Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06cf8e8b-f591-3b40-95ad-f87eb3935d8e.roa
File:                     06cf8e8b-f591-3b40-95ad-f87eb3935d8e.roa (raw, json)
Hash identifier:          oQwt8quOVMbWa8fS1pml98LbEHvgPPNKopCVx1PmTp8=
Subject key identifier:   0F:0D:5E:D9:E0:BC:A5:56:EF:96:DD:90:4B:CD:A9:BC:4F:B5:BF:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BE2580DFDCB8322E37FD8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06cf8e8b-f591-3b40-95ad-f87eb3935d8e.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        68.51.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:e2:58:0d:fd:cb:83:22:e3:7f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=97540853-467a-43f9-86cc-abda946ad0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:e9:52:be:f3:08:bb:cb:2d:11:36:2c:2f:
                    f2:c7:fa:e3:21:4e:ad:90:72:88:44:69:f6:5c:50:
                    82:1d:91:1d:5c:c8:08:06:95:fd:60:45:53:56:4c:
                    ce:56:6d:2d:6e:91:f1:e6:75:50:b4:22:ec:28:be:
                    a3:7a:27:35:7a:40:cc:f9:92:43:32:f3:4d:ca:64:
                    1e:90:4d:18:6d:4b:8b:50:1d:65:34:86:8f:a0:d9:
                    22:b0:a8:1c:5f:d6:23:7e:d5:a7:2c:6c:0c:10:91:
                    9f:de:21:72:9f:ff:45:84:a7:90:7b:29:14:8e:14:
                    8e:2f:c8:92:07:25:3c:c7:ce:ff:a4:fc:d1:c0:19:
                    c3:cb:3d:99:b5:e5:59:ff:8b:ae:26:59:bb:cb:b7:
                    e3:ec:4d:b9:ff:33:ab:be:ab:84:4c:bf:48:85:9f:
                    c0:dc:42:26:3c:56:7a:58:2c:75:7d:98:e5:63:80:
                    9a:03:81:e6:96:1a:3f:5d:3f:fa:fa:f6:63:43:5d:
                    54:a5:00:7d:f1:0a:a2:e5:fb:71:75:34:75:66:6a:
                    f9:f7:80:9c:c8:e2:83:4b:3d:9e:18:a3:12:64:35:
                    f7:6a:90:a2:d7:df:a3:c5:31:08:02:c1:95:06:f6:
                    89:5f:a3:cb:81:88:23:bf:36:4d:0e:2f:7a:58:3e:
                    a8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0D:5E:D9:E0:BC:A5:56:EF:96:DD:90:4B:CD:A9:BC:4F:B5:BF:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06cf8e8b-f591-3b40-95ad-f87eb3935d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.51.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3a:9e:61:16:44:8b:e9:d0:3c:6c:e7:03:8a:17:a8:b6:d7:
         12:12:62:e9:dc:5c:63:9e:45:ed:37:26:9a:a1:eb:5c:a4:3d:
         94:b8:cb:52:a9:76:a1:d0:14:ee:01:aa:e8:8e:0f:38:3a:f3:
         05:86:36:9b:55:b4:a7:c6:47:5a:55:b6:48:5b:4a:96:9e:95:
         97:4d:d2:64:b9:0d:8e:b1:b7:fe:e7:e9:a0:e5:03:6d:d0:f1:
         da:96:86:59:39:d1:a9:c3:4c:9e:f9:d4:c5:06:7c:f5:e6:46:
         9a:0d:b5:db:3e:d3:b7:d0:56:02:b4:8e:70:6e:ad:4a:11:11:
         11:b7:7d:48:60:f7:67:89:d3:42:28:cf:0b:c4:f9:f5:06:eb:
         85:dd:d8:71:7c:55:8b:ec:6d:5f:1a:3a:87:e9:2c:17:b6:dd:
         e1:dd:ba:45:62:4a:80:91:81:b8:4c:6c:a3:a6:42:ba:73:38:
         01:3d:8a:60:6e:32:cd:38:ef:95:de:fa:cb:49:b4:18:de:71:
         5e:b4:9f:07:d0:54:14:7b:15:81:c6:c3:0c:7a:03:dc:14:70:
         20:53:54:5c:7d:2e:b5:1f:eb:da:24:f1:f9:a2:ff:ae:13:0e:
         7a:49:43:d0:61:1d:19:0a:a5:c2:86:11:e0:49:16:99:14:84:
         83:e6:d4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:51:22 2024 by rpki-client on console-ams.rpki-client.org