Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/90334c12-2777-3d88-b021-c88815b48721.roa
File:                     90334c12-2777-3d88-b021-c88815b48721.roa (raw, json)
Hash identifier:          H2r5IJMrOGPNqC4EJT3UdIMrC2rOupK1wms8xA9/TZ4=
Subject key identifier:   AF:C3:2D:75:93:3A:AA:F2:90:BF:2D:7B:B7:6A:4B:FB:3D:9E:1A:48
Certificate issuer:       /CN=5402024b-7d23-4041-8713-daddd547282a
Certificate serial:       010D0C9F43285847CD09F0F4F43EC53FFDCDB200
Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/90334c12-2777-3d88-b021-c88815b48721.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     7018
IP address blocks:        68.170.0.0/24 maxlen: 24
                          68.170.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f0:f4:f4:3e:c5:3f:fd:cd:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5402024b-7d23-4041-8713-daddd547282a
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=ba4ed2d9-2ec9-4b63-9c87-6536092a334e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:60:cb:2f:1e:89:e2:70:d8:b2:5c:4d:72:
                    32:dd:1f:3c:49:fe:72:dd:31:95:10:db:47:bc:57:
                    01:40:cf:62:52:50:c5:67:8b:bb:cc:22:8a:48:0d:
                    63:69:a8:9d:b4:14:10:d7:0f:8e:6a:1d:72:a8:81:
                    44:49:5b:a1:ce:6a:ad:85:9e:9a:70:ee:4a:f9:10:
                    e7:4f:b8:ab:09:91:5a:9b:36:84:fc:15:e1:19:62:
                    86:fc:28:80:7d:0a:42:44:75:0a:f5:d5:98:69:05:
                    ce:49:2c:c9:60:3e:15:b9:4a:d2:cc:cb:a6:68:fe:
                    de:07:b6:aa:ef:1c:05:3a:90:83:e8:87:e0:ef:82:
                    38:ec:05:c5:c9:f8:d1:23:eb:be:f0:dd:0c:b4:56:
                    b4:06:80:82:13:0a:56:63:d5:20:47:17:7d:60:87:
                    6d:6d:d5:8e:84:ab:a5:f3:89:a9:eb:31:46:83:bb:
                    81:04:b2:60:12:23:a5:63:98:fb:f5:03:80:cd:85:
                    46:04:52:9c:8a:ac:5f:07:2d:49:f7:11:fc:9e:3d:
                    30:35:1e:06:e5:89:8e:cf:c6:89:57:dc:c4:6e:93:
                    0f:b0:67:5e:cc:22:a7:51:28:93:69:15:70:d9:7a:
                    83:63:76:45:62:dd:b9:13:06:ca:fa:69:38:53:b9:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C3:2D:75:93:3A:AA:F2:90:BF:2D:7B:B7:6A:4B:FB:3D:9E:1A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/90334c12-2777-3d88-b021-c88815b48721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:6c:29:c5:7a:04:dc:68:94:59:dd:e8:18:9b:d4:35:28:50:
         6a:c0:b9:de:56:d9:b4:33:77:f3:fa:33:27:6b:eb:6e:c8:64:
         17:ca:32:3e:97:0b:30:a4:c4:96:af:b4:f0:91:64:2f:9a:1c:
         34:f6:b2:97:c6:2a:bf:48:46:55:fd:29:fc:ff:b7:a8:83:a7:
         50:d0:2d:ad:35:dd:1e:3c:69:2c:13:fc:41:51:9c:06:14:9a:
         ae:23:a6:e2:0e:85:85:24:7f:26:aa:f3:d3:a1:ac:89:4a:a7:
         1d:da:a2:29:f0:0b:3d:b1:f7:31:c0:d5:27:2d:77:c1:b1:e6:
         30:f9:06:2f:ef:05:83:20:be:65:0c:a7:6a:54:00:de:15:81:
         93:fe:a7:a4:a8:37:81:e6:40:a5:e5:e7:26:91:80:b2:37:a3:
         3b:44:5b:be:16:57:fa:16:00:fd:58:aa:9b:d6:4f:d0:b2:ce:
         9d:ec:9c:34:0b:fc:11:e2:3f:bd:34:a3:f0:aa:be:a3:2c:fd:
         ea:d5:0a:72:c7:84:1f:9a:2b:82:e2:e8:da:f1:05:63:a2:98:
         ca:d0:8f:cd:06:03:ae:a5:f1:eb:e6:c4:78:84:1b:b2:0d:31:
         b7:67:37:77:5e:27:39:ab:54:e1:a8:3d:84:1a:7c:a2:3b:18:
         e7:5d:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:47 2024 by rpki-client on console-ams.rpki-client.org