Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dc5092d-fb69-31cb-b3cf-ae63c8e5bf8f.roa
File:                     1dc5092d-fb69-31cb-b3cf-ae63c8e5bf8f.roa (raw, json)
Hash identifier:          6MbcWDBcXMPRGKhs1EtzVxrvVG7NRKfwYEpSFj9rXqc=
Subject key identifier:   1C:6D:ED:E8:30:D6:03:A3:2D:3A:29:B0:2B:E1:0D:90:AE:6C:68:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC893D14937A81ACEE50C8A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dc5092d-fb69-31cb-b3cf-ae63c8e5bf8f.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        68.82.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:3d:14:93:7a:81:ac:ee:50:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=dc4f24bc-cf38-4447-b682-ded256ecef80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:ad:9f:27:4d:15:98:9c:a4:48:66:3c:b9:
                    15:43:3e:aa:e6:30:27:20:73:59:7c:b3:cc:de:71:
                    dc:1d:95:35:b0:57:7d:88:9f:39:92:14:44:69:3d:
                    5f:e8:d5:86:d9:1d:af:f9:9f:3f:fe:39:91:30:e1:
                    25:d8:81:d1:f3:78:31:ae:d3:f3:d8:56:1f:2d:ca:
                    3e:36:b3:4c:55:16:fb:6b:50:39:b1:30:2e:a3:29:
                    2b:a3:c9:cc:22:84:95:e9:e7:e8:0f:61:ce:ce:08:
                    ca:e4:11:84:7c:a7:d2:c3:04:0f:80:3f:38:5e:d3:
                    34:75:26:34:d4:ce:3e:c4:31:17:72:87:22:d8:70:
                    6e:3f:0c:45:28:55:be:32:5d:8b:e2:57:73:e3:57:
                    13:10:2b:cc:9c:3f:86:1e:f3:dc:e8:ee:75:a0:cf:
                    1d:ad:6a:f6:8c:e4:8c:82:4e:19:26:f7:c0:c4:9b:
                    e2:4c:8c:fa:cc:80:18:29:29:d7:e7:8b:7f:38:fa:
                    03:4e:20:1c:3f:2d:30:ed:b2:e4:0f:52:66:ab:28:
                    fd:36:db:47:5b:c8:29:61:19:ee:9d:30:ca:a0:9f:
                    55:35:88:fb:f4:ad:30:23:13:b7:b4:26:a8:cc:85:
                    bf:0c:5c:17:f8:67:23:de:37:89:e5:26:47:71:d2:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6D:ED:E8:30:D6:03:A3:2D:3A:29:B0:2B:E1:0D:90:AE:6C:68:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dc5092d-fb69-31cb-b3cf-ae63c8e5bf8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.82.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:47:7b:3b:20:88:ea:9f:b7:09:7d:cf:96:63:13:aa:9d:f0:
         4f:d1:18:ef:24:2e:c3:c8:63:90:49:b5:5f:11:85:3a:75:7d:
         14:45:c7:85:33:de:f8:6b:69:fd:d6:df:f9:56:ed:ab:c8:e6:
         d2:dd:e2:53:34:1b:22:95:d8:42:7c:88:84:59:76:36:1e:12:
         63:82:a7:da:75:c2:ed:df:f1:6c:ab:7e:6e:d0:41:a9:80:69:
         74:45:02:e6:09:67:95:be:e0:7d:e7:f7:0e:5c:7b:2f:98:49:
         a2:66:61:8b:ca:b5:72:a2:36:f7:6e:7d:4b:65:16:58:b2:ed:
         68:11:45:33:4f:52:9f:e4:42:37:a9:6b:5d:e4:da:f4:52:b0:
         1a:d3:ac:b1:ff:9c:ce:93:ec:c6:7f:11:72:e7:de:5e:7f:6f:
         4a:8a:8f:55:97:6c:21:9a:7b:53:0e:a9:76:8e:bf:3f:bb:e0:
         8e:8b:6d:5a:27:df:58:08:01:08:18:fe:7e:83:02:3b:49:23:
         07:71:2f:d1:c9:ca:ee:5a:ea:4d:f0:71:96:6c:e2:17:92:c5:
         58:47:14:66:48:43:be:c8:cf:91:b9:27:2b:47:c5:d4:2b:70:
         b3:98:0e:24:91:8c:26:d9:05:b7:60:22:95:09:64:9d:dc:c0:
         fb:eb:17:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:45:37 2024 by rpki-client on console-fra.rpki-client.org