Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa
File:                     308c77f3-049f-350a-ba83-1535cc6dfb51.roa (raw, json)
Hash identifier:          9Gb3BTLtsm6gWPM0VShOYjZFFQJR6QaryICRjZCFj3o=
Subject key identifier:   96:EC:44:91:E5:75:87:F2:6E:03:CE:F8:1C:ED:F8:1F:F4:52:87:6C
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584762D6638B5B196D6EDA5F4780
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     26744
IP address blocks:        68.170.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:63:8b:5b:19:6d:6e:da:5f:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=36f8fbb6-2b54-4ddf-a488-e3ae9d0b2530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:5c:ff:6e:86:4a:92:3f:fe:c2:e2:3f:33:
                    fc:d7:3f:64:7b:5a:92:36:b8:6c:dc:b0:4e:77:90:
                    29:5b:35:d7:3a:fb:8a:04:7e:79:34:58:d4:0e:a2:
                    be:58:83:32:5a:40:6e:3e:e9:fe:87:bf:77:a1:57:
                    c8:64:e0:6d:40:07:e6:29:b6:02:2f:b4:81:ff:4f:
                    1a:57:c1:ab:82:91:25:72:18:c0:cb:a7:2c:9e:bb:
                    dc:22:c8:cd:05:a2:1a:2e:2b:e6:de:1d:f0:c6:9d:
                    39:c3:29:a0:94:ce:2d:d4:1d:8e:bd:e6:10:b2:94:
                    e5:0e:0f:8d:3f:62:fe:34:37:b4:2b:68:d1:3f:da:
                    ea:15:5a:4f:50:f4:a6:0d:a5:ec:db:9e:51:67:5d:
                    19:16:4e:dc:e0:7f:ea:a5:3f:e1:df:cd:fa:4e:9c:
                    48:c9:64:e0:77:ab:e8:98:e9:30:84:5a:2e:eb:47:
                    2c:c7:e3:54:40:25:24:1c:d1:7c:de:db:36:ca:5b:
                    e6:c5:61:57:14:c8:d3:7a:23:c2:75:fa:03:bf:9e:
                    aa:03:64:16:20:79:b5:ee:e4:71:e2:32:ff:09:7c:
                    7c:4c:73:d9:24:6d:d2:f4:90:c3:8e:64:cc:32:04:
                    b2:53:01:be:32:1e:13:ef:e2:78:ae:44:25:49:9e:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EC:44:91:E5:75:87:F2:6E:03:CE:F8:1C:ED:F8:1F:F4:52:87:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:25:8f:a9:bf:95:58:56:12:4f:11:19:a4:d7:1a:e7:91:48:
         5c:16:de:1f:70:58:4e:4f:d5:34:4f:6f:53:32:ee:db:ab:9b:
         26:6a:74:7f:ba:98:68:22:09:e7:7a:cc:d6:c6:d9:b6:a8:54:
         e9:56:db:20:ef:30:0d:8a:03:65:fb:1f:00:76:66:27:c2:53:
         a4:fe:d0:df:71:e8:c0:cd:35:84:f9:a0:cd:52:a7:7d:38:e9:
         20:e3:0a:fa:a0:e5:30:c9:c4:d6:0c:58:90:fb:9e:b3:e2:78:
         84:f3:06:71:a5:68:a8:5f:db:8f:60:73:11:f3:73:fd:cd:1a:
         94:2c:d3:b4:65:ec:9c:cc:c8:ec:8e:96:ac:4b:07:b6:2e:f5:
         50:99:00:d5:84:cb:aa:66:d3:92:7c:6b:42:fd:5b:39:69:e8:
         2c:cb:cf:0a:94:6d:5d:f4:da:8f:ad:c7:5e:9d:b6:f8:34:d4:
         25:b8:cc:69:58:6f:26:56:25:e2:d6:66:74:68:24:5a:ea:13:
         07:d4:46:20:1c:da:2a:dd:59:e4:f6:be:c3:aa:00:18:3f:9b:
         a0:a6:76:64:76:18:dd:90:9b:29:3f:72:e6:41:c5:8e:37:93:
         c7:0d:e1:bf:6a:c3:ec:1c:ec:09:5a:af:2c:16:5b:f4:ca:03:
         03:b8:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:48 2024 by rpki-client on console-ams.rpki-client.org