Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa
File:                     9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa (raw, json)
Hash identifier:          nbsDlXoLQRBvZy8hRtisolNb525vbp1SEkFvBHI1duU=
Subject key identifier:   75:99:A2:DF:3F:D7:AC:63:A5:6B:E4:E2:38:17:50:9A:B7:4E:DD:B5
Certificate issuer:       /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial:       010D0C9F43285847537B7F7BA8363E1F64887680
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     3565
IP address blocks:        208.68.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:7f:7b:a8:36:3e:1f:64:88:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=dcd304a2-d34c-4efc-b657-0f8a36a6220b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:dc:1a:3d:36:27:ef:68:23:a7:c8:80:c0:
                    f2:ca:42:42:80:6a:75:e2:86:fc:8f:19:5c:98:14:
                    1a:14:26:7f:03:a6:10:c9:09:1b:b6:ed:a9:77:ad:
                    4b:3d:03:ba:00:9f:f9:59:6a:77:d5:89:31:8e:ee:
                    e9:04:37:c9:01:b3:a7:ee:4c:62:06:26:fd:b9:94:
                    0b:12:e7:ad:91:62:8e:4b:ef:ac:2e:9e:b3:ee:89:
                    0a:ef:83:e5:f8:9b:39:b7:82:8d:c1:02:1b:63:8a:
                    66:a6:b4:c4:56:bd:6b:8e:86:8c:f0:c5:e2:95:ea:
                    c7:c2:74:db:93:94:50:09:5c:ef:91:96:fb:25:0b:
                    ac:e6:29:86:cf:4e:08:60:cc:f7:c4:c2:1d:c0:67:
                    4d:c5:e8:2d:b1:dd:25:40:e0:43:5e:f9:d6:96:fd:
                    1a:a3:1b:39:b6:1d:d5:0c:c1:12:48:fc:28:05:52:
                    e2:9f:78:cf:79:15:f8:23:0e:40:f7:0d:2f:03:f8:
                    99:6a:42:0a:32:5d:0c:a0:38:d1:be:9c:a5:a6:d7:
                    36:43:46:a6:a8:45:63:99:38:5e:44:e8:24:5a:76:
                    d5:9c:1f:ce:6f:93:8d:b6:aa:ea:a4:1b:61:c8:c7:
                    cd:2b:16:ba:72:44:54:24:9d:43:f6:df:2e:90:0d:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:A2:DF:3F:D7:AC:63:A5:6B:E4:E2:38:17:50:9A:B7:4E:DD:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl

            X509v3 Authority Key Identifier:
                keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:36:a9:9d:dd:41:87:8f:ec:aa:5d:a9:b1:c0:6e:b0:40:6a:
         e1:ca:f4:a2:ce:44:ce:9e:c5:25:85:63:69:b6:50:44:88:95:
         7b:1d:d2:bb:df:5a:d2:34:d1:7a:c1:49:a6:9f:32:e4:0f:01:
         c8:9a:44:50:53:d5:3d:e0:1f:62:0f:e6:75:12:0e:0f:f1:71:
         f1:85:31:4a:55:18:86:c9:54:a4:ce:85:d7:56:19:2e:77:0c:
         00:7d:b3:fe:64:7a:35:a1:74:dd:02:7d:31:33:f3:4a:11:b6:
         d8:23:e7:31:4f:8f:01:b4:8c:c3:63:ba:61:70:0e:dd:1e:4e:
         7c:cd:3a:ea:93:01:74:56:1a:23:69:8a:53:7c:a3:e8:b7:57:
         17:88:30:48:30:f0:28:91:42:b6:b4:26:67:f1:d3:aa:32:e0:
         5b:e7:97:dd:15:6d:e8:4f:6a:88:cc:e9:56:b8:bc:80:32:f3:
         5c:26:7c:e1:4e:51:25:0b:cb:70:81:bc:a0:43:bf:dc:b4:4f:
         26:6f:a8:e7:97:72:1a:cb:fd:1d:1f:36:96:eb:28:4a:64:28:
         31:e2:ab:d8:c6:73:2c:3d:9d:9e:ff:31:b3:be:4d:d3:78:f5:
         f1:12:6b:a7:e3:ea:94:23:5f:34:fc:17:1c:1c:bc:be:a4:d5:
         75:86:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:59 2024 by rpki-client on console-fra.rpki-client.org