Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16e8c1bb-ffba-3c53-af09-324377429591.roa
File:                     16e8c1bb-ffba-3c53-af09-324377429591.roa (raw, json)
Hash identifier:          vl/c81JbM+BhIQLgPxqNWsS7cfL9br1DURtT48vq62o=
Subject key identifier:   11:18:0D:8A:A6:89:26:33:36:D9:60:61:0D:CB:26:97:33:DC:D4:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC7AA5301BC5C853E2A600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16e8c1bb-ffba-3c53-af09-324377429591.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        68.52.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:7a:a5:30:1b:c5:c8:53:e2:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=a16ffab4-893a-4952-876b-730fc51d0fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:dd:4b:48:0d:46:d6:65:d2:f0:a3:0a:ee:
                    f7:28:a2:bf:2c:66:1e:10:33:ff:97:2c:f2:1c:7a:
                    92:55:aa:11:57:ce:07:8d:62:08:58:11:60:26:a9:
                    1e:10:ba:1f:2a:03:aa:c5:b1:a2:e8:50:8c:b7:6b:
                    d7:72:26:12:92:b7:5b:45:50:fb:55:d4:ff:84:46:
                    0e:c5:b9:d8:fe:73:34:7e:e8:ac:1c:1b:72:dc:b0:
                    6c:29:7d:dc:75:bd:6a:ed:15:3b:39:97:3f:4a:3a:
                    f7:ca:94:12:c4:79:f4:82:df:b6:32:dd:5d:40:ad:
                    eb:17:2c:9e:d9:1e:1f:f7:74:1f:cf:8b:14:8c:67:
                    f8:75:c4:5d:9c:c6:08:ac:c8:9b:ff:9f:69:0a:6e:
                    2a:b9:7d:f8:d9:b3:a6:58:3a:b8:e9:61:1a:0d:d3:
                    04:7e:eb:1f:55:0b:b5:bd:81:6f:33:7b:f9:d3:0d:
                    52:9d:e9:bf:af:ca:30:c4:bf:63:e1:9e:8a:aa:09:
                    24:10:b7:f6:4f:94:43:e0:25:8a:16:9a:3d:28:c7:
                    68:78:e8:b7:57:4a:f4:f7:a9:0c:7c:ea:ea:a0:58:
                    c3:c0:24:93:fa:2e:52:49:0d:fc:5d:34:8d:b6:69:
                    81:aa:f8:ce:7c:0c:47:ff:d3:c1:ec:fe:fa:b2:06:
                    6b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:18:0D:8A:A6:89:26:33:36:D9:60:61:0D:CB:26:97:33:DC:D4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16e8c1bb-ffba-3c53-af09-324377429591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d2:06:16:9f:0c:57:5e:79:5a:fa:41:24:0a:70:7a:9b:cb:
         76:11:3e:01:ad:59:a0:37:bc:b4:bd:2f:c6:88:74:d5:35:cc:
         7c:3f:d0:df:35:b7:bc:4a:3a:4d:13:38:e6:aa:1e:f4:65:78:
         de:ce:69:0e:71:04:88:4a:3e:da:84:84:bd:e0:d0:2e:74:f5:
         bd:c3:03:2c:59:8c:a6:6c:4b:43:43:a3:25:b2:b1:7c:2f:66:
         1e:20:30:e1:89:70:6b:7c:da:c7:60:bc:f2:3f:a2:45:41:89:
         a4:d5:a7:a5:6f:51:6f:8b:e9:cc:e4:1f:85:f8:bb:c4:f5:b2:
         ea:80:e6:3c:a9:55:f9:f0:45:9d:ce:7e:7d:52:ee:6b:63:6e:
         2a:f6:61:34:dc:05:3f:c9:30:60:f3:61:38:ab:4f:52:9e:40:
         2c:da:2d:8c:38:4d:fd:5e:e8:51:04:4c:64:b2:20:17:82:bb:
         4e:b2:18:1b:ca:ac:f4:51:54:4e:ca:50:58:a5:2d:90:d8:a4:
         44:9b:b6:26:ae:be:d6:77:aa:94:eb:a0:07:d8:fb:f0:36:2c:
         7f:47:72:e1:8c:c6:44:9f:71:f5:8c:af:43:44:18:98:ff:7b:
         f5:6f:c5:20:8c:c7:91:46:59:7f:91:aa:27:e0:57:3a:91:5f:
         e7:fb:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:47:45 2024 by rpki-client on console-ams.rpki-client.org