Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46510c08-2c47-36c3-949a-d706511819fa.roa
File:                     46510c08-2c47-36c3-949a-d706511819fa.roa (raw, json)
Hash identifier:          nuZkvaEH19eL3FsEVY05eKug/Sx5zBSavgH+1LjdRmk=
Subject key identifier:   51:3B:37:87:A9:E3:71:83:11:E4:91:5E:8C:9B:BC:92:3B:A7:B9:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7836509CEEC9FA9044980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46510c08-2c47-36c3-949a-d706511819fa.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.36.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:83:65:09:ce:ec:9f:a9:04:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=9c81d29e-66e9-4975-a823-5131d23ddfcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a0:a6:34:02:a4:5d:b3:79:1d:a9:9e:50:7b:
                    bc:4e:4f:86:37:30:9f:9e:00:18:8d:50:f1:57:de:
                    65:28:3c:08:84:41:ec:3f:b3:57:21:f5:09:1a:65:
                    77:c8:f5:87:25:5b:32:e3:6b:29:5c:ab:94:4e:c9:
                    2a:40:02:28:2c:5c:4d:88:3f:2a:40:b1:dc:bb:e4:
                    36:54:07:00:a2:ea:72:f3:ca:cd:16:f7:af:ea:ad:
                    58:7f:b9:66:87:8c:11:49:77:f2:57:f3:de:0d:b9:
                    31:4b:a3:80:f2:39:c5:ca:29:63:89:df:22:f3:7e:
                    75:89:58:7d:a7:e8:35:5b:3f:a3:41:63:dc:33:7e:
                    62:3f:f4:18:b4:b5:93:a3:df:49:bf:c8:d8:cd:48:
                    7b:0d:4a:ec:b7:e1:ee:0a:93:62:5f:f1:1e:fb:89:
                    8c:fc:a1:c2:33:4a:77:65:21:95:fa:0c:d2:ec:ee:
                    83:ea:31:e4:af:0c:a0:3c:75:f6:42:26:4f:92:3b:
                    f7:5a:4c:f3:04:85:b5:9f:d3:d5:9c:86:5e:75:a9:
                    b5:7f:2b:90:70:5c:9c:cd:3b:93:09:a3:4b:c9:d2:
                    f2:2f:c8:aa:af:e3:18:9b:8d:8c:0b:23:35:e6:61:
                    5f:92:7e:84:7c:2e:60:3e:9c:a5:f9:ef:e9:3c:30:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3B:37:87:A9:E3:71:83:11:E4:91:5E:8C:9B:BC:92:3B:A7:B9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46510c08-2c47-36c3-949a-d706511819fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.36.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:16:4f:44:e6:17:9c:a4:e7:92:91:c0:f4:90:27:97:35:e6:
         74:3e:77:50:ec:5a:83:bb:d3:1a:33:83:ef:b0:7e:ca:90:8c:
         8b:1d:06:21:62:72:31:22:c3:c8:29:02:6f:15:da:12:6e:be:
         45:64:4c:11:e2:73:e0:f5:ab:49:0f:32:8f:86:fd:57:c1:f9:
         8f:34:27:92:cf:42:55:33:d7:fe:36:90:d6:1a:c3:2a:1c:4d:
         47:33:7c:f3:10:1f:dc:e4:fc:0a:18:ab:9e:bd:24:3d:0f:da:
         2d:32:65:a3:be:bf:2a:f8:ca:02:a4:40:97:39:61:22:1d:7f:
         fc:4a:7d:e2:9a:f6:dd:5e:5b:a9:6e:ab:36:2d:68:bf:a5:a5:
         43:05:4a:6d:40:c5:dd:71:63:83:71:77:bf:a3:f1:f7:bf:c7:
         cf:df:6b:93:fc:11:a4:74:d7:da:6e:a2:b6:15:36:44:40:e5:
         0b:c1:26:c7:11:09:fd:ba:4a:d3:57:14:1f:25:ee:15:ab:3e:
         4a:3a:a2:f2:fa:16:11:76:16:90:66:2b:e7:c3:a4:a1:f0:e8:
         52:e0:35:5a:39:0c:a2:6e:d3:ac:cd:48:f6:1c:9a:70:1c:77:
         e6:14:e5:e7:ea:ef:0f:64:a8:8a:de:5b:f5:de:3e:88:ec:64:
         41:93:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:45:42 2024 by rpki-client on console-fra.rpki-client.org