Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64d1497d-3223-394e-9edb-47f9cc041cf9.roa
File:                     64d1497d-3223-394e-9edb-47f9cc041cf9.roa (raw, json)
Hash identifier:          f4SAstwSHFwjOXlSMgkBzh0EqpiWzcOAINZ9G4zwYRM=
Subject key identifier:   78:2B:E9:D2:F0:8F:5E:F7:E5:FB:C9:9C:99:3A:F4:70:D7:45:EE:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9EB0C5A6DD4CD9ADD26100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64d1497d-3223-394e-9edb-47f9cc041cf9.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        68.82.104.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:b0:c5:a6:dd:4c:d9:ad:d2:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=19c40405-27ff-4114-95a6-e7ee2d5e4b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:c0:34:84:85:a3:d7:a9:ba:fb:7c:a8:09:
                    ee:0f:40:60:e3:04:dc:cd:47:ac:e3:6b:61:b9:d5:
                    a4:9d:fe:b4:5d:9a:07:c0:9e:f3:ea:a3:78:1d:97:
                    47:b5:4d:fd:47:2d:84:84:59:64:a5:f9:d3:1d:c4:
                    ca:16:4c:1a:02:e2:af:c8:3c:0a:80:0a:7c:07:8e:
                    d7:48:9a:12:39:a4:fb:b3:4b:9e:6c:4b:d8:42:46:
                    50:11:7b:f9:bc:6c:29:e7:95:fa:ce:c6:f4:35:c1:
                    0e:c6:34:ec:06:7b:a1:d2:48:5f:d0:68:45:50:58:
                    41:48:a6:72:5f:e8:86:03:ae:13:4e:de:39:d1:71:
                    69:e0:7d:ec:cb:f6:bd:2f:d6:06:43:01:a4:e6:ea:
                    eb:d1:47:d4:3a:06:03:12:58:7c:b1:dd:f5:b8:32:
                    8e:0a:a7:9e:c0:a3:12:19:ad:a3:b2:f5:96:9c:9b:
                    1e:c5:a5:eb:58:1c:0f:81:c2:a0:6c:f1:b2:7f:26:
                    5a:90:17:1e:21:2c:ef:a4:eb:f1:1e:04:dd:f8:20:
                    12:49:e7:71:57:da:04:0c:0b:d1:f1:29:68:47:70:
                    80:9a:be:e8:af:d3:a3:4a:23:94:a9:ef:67:38:61:
                    f3:a0:2b:6f:64:07:d9:47:06:9d:df:4d:08:f8:de:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2B:E9:D2:F0:8F:5E:F7:E5:FB:C9:9C:99:3A:F4:70:D7:45:EE:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64d1497d-3223-394e-9edb-47f9cc041cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.82.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:6f:04:8d:98:fa:9e:f4:54:d4:8c:7b:41:25:b0:7a:0a:9f:
         61:ef:84:b0:b5:97:5d:ca:4b:89:e4:b7:ec:cf:29:c3:81:70:
         70:eb:59:29:ba:14:c1:e5:13:16:4f:94:9c:c3:d3:85:30:89:
         8f:98:5b:d0:8d:f8:4b:44:5f:15:80:bd:d1:98:37:56:d2:73:
         70:cb:d5:cd:8d:90:a3:26:63:22:b0:eb:c0:44:91:ae:e5:df:
         43:ec:c7:d2:f1:93:2f:b1:97:e2:67:c8:24:0e:27:67:99:26:
         9b:86:1f:1c:2c:78:44:43:3e:31:4e:fa:e4:93:0b:fb:ea:73:
         89:b1:14:be:1c:7d:73:03:56:1b:e1:78:bc:ef:fc:a9:3b:41:
         e4:b0:08:86:06:d2:4c:21:c6:1d:36:1a:23:cc:10:a8:b5:2f:
         30:bb:90:99:7b:9d:3f:0f:b9:ab:5d:02:fa:f4:3e:a1:62:96:
         c1:b9:48:85:12:ac:0f:f8:ed:c6:22:28:ca:71:fc:88:fa:db:
         8c:cc:5a:e0:36:88:ac:ef:d7:1a:0e:94:cb:b1:7b:30:03:d5:
         31:80:34:b7:c1:5e:f7:bd:02:4a:e1:5e:bb:36:eb:71:eb:c2:
         af:cb:62:3d:18:c5:b1:d3:46:9a:9e:2c:87:af:fb:23:03:1a:
         51:0d:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:56:55 2024 by rpki-client on console-ams.rpki-client.org