Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/135947e6-0aae-31fd-a40f-5df12f276e30.roa
File:                     135947e6-0aae-31fd-a40f-5df12f276e30.roa (raw, json)
Hash identifier:          2iw50/OJAfhq1MRWszCS5nWm/JAg8bmlQ+Z9sY5tU6k=
Subject key identifier:   BA:04:ED:28:A6:7E:D7:FF:80:0B:66:93:49:86:87:85:6E:B9:60:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BD0676A53235382627D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/135947e6-0aae-31fd-a40f-5df12f276e30.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        68.39.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:d0:67:6a:53:23:53:82:62:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=a4ab4abf-ebe2-4e94-9b54-c8ee7877f1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:32:d9:97:e2:bd:fb:cb:de:8c:70:51:47:
                    dd:d9:14:5f:41:75:e0:1d:7b:89:77:b2:67:26:67:
                    2e:37:5d:00:3b:5a:2a:55:34:5a:8a:50:c0:85:55:
                    ec:6e:f8:cc:47:9e:e3:fa:e2:10:29:60:67:57:83:
                    53:a1:da:9a:13:8f:89:c7:89:ef:5c:80:86:aa:5d:
                    52:c1:d2:93:98:84:5b:11:23:d0:59:02:f6:31:3b:
                    0c:42:91:8d:fa:d7:b5:13:d2:b5:f4:ae:3d:54:98:
                    a0:e9:0b:da:88:cd:ce:b6:fb:6a:e5:42:3c:94:37:
                    4f:67:03:cf:3b:ca:8b:5c:e6:d8:31:32:30:6c:91:
                    28:c5:49:61:f1:b3:df:a8:e3:58:e7:c2:89:d2:d0:
                    c0:b2:b0:b7:97:8f:a5:a8:3b:c7:ef:dd:25:e3:39:
                    91:53:3b:69:08:e8:87:53:18:c3:9d:db:c9:b3:c5:
                    bf:3f:88:a3:87:73:a2:c0:fa:c8:31:34:90:cf:28:
                    18:b2:6a:2a:a7:5c:d4:c5:9d:ca:c9:4e:0d:bd:90:
                    46:e6:1a:f3:6c:98:08:b2:4a:3d:9b:10:eb:5e:03:
                    63:e7:1b:60:5a:a7:3c:36:75:06:94:b1:db:c1:a2:
                    e3:5d:e0:28:46:e4:a5:ab:cd:06:a4:7e:71:5d:c1:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:04:ED:28:A6:7E:D7:FF:80:0B:66:93:49:86:87:85:6E:B9:60:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/135947e6-0aae-31fd-a40f-5df12f276e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.39.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c2:31:d3:81:e2:0c:d2:74:0e:b9:14:dd:fd:8f:10:ca:ad:
         30:14:b5:08:d1:24:12:b9:f5:6b:0f:8f:fc:fc:76:d7:f1:12:
         e9:13:bc:1c:20:49:2a:13:97:a2:81:44:47:67:e5:e0:59:a8:
         17:08:43:b2:4b:cd:c3:21:e5:07:a1:73:93:c5:d8:7e:58:ee:
         d7:2e:77:56:b1:86:7d:f3:00:fc:0c:31:31:7e:fd:62:8d:96:
         8f:b5:d7:07:7e:c6:97:9f:ef:cf:57:c7:15:82:a4:94:05:9f:
         af:0d:86:ac:11:37:4c:38:32:46:0b:7b:1c:be:de:2b:4c:63:
         15:e6:d6:d2:1c:92:07:dd:d5:36:cf:c4:e8:1f:32:d9:f2:05:
         aa:d3:47:e4:52:ac:49:d7:e0:a1:61:f9:c6:8a:82:c7:8f:f8:
         d4:b5:c1:67:3c:d2:d1:cc:20:7b:04:78:9b:37:cd:6b:5e:ae:
         57:df:82:7c:75:5e:19:0e:e5:6a:3c:21:a0:f5:06:f9:26:9a:
         64:7f:9c:00:b9:f9:05:a8:88:eb:a9:0d:78:33:d4:ca:0c:d7:
         1b:66:52:1f:45:f3:d8:f1:38:dd:ee:0a:b9:54:0e:1c:4d:b3:
         f7:36:5c:6a:a6:40:55:e9:49:93:71:1c:46:e0:24:b0:51:69:
         e9:6a:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:35:28 2024 by rpki-client on console-fra.rpki-client.org