Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa
File:                     f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa (raw, json)
Hash identifier:          2gk3MYIg8wTOJB1dKIrnsbbbYAwLXAOMUFVYGnDeAuA=
Subject key identifier:   C0:9B:E1:E6:7E:01:6D:C1:AF:A5:43:9F:61:06:57:75:A6:2F:53:28
Certificate issuer:       /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial:       010D0C9F432858476C9DB87EFDF339E8CD93B9C0
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     14618
IP address blocks:        68.71.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b8:7e:fd:f3:39:e8:cd:93:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d4908f1d-cf9f-4127-94b3-d5d53198f709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:55:82:1b:d0:34:83:e3:d0:d1:91:70:df:1b:
                    40:4e:e3:0a:1f:f5:57:92:26:bb:72:f3:b0:0b:05:
                    7c:c8:19:9e:bf:9d:16:28:a6:47:d9:71:64:7c:6a:
                    27:ba:1c:05:18:60:bc:6a:35:22:33:04:bb:85:f5:
                    aa:1c:48:90:a2:2f:2f:4e:ab:9f:19:82:c1:3e:90:
                    04:a2:e7:eb:14:e2:e8:b2:58:52:03:81:f7:3b:ef:
                    d8:03:5c:f1:7b:15:ad:dd:a8:17:96:ee:33:90:64:
                    ef:bc:fb:4c:0a:80:69:cc:86:f0:32:43:79:9b:4e:
                    2c:d6:e9:e7:f2:2a:18:55:4d:63:96:4e:19:61:dc:
                    82:be:15:f0:97:d0:e9:a0:75:00:aa:c8:65:de:73:
                    89:1e:ec:a5:dd:23:1f:f6:d0:b9:07:5e:31:21:cf:
                    83:93:9b:10:d1:21:72:e2:90:63:c6:4f:63:3f:ec:
                    2d:4c:5d:a1:7e:91:21:bd:ee:66:69:93:52:bc:16:
                    0b:b3:93:6d:eb:d6:69:28:53:2e:a7:5f:9f:e0:39:
                    21:37:7b:b1:e5:a9:31:58:1b:07:57:93:54:a6:5e:
                    50:2e:f6:26:1a:5c:f4:31:a6:50:32:00:52:40:df:
                    67:e1:e3:9f:af:9b:20:6f:4a:b8:1a:6e:e7:9e:06:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9B:E1:E6:7E:01:6D:C1:AF:A5:43:9F:61:06:57:75:A6:2F:53:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl

            X509v3 Authority Key Identifier:
                keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ec:75:f5:b2:7f:d9:2a:d0:6e:51:04:e6:d0:fa:09:dc:5c:
         47:67:92:f6:7e:38:ce:25:29:ba:b9:a7:bc:82:f6:d4:44:35:
         f8:0f:8e:e5:70:26:d1:1d:ce:72:7b:6c:c3:d5:a2:bd:82:69:
         f8:25:4a:9e:5d:4f:8c:c1:3f:12:c7:05:13:f9:7c:15:de:7f:
         5a:fa:56:ce:de:37:7f:87:28:c4:79:c5:02:ca:7b:04:d7:68:
         71:a1:a4:f0:dc:de:8e:72:62:ee:17:7b:16:9c:52:13:9e:bd:
         3d:92:6b:f8:73:36:9f:ea:45:ba:ef:d6:b9:61:ee:c0:bc:ed:
         dc:f2:f5:b6:99:b7:c0:d0:92:c5:a3:3d:35:39:07:11:a6:71:
         56:eb:de:02:ac:8f:42:be:ce:77:b0:7c:d7:97:31:34:8a:bb:
         38:25:7d:5e:98:a0:0a:39:0d:1e:7d:83:4d:66:76:c9:8c:42:
         0f:77:42:f5:ab:8c:33:44:9f:22:b0:77:96:4a:71:84:02:4e:
         76:28:ed:88:05:7a:59:cb:f3:51:72:b6:8d:b1:7f:21:1f:b8:
         67:db:3e:7a:5a:eb:10:5b:c4:bf:d0:e0:33:b1:28:6d:98:92:
         95:69:34:d6:d9:13:a6:66:c9:c9:c3:8a:ca:d5:42:ff:15:49:
         46:62:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org