Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99fa9493-331c-348b-a118-225a41a8b103.roa
File:                     99fa9493-331c-348b-a118-225a41a8b103.roa (raw, json)
Hash identifier:          B9m4SYParu7tF6vQemZnr03RRe/QSRpFtGUBifEUd7U=
Subject key identifier:   E1:39:21:7E:80:65:C2:62:A1:6C:9C:A2:08:5D:0B:61:7D:BF:38:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC7C6AED5A2B937A22F200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99fa9493-331c-348b-a118-225a41a8b103.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        68.52.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:7c:6a:ed:5a:2b:93:7a:22:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=c7eab539-b130-4b2e-8e94-aeea6dd626ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:83:97:cc:16:99:f7:53:7c:71:b6:53:ef:0d:
                    d7:99:65:13:a2:59:1c:8d:f7:8f:8d:b9:c2:be:1b:
                    fd:88:82:2c:9f:c1:4c:9e:4a:5f:46:9e:da:58:0a:
                    3b:05:3b:e9:89:41:62:40:f1:46:63:0e:ff:3d:56:
                    bb:97:6f:fe:88:9d:88:6b:c3:3f:cb:2e:8d:65:63:
                    37:c1:56:c7:12:6e:ae:41:2c:b2:fe:fe:b1:a5:00:
                    ec:07:07:c5:c9:83:7f:da:d1:40:aa:e6:a0:b3:f1:
                    d9:53:13:1b:98:34:fa:b7:ca:b7:ac:d5:e4:1f:1f:
                    46:e9:b7:c2:03:f6:17:68:c0:04:41:64:12:e3:74:
                    76:6d:e6:0d:c7:3e:d9:b2:f2:54:d3:b8:db:88:4d:
                    71:db:9b:d6:f9:07:ab:a8:d6:c2:94:59:df:26:51:
                    1c:c9:a4:04:ca:ef:f3:6b:57:07:2f:f1:2a:f2:83:
                    d9:7f:10:44:47:4b:69:df:80:e5:7d:11:e4:e7:bf:
                    70:e1:5a:0c:f0:5c:e7:a9:ad:54:06:a1:05:41:9d:
                    3f:20:de:a9:f1:b1:29:8f:a3:b4:3c:cc:4a:ff:a5:
                    ba:50:bc:62:2e:c4:52:3d:d7:7a:9c:a7:40:6c:4c:
                    23:b4:21:3e:a3:c3:9c:64:24:7e:ab:5f:d2:23:17:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:39:21:7E:80:65:C2:62:A1:6C:9C:A2:08:5D:0B:61:7D:BF:38:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99fa9493-331c-348b-a118-225a41a8b103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:bf:47:52:80:da:27:3e:b4:54:e0:d6:a0:6d:5f:4b:1d:a5:
         68:4c:04:b4:49:49:1c:ca:0b:e9:68:2f:34:c9:a8:4d:2c:0b:
         bf:72:de:d7:41:51:6f:d6:4d:5f:2e:46:e5:9f:19:9c:dc:bf:
         b0:c4:d8:f2:3a:06:43:be:9d:d7:b7:b8:af:ee:f7:f0:fe:cc:
         b7:95:8a:8e:c5:5f:d4:aa:91:36:37:fe:5e:69:8a:c4:e9:d6:
         de:bd:d0:d7:3e:63:36:76:09:17:08:4e:55:29:9f:bf:e5:aa:
         7f:53:f0:65:ec:e8:be:36:31:d8:75:0d:06:ef:f7:f4:f3:a7:
         bd:bb:96:66:d3:b1:b4:6d:30:8d:e0:93:4f:01:8c:91:c4:03:
         e2:65:25:dd:33:47:0d:21:b0:13:ff:b3:f4:c2:4b:48:a2:8f:
         4c:ee:de:20:43:bc:7a:5b:3b:0b:8f:9f:85:0a:8a:29:ea:02:
         91:a3:ce:5a:99:09:28:b4:34:10:7f:3c:be:be:79:14:77:5f:
         6b:e9:22:6b:f9:6e:d6:01:3a:5e:2f:38:80:95:f4:fb:4e:f3:
         0a:fb:67:45:ab:78:cd:6a:ae:e2:96:01:75:9f:91:8e:20:3e:
         be:85:6e:db:94:d0:ce:43:9d:8c:43:21:71:e4:14:67:60:29:
         e4:d5:18:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:53:12 2024 by rpki-client on console-fra.rpki-client.org