Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47605717-5c0e-3c0d-bb9c-788a027a61ac.roa
File:                     47605717-5c0e-3c0d-bb9c-788a027a61ac.roa (raw, json)
Hash identifier:          PCiQlAfi4duyjHPjnldQcglJc27cxyfrK16F6dZK75s=
Subject key identifier:   8D:17:AA:D3:89:E0:CE:D5:C3:7B:B8:09:3A:7B:5D:A8:86:AB:FB:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5782C9E1BE51DC3E68A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47605717-5c0e-3c0d-bb9c-788a027a61ac.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        68.35.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:78:2c:9e:1b:e5:1d:c3:e6:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=bab1a932-2d77-4fca-9476-3077a0d4d8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:c5:a0:62:33:a3:4b:2c:93:c9:6e:86:67:
                    9a:8d:fb:35:7c:54:72:46:7b:33:d8:c4:9e:e0:6e:
                    b0:0f:c3:d0:3d:12:65:57:f9:a9:4b:14:51:e2:2b:
                    cf:de:77:5c:ba:7f:b0:27:35:cb:57:f9:f7:6f:aa:
                    56:31:47:33:fe:b0:45:b4:f9:0d:0c:ed:a5:f6:5c:
                    5a:f1:f4:35:de:08:41:2a:e4:30:41:cb:54:06:a2:
                    a1:3d:47:cf:22:6f:3f:1d:1c:1b:b1:97:26:48:76:
                    65:8f:9a:73:20:0e:90:7c:17:7f:d1:aa:a0:e4:ad:
                    31:da:cc:32:b6:b1:8c:ed:34:76:19:e9:93:1c:85:
                    6e:d6:d7:3e:3c:7e:04:a0:de:d3:47:d2:c2:ca:26:
                    96:82:42:3c:4e:ca:13:31:76:13:d4:90:90:89:62:
                    b2:1c:38:cf:ce:0f:6d:e4:38:57:c5:93:cc:01:43:
                    7d:a4:ac:34:48:03:45:56:63:d3:fd:a7:6a:19:1a:
                    64:87:e9:8f:77:c5:b0:af:c6:cd:17:e8:27:36:fd:
                    2f:06:6f:3b:b0:f3:60:77:3c:74:8d:04:dc:61:10:
                    6f:64:f6:55:94:c5:69:82:84:9c:c9:29:b2:09:54:
                    f3:b5:80:ff:0c:b1:67:4e:93:95:3b:e0:62:e2:18:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:17:AA:D3:89:E0:CE:D5:C3:7B:B8:09:3A:7B:5D:A8:86:AB:FB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47605717-5c0e-3c0d-bb9c-788a027a61ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.35.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:86:db:5b:17:56:fd:e1:3c:cc:4b:89:c8:e6:9d:e2:fa:57:
         af:9d:43:63:7a:5e:ad:53:d9:5b:2e:4f:ce:e2:2a:9c:a5:e9:
         82:5d:ce:d3:93:e8:38:ad:76:f7:ee:0a:17:e5:8f:80:12:d0:
         20:83:c3:4b:68:53:76:df:d7:f1:88:da:3e:11:4d:11:4d:3c:
         98:78:6c:2b:9b:1a:08:cf:9f:24:63:ea:96:d2:e2:b1:31:dd:
         47:51:8a:b6:4a:6b:59:bb:5a:35:a7:2f:f9:40:b5:bf:68:24:
         67:f4:b8:74:79:64:bd:ab:10:57:f3:ec:2a:b9:a2:c2:22:f8:
         f9:e8:02:d4:fa:14:2f:4c:de:8e:7b:d9:63:81:74:08:ba:27:
         e7:11:39:5a:63:47:65:be:9a:1c:7e:f9:16:ba:7e:7f:b8:7a:
         9d:4e:64:e3:0f:7c:94:79:30:77:37:0b:3e:88:bc:06:f2:72:
         29:bf:c9:ee:2c:4f:60:97:b1:ee:00:bd:5a:c5:32:ed:df:08:
         df:5f:69:13:45:a6:66:20:8b:2d:53:7a:36:98:91:08:74:1e:
         2f:9e:a2:d7:1e:22:f0:47:01:a4:94:4e:58:85:91:91:5a:ef:
         42:f7:3c:93:a7:d2:35:de:72:e1:c4:2b:de:0f:47:67:39:fd:
         e4:e0:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:19:51 2024 by rpki-client on console-ams.rpki-client.org