Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa
File:                     643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa (raw, json)
Hash identifier:          GGbKR00EOgraxIWkKCjWtUabpODDlmKJbWqhlRthcjU=
Subject key identifier:   F4:38:B5:80:59:D9:74:EF:77:A2:F1:56:6B:2B:2B:18:0F:58:AB:05
Certificate issuer:       /CN=5402024b-7d23-4041-8713-daddd547282a
Certificate serial:       010D0C9F4328584572975A1C23BCB5CEE8FFC340
Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa
Signing time:             Fri 05 Apr 2024 18:53:11 +0000
ROA not before:           Fri 05 Apr 2024 18:53:11 +0000
ROA not after:            Thu 04 Jul 2024 18:53:11 +0000
asID:                     5650
IP address blocks:        68.170.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:72:97:5a:1c:23:bc:b5:ce:e8:ff:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5402024b-7d23-4041-8713-daddd547282a
        Validity
            Not Before: Apr  5 18:53:11 2024 GMT
            Not After : Jul  4 18:53:11 2024 GMT
        Subject: CN=3a48e8ee-9d02-4738-9591-311de7357157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:52:cd:05:d8:ab:a4:73:e0:1e:54:4e:80:
                    9e:bd:20:f7:63:31:c6:04:24:6f:8a:53:15:a2:f7:
                    1d:a2:19:d6:82:4e:9d:43:f9:e0:fb:2c:cf:f9:d5:
                    ed:f6:63:58:33:74:f0:cc:84:ae:e9:88:5a:7c:77:
                    15:b0:f9:4d:fe:0c:56:66:92:d2:05:64:7e:65:a1:
                    53:bc:23:e7:d3:79:fc:48:21:9d:5d:aa:86:87:66:
                    19:df:11:62:4e:e2:c8:e4:98:fb:05:69:fb:95:8e:
                    c4:5c:17:ab:5f:c3:c9:f9:d7:c2:5f:b2:36:bf:60:
                    b2:0a:7d:2c:da:b5:b0:f4:be:7a:0e:40:b8:2e:f0:
                    14:6d:55:f4:4b:5a:cb:18:e2:de:ce:5e:d4:88:4d:
                    76:31:16:b6:ce:c6:84:30:8d:cd:e2:02:f4:8a:24:
                    1f:73:3f:d3:18:af:8c:73:ca:2a:40:a3:28:b0:74:
                    f0:6d:39:77:c4:71:4a:d9:a3:e3:b0:36:a3:03:b7:
                    5a:83:d7:c1:53:a0:05:e3:89:ef:1a:69:5c:60:b6:
                    9f:0f:7c:2f:13:f9:1a:f9:36:b4:24:fe:1a:62:4c:
                    0c:f0:b5:b6:c3:5d:5e:6b:5e:b5:1b:37:13:26:d9:
                    03:ab:3f:f4:75:d0:3c:31:fc:f4:2c:f7:b9:02:67:
                    4f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:38:B5:80:59:D9:74:EF:77:A2:F1:56:6B:2B:2B:18:0F:58:AB:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ca:06:d6:24:87:f6:5d:05:94:7f:4c:ff:51:30:38:05:5f:
         90:01:90:02:14:37:be:9d:bd:23:24:e0:53:e1:6c:b9:07:1a:
         56:0b:1e:7a:b3:a8:0d:51:c7:b5:e7:3f:db:8c:2d:01:39:45:
         96:0a:3e:49:e1:3b:90:f9:1f:36:87:87:9f:1c:87:eb:d3:8e:
         4e:8c:9a:6a:38:9a:ed:17:50:94:b1:56:1e:c6:44:55:ea:3c:
         5f:ae:b0:8a:d8:b8:1d:59:b6:91:0d:79:0a:c9:cc:21:6d:61:
         7c:60:47:0e:34:7c:3e:0d:92:47:88:26:ee:51:90:fa:9a:0a:
         46:6a:26:64:03:d2:e4:9b:4b:e5:05:33:72:4b:52:5c:43:ad:
         bc:e7:5c:e0:19:9b:8f:10:43:0d:6d:45:8e:7b:6e:c9:fa:28:
         f0:9b:46:c3:94:d6:24:dd:06:83:f9:c4:8e:2a:18:db:a7:dd:
         7a:21:63:eb:d0:23:cf:79:08:69:50:34:60:85:85:7f:f9:a4:
         d3:22:8b:c6:e0:77:73:55:e2:91:b9:a0:5e:49:63:20:dc:d9:
         8f:cf:8e:f9:7c:ab:1c:68:0e:6b:b6:34:e3:11:06:28:90:e3:
         a9:33:9c:19:57:79:2c:2f:e4:3d:8f:dc:7b:8b:2c:7d:af:ea:
         29:f2:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:19:13 2024 by rpki-client on console-ams.rpki-client.org