Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/880462eb-d662-33b5-831f-854bb20272b9.roa
File:                     880462eb-d662-33b5-831f-854bb20272b9.roa (raw, json)
Hash identifier:          LUc9S9w2PCIvymCS+B5cltWuKMaub3GcevxoTe1VJok=
Subject key identifier:   51:32:A8:A8:28:1A:A7:1B:A7:4E:FA:EC:12:B5:39:8D:79:8A:FA:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB06462FC938FC59F332F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/880462eb-d662-33b5-831f-854bb20272b9.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33659
IP address blocks:        69.241.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:64:62:fc:93:8f:c5:9f:33:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=1ddd0734-21fd-4c06-b73a-b6c630fb3654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:a7:e7:41:32:b4:8d:38:ff:4c:1e:f5:85:
                    95:f2:f6:3b:cd:68:11:8e:2e:c0:3b:29:f0:c9:79:
                    f1:1d:2a:ee:4b:cc:ec:aa:a8:83:7b:c3:a4:50:78:
                    28:dc:b4:c2:11:76:31:42:22:95:49:50:c8:b8:f8:
                    2f:08:c2:a5:11:27:e4:1b:c9:0d:58:29:2e:d7:09:
                    cc:76:83:be:34:2b:17:3d:71:75:19:d6:e1:a9:c2:
                    ea:19:5f:30:fb:64:46:e3:07:32:6a:4d:c4:f9:c9:
                    47:bd:02:e1:50:c9:97:61:b2:ed:8d:6e:e6:49:2b:
                    74:7f:38:d7:8a:2d:77:e9:6a:27:ec:7d:5f:c0:02:
                    1a:0c:51:b0:68:6e:f8:b5:48:06:73:08:73:6a:16:
                    fb:c8:62:2f:2f:fa:2a:23:87:de:f8:3f:b7:de:d5:
                    0b:9f:36:bb:a4:2a:16:20:12:50:7d:03:e1:0b:c0:
                    f4:08:d3:3c:46:14:eb:02:34:df:a7:88:ae:67:92:
                    98:cd:d8:31:9c:85:a8:32:60:6b:0f:83:57:81:e6:
                    83:2f:ec:df:41:48:12:49:e8:38:05:9b:45:16:cb:
                    1c:e6:04:7d:de:56:30:bd:07:36:41:5c:3c:ca:79:
                    ee:6a:2e:90:70:de:1f:02:f1:0c:4f:05:b8:b2:23:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:32:A8:A8:28:1A:A7:1B:A7:4E:FA:EC:12:B5:39:8D:79:8A:FA:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/880462eb-d662-33b5-831f-854bb20272b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.241.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:98:3c:fd:0b:59:57:59:d8:00:47:2f:cb:5c:03:ec:a6:f7:
         c0:6d:1a:1e:d3:eb:f9:1e:60:b0:c6:f4:51:4b:dc:f5:b5:7b:
         34:8c:5d:95:52:0f:29:08:ed:a9:80:4d:05:25:84:ed:a6:65:
         e9:78:b1:8a:c0:cc:3e:c6:95:40:92:31:7f:3c:f2:d4:61:7c:
         d3:2c:e5:f2:1c:7e:8e:3b:2f:8c:07:f4:19:28:b0:37:ae:7d:
         0e:50:29:f1:61:09:06:03:da:51:16:04:a5:1d:cf:f8:e5:20:
         78:0e:07:53:50:07:5b:0b:9a:33:61:da:b4:e4:fe:55:cc:3b:
         9f:57:e1:c7:ce:c3:c6:76:66:cb:a8:2e:70:69:0a:46:7b:b4:
         af:b2:d3:0c:c0:99:fa:e5:e4:5f:c5:b8:ed:0c:36:25:98:e8:
         e5:e7:27:74:0d:46:93:c6:53:cf:0b:c8:49:a1:17:e0:62:3c:
         1c:37:7e:fd:96:3e:15:fa:73:26:bc:11:8b:de:a1:7b:b2:d0:
         f1:f5:ee:b0:6d:51:78:bf:e6:c7:ea:5f:cf:74:ea:fc:a4:70:
         93:0b:70:76:55:3d:79:5b:5d:13:0d:56:9d:3e:56:9f:87:42:
         94:93:3a:5d:ca:ac:a2:bf:df:23:8e:9b:93:f5:36:04:86:f5:
         3d:53:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:52:07 2024 by rpki-client on console-fra.rpki-client.org