Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa
File:                     b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa (raw, json)
Hash identifier:          nNoX3rhnAoU1mCf6I64jsvR/zLmcmz0nt7M0kSPmfOs=
Subject key identifier:   D6:0D:86:AA:A7:85:27:93:4A:1B:81:DC:4B:73:64:B7:62:3E:BC:D7
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285845CF6E4209D833AF786801E280
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     26744
IP address blocks:        68.170.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:42:09:d8:33:af:78:68:01:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=1b6da708-abba-4580-b6ca-4185aa6d9434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9b:06:44:8e:ba:33:3f:6c:c6:7a:78:6e:c5:
                    60:96:d7:cc:41:13:61:82:c9:0a:b8:78:d0:87:20:
                    74:94:c3:7e:d1:16:13:2a:62:90:5f:8f:61:54:cf:
                    71:33:f0:b7:03:ba:e7:3b:ce:79:c7:cd:c5:cd:f2:
                    9e:0d:09:3b:af:ae:44:c6:8e:85:73:16:b5:68:a4:
                    df:e6:b1:d3:22:3c:7f:ae:77:e8:52:2e:4e:1d:48:
                    36:bf:b0:d7:05:c7:23:76:98:8f:41:af:f2:76:7f:
                    95:24:ec:9c:46:ad:e7:31:28:70:8b:bb:ba:ab:50:
                    d5:d0:63:c2:21:61:58:9f:42:df:8a:a8:24:a8:40:
                    80:63:d4:c4:0b:bb:2c:24:1c:86:9c:01:f0:da:e0:
                    c1:2f:56:eb:cc:c2:14:b7:40:0d:50:71:42:56:1a:
                    71:46:69:4e:41:d3:9f:5f:fa:21:fb:fe:6b:af:1c:
                    cb:f8:0e:7d:62:2c:c6:01:4d:cd:66:8d:17:df:22:
                    2c:9a:4e:be:90:7a:c2:8c:cd:bb:70:78:a0:e5:df:
                    96:ac:1a:c0:ab:c3:b4:e2:91:91:da:1f:3a:90:77:
                    d9:72:3e:9e:92:82:5f:1f:61:0d:fa:17:9f:34:57:
                    75:ed:a7:6d:a6:5c:b7:92:62:9e:3e:87:65:b0:e8:
                    c3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0D:86:AA:A7:85:27:93:4A:1B:81:DC:4B:73:64:B7:62:3E:BC:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:9a:af:6f:d4:5e:74:88:1c:c5:de:6a:2f:0b:a5:3f:ca:
         fb:5f:64:39:68:3c:5c:e0:03:a9:8f:95:40:f6:be:dc:39:df:
         79:35:9a:de:8e:07:f4:57:f2:89:a5:b9:e7:da:94:3a:10:18:
         9c:26:73:64:db:19:34:54:75:8e:ef:17:b8:3e:a9:84:0d:3a:
         29:78:a3:63:15:23:c0:8c:d3:34:0b:78:e4:87:43:8b:3f:f2:
         7f:76:4d:84:d5:c9:9f:e5:97:bf:1c:70:16:04:77:23:82:c6:
         3d:63:6b:8d:51:89:4b:26:4e:39:73:18:59:9c:2c:e8:e9:c3:
         e5:e3:8a:18:79:ee:05:f3:0a:29:d2:b8:4e:7a:9e:47:ee:59:
         af:f7:11:0d:ef:ed:da:eb:00:fe:d2:a9:cd:e1:7b:ae:a3:a5:
         f5:54:67:88:3c:1f:db:f9:ee:d0:b8:77:15:9c:78:37:9c:7d:
         d1:68:4c:31:3b:f4:28:d3:5c:f0:e2:ff:40:89:02:d5:1f:45:
         6d:5d:3a:e4:a2:48:50:6e:79:07:00:2d:2f:a3:14:45:ff:92:
         40:28:7b:6f:80:8d:e0:77:a7:78:72:1a:d5:cc:08:b1:e8:ce:
         93:cb:a1:0c:81:82:82:4f:fc:00:01:9a:7d:00:ca:95:3e:0a:
         14:b2:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:45:56 2024 by rpki-client on console-ams.rpki-client.org