Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa
File:                     8b9703ea-15af-3104-8c2a-8494561f93c3.roa (raw, json)
Hash identifier:          rxRuOUO7NrLoa6fgbvmuKKySoRbYRaejC5A4i2WWu4o=
Subject key identifier:   73:C0:D3:E2:AD:B0:1D:CE:09:41:30:80:F0:A4:F3:8C:96:4C:30:6C
Certificate issuer:       /CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Certificate serial:       010D0C9F4328584574B31B4A9C9FFB8DEBCEFB80
Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     32098
IP address blocks:        68.64.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:1b:4a:9c:9f:fb:8d:eb:ce:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=ca540fc9-6d2e-46b2-ad36-f352241c5b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:06:e3:e5:27:95:8e:29:86:d7:55:65:98:
                    cd:de:c6:2f:a8:02:c8:9d:84:c3:39:40:12:e8:a2:
                    69:5a:46:53:17:51:1d:08:45:77:63:e6:a3:fe:41:
                    74:2b:a1:57:0c:4a:06:16:19:ab:c0:35:b0:23:27:
                    35:92:96:93:86:79:cd:78:65:84:62:f0:fc:b6:15:
                    73:55:f3:55:0d:d7:db:cf:9a:ff:73:9f:fe:ca:0f:
                    bb:28:b0:0e:f0:2f:c9:63:c7:b6:2e:2c:f0:78:76:
                    8e:3f:72:13:72:ff:db:51:e2:4f:ce:96:d9:9f:19:
                    84:a8:37:c0:58:17:83:0f:47:2b:ba:ad:9b:1b:19:
                    bf:04:79:03:9b:49:48:56:80:b0:27:08:59:22:9a:
                    49:ba:a4:ee:58:c6:f7:3c:a8:ec:35:29:bd:3a:4c:
                    03:0b:7d:3d:cb:36:01:7d:cd:15:b4:5d:ca:ba:8a:
                    76:05:05:e9:41:93:9e:dd:4f:72:ed:5c:56:8e:09:
                    85:7c:88:9c:cd:47:da:45:d5:0c:0e:69:83:f2:4b:
                    0a:86:76:05:08:ac:42:e4:b7:4b:41:a3:d1:23:3d:
                    a0:da:ef:ba:2b:60:f4:15:04:5a:31:46:2a:bd:b8:
                    48:75:ee:66:2e:99:8f:c8:98:e8:bb:36:a5:dd:a6:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C0:D3:E2:AD:B0:1D:CE:09:41:30:80:F0:A4:F3:8C:96:4C:30:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl

            X509v3 Authority Key Identifier:
                keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7d:43:bf:72:2d:d2:13:31:2c:82:43:37:95:52:ad:fc:32:
         06:5e:e8:d1:8c:a2:41:21:fb:50:16:ac:63:10:d6:53:65:88:
         5e:c9:5c:26:64:25:cf:55:92:b1:c9:14:0f:7c:9e:48:79:30:
         0d:b9:36:8b:65:9a:7d:48:5b:c0:4d:e7:0e:e3:3d:40:28:33:
         b9:33:c4:bf:ae:94:67:6e:0f:4e:29:e0:a5:a0:3c:c8:54:0b:
         8b:4b:81:83:07:4f:e9:8a:36:6f:cd:33:db:6f:55:2d:8f:95:
         2d:f5:3a:d4:b5:60:fe:b6:14:fc:af:18:75:18:44:72:2f:8c:
         06:14:dd:b5:d1:44:41:60:c2:61:6a:9c:16:c7:bf:45:19:08:
         5d:b1:9a:e1:39:eb:3c:29:9e:f6:6a:e8:74:16:74:d6:b4:a8:
         a0:68:dc:27:f3:ad:3b:8b:40:f2:07:9f:85:bd:ed:fc:5c:a9:
         28:64:0e:77:96:23:a4:60:1e:1f:9e:62:67:3e:f3:b5:fb:be:
         d8:c9:bf:38:c3:bd:8f:d9:0f:f0:4c:00:93:00:31:c5:64:0d:
         c2:01:b9:45:94:91:63:08:ba:14:0b:7f:3d:4f:63:e9:52:03:
         86:f8:40:e2:33:90:81:39:ed:00:52:5d:da:42:d6:8f:29:30:
         76:ad:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 07:07:44 2024 by rpki-client on console-ams.rpki-client.org