Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27a244f-6540-3f49-a0cd-f967dca6b1e0.roa
File:                     d27a244f-6540-3f49-a0cd-f967dca6b1e0.roa (raw, json)
Hash identifier:          vaVRJsieKFP8fOVMNNrkAmorfoomFEVjcyHyhs5Tn/k=
Subject key identifier:   FE:CA:70:DA:02:7F:99:8B:0D:B3:29:DA:A6:5B:E1:52:D0:AA:A4:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7A576E944C03BD437AA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27a244f-6540-3f49-a0cd-f967dca6b1e0.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.55.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:a5:76:e9:44:c0:3b:d4:37:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=23a12704-669c-4722-96c6-033311c1a0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:05:d7:66:bc:ae:23:43:9f:8d:d2:89:c2:
                    71:08:d7:1f:c3:ce:0b:51:85:72:7e:fd:dd:a5:8c:
                    00:f7:13:2a:53:93:fe:9b:7f:fd:6d:a7:06:f0:a0:
                    da:fb:d9:d2:0d:37:fd:bf:16:a9:34:30:3a:df:e5:
                    f7:dc:ed:3f:84:fd:19:de:48:07:3a:dd:5a:e5:c7:
                    2f:d4:18:94:0a:3e:94:de:28:4f:24:5b:bd:49:8f:
                    3c:74:e9:5d:f8:85:76:ba:a6:13:8c:e1:98:ec:09:
                    4c:bf:2c:95:05:d7:a3:13:71:6f:b6:90:07:30:37:
                    92:3b:3d:c4:46:e5:5f:b2:de:a1:99:34:c4:b4:31:
                    64:0b:02:0e:51:c6:ec:6a:65:77:96:10:f2:3c:5f:
                    51:3d:b8:ba:e1:57:d1:bf:3e:83:04:95:c1:97:ff:
                    3f:52:f0:44:3f:b6:58:6d:90:7f:1c:d1:53:9b:18:
                    57:26:36:73:27:a1:33:d6:b3:f9:d7:8e:f6:a0:ee:
                    a8:81:bf:92:91:e2:2a:cb:8c:8e:6f:ba:f5:35:0d:
                    3c:17:5c:f5:95:eb:7f:d4:f6:0c:4e:d4:16:3e:a1:
                    2d:8d:3d:88:3a:b7:88:04:ec:49:ee:64:45:fc:34:
                    bc:fa:35:13:9c:1b:39:a1:45:71:4f:1a:44:2f:42:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:70:DA:02:7F:99:8B:0D:B3:29:DA:A6:5B:E1:52:D0:AA:A4:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27a244f-6540-3f49-a0cd-f967dca6b1e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.55.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d5:ab:96:d9:d0:a4:0a:44:f2:f1:9d:da:51:27:b2:0d:b5:
         e0:4e:e7:73:61:6d:ef:7b:06:d5:b4:59:69:72:7e:28:23:cb:
         dc:28:d8:cf:95:4d:3e:5d:0d:af:c8:b1:a7:12:87:92:b9:e3:
         6b:81:1e:47:07:e9:36:6a:15:23:b9:02:d6:c2:4a:90:87:46:
         64:7b:c9:80:3b:c4:88:df:99:95:8b:d7:48:5f:cf:f7:66:e5:
         b7:72:ef:b0:25:f5:f8:b5:d8:24:97:82:d4:71:c1:5a:53:fa:
         aa:28:4a:d5:3d:38:c5:f4:92:22:c2:be:75:fb:53:7c:90:ce:
         85:0f:02:48:09:dc:57:bc:f8:a5:34:31:b9:93:70:9e:7a:7e:
         7e:e2:5d:4d:41:0a:7a:f4:59:a5:ce:f9:75:11:01:69:cd:d8:
         fc:24:c5:f5:14:47:19:57:e5:ad:60:d5:0e:3e:c9:02:49:fb:
         2a:55:b1:96:d7:53:68:6f:e9:79:3e:80:34:8b:dd:81:4e:be:
         3f:e7:71:0a:7f:cf:f7:d9:0d:3f:2d:2c:7c:f7:1f:47:10:ff:
         1f:dc:8f:89:70:58:20:1d:55:f1:cd:29:75:5f:71:12:d7:eb:
         e0:54:30:ef:78:64:20:50:6b:c1:b0:56:40:f2:c3:2f:c4:33:
         c2:71:71:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:57:00 2024 by rpki-client on console-fra.rpki-client.org