Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07558279-7b38-39bc-9751-1f696fba68fc.roa
File:                     07558279-7b38-39bc-9751-1f696fba68fc.roa (raw, json)
Hash identifier:          +o0ZksFi1PsuXdETrbBFLu53C/cZJAcEKoUDJLWupKI=
Subject key identifier:   BF:88:BC:79:B8:AC:B3:10:E5:B6:98:5A:6B:D1:BA:C4:F9:DE:E7:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BED595A4E550C327BDDD4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07558279-7b38-39bc-9751-1f696fba68fc.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        68.60.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:ed:59:5a:4e:55:0c:32:7b:dd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=e30fcc7a-274a-40fb-bbac-3c25a5a98d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:ee:6e:87:33:0a:20:30:59:a1:8e:c6:38:
                    22:0c:78:33:6b:c5:31:14:d8:d4:29:f2:8d:2f:82:
                    19:34:00:15:ed:23:af:d8:97:8d:86:3f:af:53:ce:
                    cb:ef:98:64:77:a9:69:c2:a0:bb:12:53:de:2c:0f:
                    7c:12:06:5f:a9:07:90:fe:4b:e9:88:2e:ae:50:23:
                    b8:01:7b:db:6b:26:43:49:45:c5:f1:e9:34:ef:a1:
                    43:dd:19:d2:3c:79:de:b1:69:0d:2a:ab:00:41:ca:
                    41:0b:fc:22:53:33:79:ec:5c:d8:36:34:71:9d:37:
                    77:1c:57:b0:e4:99:cc:22:c9:df:af:08:57:37:3e:
                    14:d3:67:d9:ec:8f:47:d0:26:1e:78:02:fb:9b:7d:
                    1a:f6:3a:97:6a:4c:02:cd:24:13:06:23:56:41:45:
                    1e:fc:4f:cf:29:bc:33:ff:19:dd:94:6d:aa:df:29:
                    cf:71:06:9f:d8:76:df:b7:1d:1b:de:d0:2e:e2:9a:
                    20:c0:b7:99:43:2e:07:64:81:19:35:1d:7a:a1:00:
                    1b:70:11:06:1b:98:58:41:06:7f:f9:80:de:74:2c:
                    46:72:e7:ce:3b:95:5d:31:ae:99:2c:6c:d5:34:69:
                    95:dd:e7:6b:3c:2f:4f:25:64:76:7a:f5:93:9b:3c:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:88:BC:79:B8:AC:B3:10:E5:B6:98:5A:6B:D1:BA:C4:F9:DE:E7:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07558279-7b38-39bc-9751-1f696fba68fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.60.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:da:81:bb:1d:9a:36:10:34:07:aa:60:ac:7e:86:2c:b2:58:
         f1:4d:48:e9:68:59:d9:61:17:a1:ca:90:fd:27:e7:92:b6:a0:
         38:f9:9a:e2:21:ce:ea:af:1d:92:8d:a2:3f:68:12:0e:2d:70:
         7a:b1:34:ed:ed:a6:75:0f:46:a0:05:e8:37:dd:d1:7b:88:a9:
         14:3e:a5:b3:06:b2:8c:de:05:8d:21:8b:f0:ce:48:27:d1:2a:
         9c:67:3f:e6:46:d5:37:6c:50:55:b8:57:ad:86:0b:fe:b8:1d:
         f2:0b:24:b1:4a:a3:45:34:97:6c:b8:59:13:97:6d:f6:a3:7c:
         b1:d1:46:5d:af:b3:8d:0c:b5:18:22:56:be:7e:97:ea:1e:a7:
         83:1b:32:c1:64:53:e1:ce:bc:11:a1:57:4e:50:13:68:ee:f8:
         53:c4:be:32:7e:82:cc:ee:28:8c:2d:36:33:66:3e:93:3b:b1:
         69:28:aa:24:15:29:a5:07:8e:b1:8b:58:81:7d:e0:b8:21:3f:
         48:4f:eb:3f:43:42:25:2c:7c:9d:c6:31:80:7f:b6:6d:34:95:
         1b:80:d3:e4:6f:6a:c5:83:7b:8c:0e:78:e1:7c:89:f5:fd:d3:
         e6:0e:1a:9c:23:ff:0e:e2:ed:d8:44:89:e7:43:74:90:e5:da:
         c2:85:d5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:51:25 2024 by rpki-client on console-ams.rpki-client.org