Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d604e20-2bce-3745-84eb-7b17750b04ca.roa
File:                     5d604e20-2bce-3745-84eb-7b17750b04ca.roa (raw, json)
Hash identifier:          DQbQS4PRbQxNiveZ7+5FTpMMwRL/mmsJVYi5Mw0VwnI=
Subject key identifier:   4C:62:41:8B:C8:74:FA:4D:23:1D:45:B1:37:3D:AA:53:AF:14:9A:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF83B0C1EFBFAD68D33D500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d604e20-2bce-3745-84eb-7b17750b04ca.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        68.54.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:3b:0c:1e:fb:fa:d6:8d:33:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=fc7c8d3a-8680-46be-b282-8da1243f4f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bf:01:e7:f8:18:d4:29:fd:ed:5a:b2:ea:91:
                    5d:4b:f0:6a:62:30:f6:4c:fe:d8:df:08:9a:a0:21:
                    fc:de:d3:48:83:d1:ab:b2:4b:33:1c:59:d0:57:f9:
                    ce:85:79:cc:2b:c7:25:9c:a7:d9:d5:73:3a:a3:80:
                    f3:a3:2a:f9:e8:08:ea:02:59:0b:92:38:9c:2c:da:
                    72:b7:84:e2:24:1a:d1:22:43:8d:b6:e3:62:fa:dd:
                    f6:fc:c6:15:3d:4b:95:fd:c3:1c:b3:e3:70:ad:21:
                    dd:f2:58:f9:1b:d3:75:1f:1a:46:ec:a9:84:c3:1b:
                    41:4a:44:e0:22:7e:8f:06:3c:9b:2f:bb:95:03:a9:
                    37:1c:50:2d:d4:43:04:98:2b:cd:9f:40:81:4a:2f:
                    88:39:11:54:4f:ea:10:7f:46:d4:02:69:04:80:f4:
                    96:4c:09:55:6e:04:ba:c6:b3:1b:f2:42:99:65:ca:
                    29:94:3b:2e:f5:a8:ec:59:ef:b5:89:fa:40:ba:37:
                    57:07:88:ff:77:07:93:b2:cd:da:34:aa:de:97:02:
                    b4:06:82:c2:20:b7:83:56:24:49:c5:26:bc:92:21:
                    f5:3e:fd:32:d8:64:b3:a3:7e:c1:47:26:b2:b0:a7:
                    c3:89:51:b0:50:63:be:6b:17:4c:96:de:f3:14:38:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:62:41:8B:C8:74:FA:4D:23:1D:45:B1:37:3D:AA:53:AF:14:9A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d604e20-2bce-3745-84eb-7b17750b04ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:2a:75:fb:37:20:05:fc:fb:31:83:35:d0:24:50:88:67:7b:
         21:a5:a9:e2:23:f1:8d:58:f1:f5:19:99:53:ea:2d:c8:38:9a:
         d6:be:d6:16:d4:7f:2d:5b:cc:d6:3c:eb:08:26:2a:d0:48:8e:
         69:6f:33:09:9a:30:c6:78:d5:90:14:87:66:6e:f0:f3:34:cb:
         5f:6f:b6:95:ee:ba:ed:a0:6c:38:58:0d:3a:c1:a3:63:e0:69:
         21:06:54:1a:62:ce:44:fd:64:dd:09:76:47:6c:3a:d5:2f:55:
         ed:b5:7f:d7:ad:d7:b4:09:80:81:86:bc:8b:ad:ec:d7:26:05:
         67:6f:65:5d:81:46:3a:f3:64:9a:ae:96:ad:1f:4c:8d:03:b7:
         78:1c:ff:fb:75:a4:2b:d4:9b:e1:0a:43:70:5f:68:ad:ff:11:
         1e:b4:ec:cb:0f:62:6f:63:ab:e5:99:43:5d:1c:0b:c6:a1:88:
         43:d9:08:9f:c7:1d:22:60:81:6f:40:e1:80:ed:68:c8:27:67:
         72:a4:bd:66:fa:ff:26:76:d0:c5:7c:92:58:78:ac:f0:e7:83:
         67:ce:99:c0:d9:27:e1:0f:21:94:c5:37:7e:2b:f1:b7:aa:23:
         92:a0:ac:8b:10:ee:40:fa:f4:c4:b2:0a:f6:c4:66:e1:95:21:
         86:90:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:12:42 2024 by rpki-client on console-fra.rpki-client.org