Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb6517f3-bbeb-3759-b5f8-045fe9277196.roa
File:                     eb6517f3-bbeb-3759-b5f8-045fe9277196.roa (raw, json)
Hash identifier:          47d0KMRV73jhf7zZovW+1SHruqZON7BOm5YMEIdoBJ4=
Subject key identifier:   0B:DD:DF:FE:EF:16:C5:DB:E9:BE:3E:B0:9A:14:F6:67:D5:4D:43:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAAF408A0DEF076812002F6
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb6517f3-bbeb-3759-b5f8-045fe9277196.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        68.32.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:aa:f4:08:a0:de:f0:76:81:20:02:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=df85e29f-6079-4d20-858c-d9d0540c9846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4a:1e:96:cf:8f:db:8b:4e:c5:90:59:2a:35:
                    50:80:22:28:29:eb:2f:42:ad:50:64:ae:08:99:27:
                    57:a7:6f:1e:0f:fc:04:e2:0c:dc:a0:9b:a5:61:42:
                    56:f7:08:61:27:de:d5:a3:cd:d6:a6:e2:d7:90:17:
                    3c:71:24:38:f6:68:ae:41:34:bf:ba:cb:2f:21:a9:
                    4c:48:6e:62:00:9e:76:af:58:31:f4:76:e2:1b:60:
                    9f:ac:05:89:8d:a6:60:ed:f4:b0:cc:20:e1:20:9a:
                    95:ec:8f:33:4d:54:c0:c1:7b:88:29:dc:34:f9:e7:
                    af:ff:dc:fb:30:86:5f:19:f7:51:88:b8:9e:12:97:
                    aa:2a:a6:ee:80:74:50:53:7f:09:98:4d:9b:fb:a4:
                    31:4e:9e:ae:e8:8c:4e:e2:23:45:38:4c:52:49:5a:
                    a8:61:34:a7:c4:7e:f9:88:81:9c:0b:53:33:3e:a6:
                    42:0d:9c:0e:29:eb:83:d8:13:72:0b:8c:3b:8d:08:
                    6a:11:20:f0:87:5f:b4:24:1f:f6:0a:a5:66:3f:f4:
                    30:b7:71:de:ff:00:05:f8:97:ee:bd:fb:0f:d3:19:
                    16:30:06:39:60:e5:dc:3c:48:90:7a:f6:44:1b:44:
                    b2:a6:c8:4c:68:6b:d9:50:f2:4d:69:60:47:d5:07:
                    89:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:DF:FE:EF:16:C5:DB:E9:BE:3E:B0:9A:14:F6:67:D5:4D:43:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb6517f3-bbeb-3759-b5f8-045fe9277196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.32.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b8:8e:83:fc:1e:c0:9d:57:f7:1b:af:46:c3:4e:a6:d5:cf:
         9f:97:93:e5:5d:4e:a6:44:24:64:d0:a4:00:a4:31:5c:31:78:
         03:63:97:85:60:75:2e:bd:8e:ec:ff:0d:66:1a:8c:e5:fb:f0:
         8b:dc:28:5b:55:53:bc:4a:31:e6:b3:95:40:90:40:f6:aa:82:
         f7:b8:4b:65:58:d7:24:b0:80:f9:25:42:4b:3d:96:bc:3b:17:
         cb:9c:b2:b9:13:03:b4:1e:c6:90:fd:8e:5d:0d:40:b9:6e:d8:
         0f:dc:58:4e:0c:ac:75:36:d7:73:ae:5d:c6:de:35:ed:a3:e8:
         73:d6:fc:db:45:2b:8e:bd:9f:15:e3:57:78:c9:8b:21:8a:60:
         dd:1c:09:f0:6b:2d:e6:98:43:0f:a4:d9:8a:67:79:5a:bc:38:
         9a:19:d2:e4:76:a8:a0:44:82:54:8a:6e:36:64:31:a7:ff:bb:
         b9:2c:3f:b3:9a:a9:90:1e:6f:fc:df:69:63:f2:55:72:ff:f3:
         45:ce:04:8b:62:c7:d7:60:ea:ea:f6:94:ed:c7:4e:14:e0:81:
         ca:87:34:cd:34:99:f1:f5:e3:35:59:36:d1:0c:ce:cb:23:b9:
         09:93:e1:53:2f:81:ca:3b:40:b3:87:4e:fc:57:8d:72:ca:8c:
         21:93:73:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:58:16 2024 by rpki-client on console-fra.rpki-client.org