Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa
File:                     b0219dec-4d15-370a-af72-f5dd0679b13a.roa (raw, json)
Hash identifier:          pgkHJP4FftY4h992eTXGkWHEIESgsPCo2LPEbFOjw2Q=
Subject key identifier:   26:A8:B1:F8:E2:2D:49:ED:D7:A4:B7:FC:CE:5C:91:35:92:2F:F5:11
Certificate issuer:       /CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
Certificate serial:       010D0C9F43285845B21E216ACF1A5EB7BF0F8700
Authority key identifier: B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     20388
IP address blocks:        68.70.123.0/24 maxlen: 24
                          148.59.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:21:6a:cf:1a:5e:b7:bf:0f:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=f2f77eaf-e841-44a0-9163-f5609e8e2f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:40:d6:b9:87:9a:fc:d2:3c:a7:db:12:56:
                    3c:76:5a:61:af:54:3d:de:fc:bd:57:ae:88:b0:83:
                    39:cd:6d:46:a1:92:14:fc:52:cb:e9:5c:34:70:be:
                    24:04:63:5a:24:eb:a6:09:a3:41:04:5f:0b:25:0b:
                    8b:68:d7:ee:90:0c:34:d2:e8:7a:e7:08:2a:c1:c8:
                    fe:1b:4b:7a:b2:f1:9d:02:79:74:64:b2:ff:bf:a9:
                    9a:57:96:0c:1d:00:8f:f1:30:4f:f0:98:b9:85:77:
                    47:8a:9a:ae:87:b3:f7:39:e0:11:81:34:0e:90:12:
                    73:ae:ff:fc:11:1f:01:8b:1b:2c:70:61:87:20:a0:
                    3d:ce:08:a4:33:69:f9:2c:73:0b:27:09:a8:f9:b7:
                    b9:ff:5b:9a:25:5f:0b:a5:4d:c7:c4:91:06:23:1d:
                    8c:2c:2e:cc:22:c1:83:4f:00:2c:b4:67:9b:59:3c:
                    dc:a4:99:22:d1:da:bd:23:a9:79:09:ea:c0:7c:d1:
                    0f:58:3c:fa:20:ef:df:ea:16:7b:33:37:c5:8b:86:
                    c0:75:88:d3:46:53:2b:9e:04:51:84:51:d3:9e:d3:
                    36:5e:30:49:e3:cd:fe:8d:4d:a6:6b:e1:4c:75:95:
                    76:a9:43:9e:97:cb:ab:e3:44:1c:3f:b0:d8:81:3a:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A8:B1:F8:E2:2D:49:ED:D7:A4:B7:FC:CE:5C:91:35:92:2F:F5:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl

            X509v3 Authority Key Identifier:
                keyid:B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.123.0/24
                  148.59.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:03:fd:e6:5a:2b:64:8c:17:49:cd:0d:80:fb:24:ec:e9:23:
         af:4a:0b:f8:84:1a:6a:d6:86:23:09:b6:fc:00:df:01:1d:b6:
         65:00:c7:ec:0e:f3:01:87:e2:26:b4:6b:4b:c6:92:79:0c:23:
         d4:a0:72:84:00:b7:54:9d:a4:97:06:3a:1e:e5:fb:c6:8c:29:
         25:ee:84:31:92:5b:f9:a7:54:69:f4:46:7a:0d:94:c7:2c:0b:
         75:44:a9:2b:2d:65:46:7d:6a:87:fb:9b:33:31:15:2b:35:c6:
         b7:f3:ad:8a:de:ee:35:ee:4f:23:39:09:4b:66:20:b0:df:8a:
         35:bc:3a:50:da:da:86:ee:4d:28:c3:6d:a6:22:69:ca:99:c9:
         99:75:79:88:a4:08:dc:1d:42:96:60:eb:64:08:c3:d6:1e:39:
         dd:5b:d0:df:13:a5:97:42:df:4c:4a:fd:67:95:6e:9f:34:cc:
         18:bd:52:35:d8:5a:5a:5e:81:2c:c5:1a:76:0d:be:ae:58:0b:
         83:6f:16:d6:4c:12:07:70:9f:c3:13:a2:0e:a0:20:2d:08:9b:
         96:03:ca:c2:26:dd:dc:03:dd:14:a5:c0:ca:f9:21:32:8d:dd:
         62:a9:25:ac:d6:cc:96:39:b3:f2:62:37:3e:02:0f:bd:19:2e:
         93:70:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:20 2024 by rpki-client on console-fra.rpki-client.org