15:e9:0c:
         df:83:50:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:34:07 2024 by rpki-client on console-fra.rpki-client.org