Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/90334c12-2777-3d88-b021-c88815b48721.roa
File:                     90334c12-2777-3d88-b021-c88815b48721.roa (raw, json)
Hash identifier:          Xf3n9OiGkmbpkx6GNfkDFAv1rj+iMyuVCW37WyT0z0k=
Subject key identifier:   B4:D8:83:9F:AB:7F:7C:6A:6F:CE:D7:F2:2E:9C:BD:CC:4C:D9:13:74
Certificate issuer:       /CN=5402024b-7d23-4041-8713-daddd547282a
Certificate serial:       010D0C9F432858452CBA3225DBFD069C38B8E280
Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/90334c12-2777-3d88-b021-c88815b48721.roa
Signing time:             Mon 11 Mar 2024 18:16:48 +0000
ROA not before:           Mon 11 Mar 2024 18:16:48 +0000
ROA not after:            Sun 09 Jun 2024 18:16:48 +0000
asID:                     7018
IP address blocks:        68.170.0.0/24 maxlen: 24
                          68.170.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:ba:32:25:db:fd:06:9c:38:b8:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5402024b-7d23-4041-8713-daddd547282a
        Validity
            Not Before: Mar 11 18:16:48 2024 GMT
            Not After : Jun  9 18:16:48 2024 GMT
        Subject: CN=ee90c4e6-b974-45a6-add1-e68d55097e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1f:4e:4a:55:c8:68:ce:55:e0:b4:4d:f1:96:
                    a3:0b:09:d4:5b:28:d8:18:51:72:da:14:73:c0:26:
                    9b:41:2c:7d:69:57:23:1d:92:94:8f:1b:7a:60:40:
                    db:c4:68:f7:8e:15:8c:18:ae:6f:76:52:16:5c:ad:
                    b9:13:b0:b6:0d:0f:bc:b1:89:72:3a:f7:af:b6:b5:
                    24:d6:05:6e:b0:b1:2b:52:e0:9e:97:2b:11:2f:05:
                    33:4c:1d:f9:73:04:1d:d7:22:b1:02:db:1d:56:07:
                    28:b5:1c:00:02:af:0d:bb:f2:6a:88:82:68:29:02:
                    3a:d1:36:db:e3:ac:89:45:f2:33:b2:e3:c0:39:9a:
                    e5:04:1b:95:32:57:8f:10:47:d8:92:04:9b:f5:18:
                    5e:32:54:fe:f8:8b:94:d5:6e:73:e0:ee:75:02:bd:
                    fb:91:fd:dd:63:7f:11:c5:fe:4f:8e:d9:d4:f9:42:
                    ed:e5:ff:fe:96:16:bc:74:dc:27:49:2d:b2:c5:a9:
                    46:7e:8f:5e:55:b4:ff:63:e7:96:10:71:fa:8d:46:
                    5b:0c:1a:27:4e:68:47:6a:3b:2d:95:6f:d3:e4:32:
                    00:6d:3a:e2:9e:6e:fd:f0:39:72:6c:81:c0:6a:e6:
                    44:27:d6:bf:e8:58:67:7c:5d:16:1d:80:5b:b5:3c:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D8:83:9F:AB:7F:7C:6A:6F:CE:D7:F2:2E:9C:BD:CC:4C:D9:13:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/90334c12-2777-3d88-b021-c88815b48721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a1:11:be:f8:f9:42:4a:ad:51:fe:55:99:c8:82:1c:38:1f:
         2b:48:45:7f:24:22:4e:0e:88:b2:e6:3f:97:0f:f9:65:7e:fa:
         66:3c:d9:8e:bf:fd:b2:60:8a:40:d4:d3:b0:5c:cd:07:c5:82:
         16:e1:8c:f6:de:88:29:93:90:d2:44:37:15:57:47:3b:6a:87:
         bc:ff:77:ae:9e:db:95:07:69:aa:08:da:6b:16:a7:c2:6c:4d:
         1e:99:56:32:f2:ba:58:c6:bd:ab:c9:ac:36:ec:5a:bd:df:eb:
         9d:bf:9f:e1:e2:ba:7f:a4:f8:29:00:a1:5d:93:35:fb:ff:94:
         35:c7:d5:2f:21:cb:9e:d6:85:9e:3c:14:72:aa:83:01:7b:f2:
         2e:d5:d8:0c:92:8c:7f:74:cc:b0:eb:3b:9a:19:73:d8:18:b8:
         b5:74:a6:a2:4e:58:b0:3a:a6:7e:50:2c:a7:e2:6b:23:a7:79:
         ee:89:24:eb:87:81:40:78:e6:57:7b:e4:aa:03:25:0e:c3:cd:
         4f:86:b3:fb:12:b8:87:3e:ac:10:2d:41:1a:6c:67:dd:f4:b2:
         6c:f6:d3:75:57:7b:e0:84:b6:54:16:33:6f:51:88:56:49:05:
         46:13:20:36:76:50:d6:76:b5:e7:9e:82:cf:e8:01:a8:b1:4a:
         67:c7:99:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:01:50 2024 by rpki-client on console-fra.rpki-client.org