Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/1d3fd2df-7446-3caf-b208-46d3cef9468b.roa
File:                     1d3fd2df-7446-3caf-b208-46d3cef9468b.roa (raw, json)
Hash identifier:          YoTuFiXWBniOavOVYc6hufuXFxTVDTiaaxTpPTfxWFI=
Subject key identifier:   E9:74:AE:4F:5A:B5:17:83:E8:E7:E5:B7:E8:6E:06:CF:E7:8F:32:89
Certificate issuer:       /CN=2686c5f2-35c8-4282-ae9f-58a0bf99be68
Certificate serial:       010D0C9F4328584774FB9248FF88208D0E9A8E60
Authority key identifier: FD:76:BF:EC:61:37:91:9A:53:C9:22:3B:74:78:4F:DE:C2:36:CF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/1d3fd2df-7446-3caf-b208-46d3cef9468b.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     1706
IP address blocks:        208.68.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:92:48:ff:88:20:8d:0e:9a:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2686c5f2-35c8-4282-ae9f-58a0bf99be68
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=5ec475f8-edc0-436e-92cb-70d710433bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:98:cd:74:67:d9:2c:81:0c:85:2f:98:3f:
                    b4:1b:0b:88:79:f8:ca:42:a7:c3:1b:20:ef:f2:27:
                    64:72:61:82:4d:a2:fb:56:a8:dd:f9:ab:23:79:34:
                    60:be:2f:4c:96:24:74:9e:9f:1c:7a:44:5a:b4:4a:
                    01:70:5d:a2:10:d0:38:36:f5:c7:b5:98:68:d8:49:
                    89:72:6f:53:6d:b6:21:d4:43:24:02:19:85:78:bf:
                    58:bb:6d:60:06:29:c4:c4:d4:6a:4e:41:f6:e5:be:
                    5c:d1:7c:94:8e:88:ea:a3:a1:84:6e:9d:7e:8d:bf:
                    02:7a:d5:53:7e:7c:40:aa:01:f5:ef:9d:b2:0a:7c:
                    48:a2:a5:d2:96:b9:6e:1a:df:5d:3c:bf:40:fc:ad:
                    9f:d4:94:d0:42:c1:02:1d:d8:33:75:af:e1:b9:1d:
                    20:1e:8d:e0:ed:39:93:34:37:61:2b:f7:71:12:e0:
                    b0:dc:23:00:02:9b:5d:8c:b4:88:8d:74:fa:d2:6c:
                    11:e5:8f:8e:25:9c:b0:1b:29:40:b0:78:dc:0a:8e:
                    c4:67:a5:7c:4f:ab:e2:10:01:0e:18:c3:e1:29:51:
                    d3:69:1e:79:db:28:60:e8:dc:8e:f0:69:9f:da:d0:
                    58:28:f6:9d:3f:3d:05:4d:c5:98:0a:7c:6f:b7:3f:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:74:AE:4F:5A:B5:17:83:E8:E7:E5:B7:E8:6E:06:CF:E7:8F:32:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/1d3fd2df-7446-3caf-b208-46d3cef9468b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.crl

            X509v3 Authority Key Identifier:
                keyid:FD:76:BF:EC:61:37:91:9A:53:C9:22:3B:74:78:4F:DE:C2:36:CF:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e9:36:5b:9c:0a:83:64:38:cf:10:08:0c:6a:05:88:c1:97:
         16:d1:af:7a:35:63:c9:d5:73:c7:e1:12:b6:23:5b:f7:82:50:
         8a:6a:3b:77:ea:c3:e0:56:fe:f1:a4:c8:07:79:98:6d:00:6a:
         f7:01:8f:ed:71:a7:08:50:23:7e:17:d5:ea:46:e1:af:3d:a9:
         46:0d:e5:5d:f0:a9:8f:20:e4:fc:98:9e:32:05:27:3d:ff:11:
         05:71:2f:3e:4f:48:31:71:8a:c1:83:7c:c1:3e:69:32:87:a7:
         6c:88:5a:1a:82:7b:60:ae:2f:83:bb:06:47:a7:69:2c:36:e7:
         c7:92:c2:c8:9f:24:f5:0a:82:f5:40:43:17:8b:0f:b2:00:f5:
         04:0f:02:8f:08:ef:66:37:d8:0f:f3:1b:cc:31:0f:59:c2:d7:
         8e:60:07:4e:b6:d3:5b:04:65:d7:f5:cf:7e:08:d1:7a:f6:d3:
         49:10:4e:85:ce:a0:0f:8f:56:a8:19:6d:3a:8b:db:94:bc:30:
         27:0f:aa:59:19:3e:b2:cb:29:94:00:c2:f0:40:dc:a7:81:b4:
         bd:fb:af:bc:51:fe:8f:30:6f:b4:f8:85:95:26:5e:c2:9b:5a:
         17:25:a4:15:46:22:f0:e9:3c:17:c7:88:a4:13:dd:52:a3:51:
         aa:a5:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:36 2024 by rpki-client on console-fra.rpki-client.org