Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce3b3be6-73a5-353e-93de-91942f35fa6e.roa
File:                     ce3b3be6-73a5-353e-93de-91942f35fa6e.roa (raw, json)
Hash identifier:          cEMauHHzpgVPSYzq4PtvruZ0yuUA9aRABecmFtAeI/s=
Subject key identifier:   E1:1B:B1:13:69:2E:66:D1:1C:85:46:8F:7E:57:D8:F1:72:79:2B:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC7D337BF891A8624B2280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce3b3be6-73a5-353e-93de-91942f35fa6e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        68.53.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:7d:33:7b:f8:91:a8:62:4b:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=e19faf93-4777-47ac-99bf-80b89e809dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:0f:2e:79:7a:16:2b:15:e6:b6:f3:cc:cb:
                    ab:a0:42:90:a5:37:5d:c9:48:f4:1b:93:df:bb:1b:
                    bf:bf:5b:28:ed:63:49:8f:95:4f:63:4c:ba:0c:d9:
                    d6:3d:39:b6:ee:0a:93:2c:ab:23:34:db:b5:63:05:
                    8d:15:e2:58:ff:3f:67:86:45:fc:a4:f0:eb:fa:3c:
                    8a:e3:9f:2a:7e:9f:37:5b:bf:e3:a3:34:2b:8f:02:
                    d1:80:bf:48:f1:f3:b4:5f:bf:49:32:5f:39:8a:3e:
                    04:74:c0:38:77:fc:f7:f1:77:e3:f9:8d:64:4a:2f:
                    f6:01:ee:66:8c:57:a3:c4:b9:9d:d9:1b:b9:d6:5f:
                    99:8f:7f:66:6a:9d:95:04:cb:b3:46:ec:8d:7f:e3:
                    d5:8d:76:81:19:ac:e0:77:1a:98:1c:ef:91:1b:51:
                    18:81:52:4a:cf:de:10:0f:8f:fb:9c:95:5e:73:13:
                    f4:ae:70:b6:89:15:86:c7:df:f8:be:06:4f:c6:ea:
                    95:6b:09:b9:fe:0b:d9:6e:a6:d6:77:69:40:da:28:
                    68:95:1d:0d:df:c5:00:26:cd:a8:28:16:b4:cf:66:
                    7b:5b:23:5f:b8:62:fa:55:1e:61:d5:82:a7:48:75:
                    47:87:27:5d:1b:be:4b:3f:22:34:13:04:cd:0a:37:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1B:B1:13:69:2E:66:D1:1C:85:46:8F:7E:57:D8:F1:72:79:2B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce3b3be6-73a5-353e-93de-91942f35fa6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:aa:81:03:fd:11:47:89:07:5b:9d:3f:e2:9d:76:9e:ac:
         15:52:f0:1e:70:02:ae:91:a9:68:06:2f:f5:af:54:c3:12:24:
         de:68:3c:ba:c9:55:dc:8f:7d:33:68:07:0d:30:8a:98:1d:26:
         4a:eb:f1:ee:69:da:bc:e9:05:0d:2e:8b:69:58:20:7d:96:02:
         29:23:e4:eb:c9:7f:25:cc:00:01:3f:3e:42:a9:f5:ef:cf:8b:
         3f:8f:71:bc:f6:36:b1:d2:01:ce:ae:a6:71:3c:52:ca:a2:36:
         9a:c0:f9:c8:cb:bc:09:80:7a:d5:f4:8d:87:7f:bb:35:59:e0:
         57:8d:c8:ad:d8:42:10:e9:d5:d3:5e:8e:74:b3:7d:76:c7:7a:
         6c:e9:d0:19:32:fd:5e:e0:6a:29:58:71:fe:9c:5a:e6:df:36:
         4e:bd:0a:98:31:2a:a9:19:e1:43:c6:b7:75:e8:51:4a:a4:a4:
         01:72:bd:7a:01:55:2a:e5:8a:2a:e8:15:d2:cc:61:a6:16:6f:
         79:63:c5:f5:d1:8e:68:6f:96:99:5b:58:71:c8:7f:45:52:0e:
         b7:3c:11:7a:40:5a:f2:a0:04:dd:f5:56:92:33:84:bb:5e:c4:
         f3:e9:bf:ad:95:41:2c:c1:03:d9:fb:6a:e2:7c:37:ae:b3:9e:
         3b:ad:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:22:18 2024 by rpki-client on console-ams.rpki-client.org