Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/857e4cae-507b-3b83-8e8a-4b25a5355789.roa
File:                     857e4cae-507b-3b83-8e8a-4b25a5355789.roa (raw, json)
Hash identifier:          A1bVNvyWgbUjjraAp2g9/fQebNo2XvWERsyjPjENdX0=
Subject key identifier:   8C:B3:F5:18:E8:FE:D0:93:21:EF:11:0B:48:57:44:09:E0:B9:ED:CD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B59A348999715D04084D100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/857e4cae-507b-3b83-8e8a-4b25a5355789.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:59:a3:48:99:97:15:d0:40:84:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=a5012688-8c20-4ee1-bccc-d49a3ab32f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ef:1a:f5:c4:11:99:d5:ba:b6:d7:6e:73:ce:
                    fe:54:52:63:68:88:5b:09:ab:8c:fd:b3:6b:b0:88:
                    e1:3a:ea:f7:08:d2:a9:61:33:88:bc:d5:2c:42:27:
                    79:17:29:a6:1c:10:8a:8e:7d:c7:c0:06:f0:e6:e7:
                    bb:4d:4f:81:88:99:8c:7e:7a:bc:de:b7:03:33:bf:
                    5a:ec:07:0a:7b:ef:08:cc:64:d6:e0:7f:c8:aa:ce:
                    30:02:6b:4b:81:61:15:79:b0:78:f7:69:ad:97:7b:
                    ce:27:25:ff:09:42:17:31:76:af:64:d8:3e:c0:64:
                    e0:74:e3:43:70:eb:45:31:b2:88:d6:98:ee:f9:18:
                    8c:ce:e8:f7:ea:cf:8c:5e:d9:be:5c:38:fa:da:6f:
                    76:dd:69:44:70:a5:96:7a:76:80:e3:56:da:e4:db:
                    11:ae:1f:ec:37:df:3b:0c:04:16:75:1c:a5:c3:80:
                    b7:7f:2c:a5:43:c5:69:fe:83:f9:fb:a3:b9:58:59:
                    69:c6:63:d3:66:94:26:d4:0e:4b:47:7a:0f:ab:54:
                    35:4c:71:e8:11:54:ce:3e:b2:06:b8:da:fe:4c:2a:
                    7d:1f:a4:a1:49:16:d0:94:01:ee:77:7e:1f:88:0f:
                    8b:67:77:d1:8a:de:f3:bb:88:ba:b4:d5:18:1a:29:
                    f3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B3:F5:18:E8:FE:D0:93:21:EF:11:0B:48:57:44:09:E0:B9:ED:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/857e4cae-507b-3b83-8e8a-4b25a5355789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:5a:55:ca:60:36:de:9f:e7:1b:fc:3f:49:1b:72:38:f1:84:
         19:6d:ba:18:77:22:24:b0:77:c0:1b:98:99:73:cd:bc:07:9e:
         d4:0e:fc:e8:7d:84:46:84:6e:65:27:e1:59:8e:52:b5:11:76:
         31:b5:c0:0f:9f:22:7d:8d:24:8b:c4:d6:e0:2f:60:b3:eb:b0:
         3e:2b:28:5b:49:8a:b2:fa:bc:76:00:59:35:fc:3b:70:78:8e:
         dd:7f:fa:a8:cf:a0:02:72:36:3f:ee:ae:a4:a0:f0:12:f4:9f:
         1f:4e:5f:7f:f4:37:9c:06:7f:3c:da:ea:6c:f3:32:f5:6e:76:
         d4:8a:d6:b9:5b:46:d7:86:df:5d:bf:26:2d:52:52:76:6f:c9:
         79:59:f1:58:e5:44:55:0d:1d:09:d2:5e:bc:e2:8f:40:50:67:
         ba:37:53:7d:95:19:97:95:37:ec:c3:e5:38:0f:bc:ee:d2:b5:
         bd:36:53:05:41:f9:9c:28:2d:1b:f8:d0:45:f0:27:91:1b:42:
         1e:6a:8d:58:55:9a:08:17:7d:9b:f3:32:c3:67:9f:1f:b3:61:
         e9:c1:ac:ae:f2:2d:6f:f8:0a:7d:8d:91:fb:f4:7b:25:5a:84:
         70:a6:25:17:34:dd:f8:1b:f2:69:5b:b0:0d:d2:2b:6f:05:dc:
         be:64:6b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:01 2024 by rpki-client on console-fra.rpki-client.org