Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac288508-a548-39a2-991e-fe2f69102195.roa
File:                     ac288508-a548-39a2-991e-fe2f69102195.roa (raw, json)
Hash identifier:          1/3v9QG0Hcd2289zwav1DZmrKacFiwokvnASCdTJ7lY=
Subject key identifier:   1F:01:25:B7:84:89:F1:B9:1F:EF:13:DE:83:59:1B:6D:8B:C9:54:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C796A87FD71665B1C10FA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac288508-a548-39a2-991e-fe2f69102195.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.43.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:96:a8:7f:d7:16:65:b1:c1:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=e2cb75c4-5450-43a8-b7dc-7df9c2da871b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:64:f0:f7:94:b0:bf:ec:a0:b6:4f:9f:98:1c:
                    6b:ea:c1:d3:9e:07:64:60:fa:81:86:d3:62:4a:d0:
                    55:24:98:57:a9:02:37:13:51:62:25:2e:f4:49:7c:
                    c2:1b:9e:f9:b0:2e:ca:99:d5:38:2d:48:55:f7:36:
                    79:f0:9e:24:fd:ed:fa:7a:4e:29:7f:24:45:8e:87:
                    43:3f:3c:a3:09:63:1a:69:1d:bd:a5:c6:c7:ea:27:
                    da:5c:0a:6c:18:f0:a4:61:63:c2:2f:72:23:0b:d9:
                    f6:be:76:40:c1:42:ad:2f:11:82:a6:27:3a:04:b1:
                    14:7c:b9:23:99:c8:2c:66:ad:16:ec:08:ea:f7:82:
                    0e:86:28:61:27:72:4f:a4:eb:df:24:ec:48:fd:4a:
                    7a:09:75:e6:dd:a0:b3:25:21:ec:86:e3:c6:ae:41:
                    a6:2c:d0:93:c9:d1:e2:99:3e:e9:7b:bd:aa:ff:8d:
                    27:5c:a1:d3:8e:49:e5:33:09:0b:c7:89:4d:3f:f2:
                    e6:47:d9:31:0c:cd:69:0d:7f:bb:2b:09:57:f0:20:
                    db:54:6a:e6:c1:40:6f:d8:11:29:5c:a3:19:b1:33:
                    97:3f:8b:37:fa:ea:00:3d:62:a6:70:1f:59:c1:e3:
                    b0:e4:ee:c0:37:b3:1a:e1:95:cb:94:93:4b:a2:70:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:01:25:B7:84:89:F1:B9:1F:EF:13:DE:83:59:1B:6D:8B:C9:54:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac288508-a548-39a2-991e-fe2f69102195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.43.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f0:7b:0f:eb:9d:57:d1:e5:f6:02:82:bc:e7:b7:9a:69:21:
         57:1c:79:83:9b:34:f3:fc:1d:4b:ee:ab:41:8d:c3:6f:e9:6a:
         4e:21:71:fe:9d:8a:bd:ce:2d:da:e6:71:3d:77:2d:03:f0:cd:
         ab:16:03:e9:ce:54:7b:6e:e2:e6:73:b4:5d:37:ea:54:d0:18:
         06:09:4c:44:52:ea:10:2e:29:fa:90:e3:2d:c4:e9:29:53:51:
         2c:6e:74:e1:67:34:33:d2:87:91:d8:e3:c7:4c:c9:76:29:5c:
         dc:e5:f4:8d:96:f1:48:39:8b:af:aa:8b:29:a5:ba:12:6d:b2:
         71:12:2b:cb:99:89:31:a1:31:b7:1a:fc:fe:d3:5d:e2:25:b6:
         ce:8e:55:d6:f5:86:c8:1d:b0:c8:a7:70:45:8c:24:a8:be:a8:
         37:b3:b3:35:57:3d:c0:fa:64:53:85:68:60:92:b7:44:65:4c:
         60:a8:46:f4:61:84:08:c0:ce:73:5c:f2:b7:2b:a6:81:30:4e:
         30:a7:2c:0b:6e:0d:1a:78:e1:f5:ed:51:ca:bb:f7:f4:a7:0b:
         0a:94:50:ec:17:72:c7:32:e4:22:6d:bb:c8:44:f7:b0:9f:fb:
         3c:9e:b9:4c:8d:3c:86:d2:0d:7f:c6:f5:e8:ea:3c:c5:72:6c:
         5d:8d:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:54:09 2024 by rpki-client on console-fra.rpki-client.org