Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa
File:                     b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa (raw, json)
Hash identifier:          9dQSNGeDrVQIigFkQJ1Tm3CIgzcDrEJLsF4vckFWhAs=
Subject key identifier:   CF:F1:10:2A:A8:34:CB:32:F0:29:EB:7B:22:AE:44:DA:EA:A3:94:F7
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858478E1BC59A376B95EF6F42CC00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     26744
IP address blocks:        68.170.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:c5:9a:37:6b:95:ef:6f:42:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=9033b6d4-97f4-414b-b23a-82f3dce74bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:be:ec:7c:9c:dc:22:7f:01:dd:e9:64:42:91:
                    02:2b:a5:79:98:23:f6:38:fa:b7:f6:79:5d:c5:3c:
                    cc:1e:bc:db:b3:f0:f9:02:e4:6c:4f:c7:4d:f8:1d:
                    ef:54:90:55:1e:eb:25:63:2c:75:7d:08:60:01:85:
                    92:e5:cc:12:6b:4e:c7:6a:b1:57:27:0c:54:0f:3c:
                    e4:0d:b7:82:8b:a1:61:68:f4:19:07:8f:27:3c:c9:
                    3b:d0:c9:f8:b2:d8:04:22:c2:b8:c7:9d:88:66:33:
                    25:98:b5:56:e5:9c:dc:32:3a:29:7d:6b:17:42:a5:
                    3d:4e:3f:3c:b0:ce:6e:cc:76:55:a6:bb:3b:3d:c5:
                    02:c5:35:ad:99:0d:5d:b5:7c:31:4d:a8:6c:a7:98:
                    ae:8e:3b:ef:5f:37:63:52:a9:40:04:32:38:8b:1c:
                    2f:11:20:22:bc:8f:0a:11:dd:d8:b2:3f:ca:8e:a3:
                    da:4d:3e:ab:39:89:58:b9:98:13:cd:71:99:d9:9a:
                    22:b6:0c:cf:a0:69:e6:8c:90:91:99:70:d8:e3:d9:
                    1a:77:58:25:a5:dd:30:80:8b:07:2c:b4:26:01:a6:
                    b3:05:2b:f2:73:88:ae:d8:2c:9b:c0:b4:2e:a0:19:
                    d5:3d:bd:c9:c3:1d:d0:a3:d4:31:4a:c2:fa:f0:e8:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F1:10:2A:A8:34:CB:32:F0:29:EB:7B:22:AE:44:DA:EA:A3:94:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:2d:83:be:db:4c:44:79:a3:23:a5:e7:2d:64:cc:f3:9b:bf:
         a4:67:3d:0c:1d:c2:8e:1d:15:3f:7a:d5:46:f2:36:df:9d:35:
         37:b4:a2:4d:13:ca:95:a5:d2:9e:21:46:f9:41:e4:fb:8b:d5:
         3c:97:89:28:43:f9:41:51:87:69:f0:cc:6f:de:c3:91:33:87:
         d7:27:33:ee:ea:68:91:28:33:ba:f4:18:31:45:66:1d:7d:e7:
         15:a7:5e:f3:06:88:36:5e:59:3d:55:6d:8a:52:2e:23:8b:22:
         a0:c7:e7:f1:d2:47:9b:80:bf:9b:0d:4c:63:1c:b3:2a:1a:80:
         dd:62:6c:a7:fe:3c:82:d0:68:16:07:1c:01:0b:08:ce:ab:94:
         bb:68:62:e4:1e:dd:1d:33:55:9f:cf:75:07:fd:eb:86:88:4f:
         a9:08:a2:ba:eb:bf:2f:37:ee:04:72:3c:3e:95:c8:18:13:44:
         8e:68:bb:91:3b:7a:06:fc:a1:fc:d8:3f:00:50:80:91:cc:e2:
         26:53:30:d9:0b:3e:1b:24:c8:53:42:f2:1d:c5:88:a4:cc:93:
         f5:2c:2e:a3:61:e5:b2:2e:78:52:94:a4:65:d6:e1:27:d6:2b:
         20:d3:34:1e:37:c9:6a:80:51:d6:b0:d6:e0:15:08:2c:2e:26:
         7c:2c:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:49 2024 by rpki-client on console-ams.rpki-client.org