Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/878b6ebc-cf3d-3b90-9136-a78ff9120482.roa
File:                     878b6ebc-cf3d-3b90-9136-a78ff9120482.roa (raw, json)
Hash identifier:          DUlb9cAsEueD2ry9JlisCZTRlFDAAlp18kLmYNaFSbE=
Subject key identifier:   4E:90:F8:20:52:34:EB:88:D6:49:AE:9D:DA:BD:09:DB:60:92:BD:80
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DD83356E1CA3667CD4680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/878b6ebc-cf3d-3b90-9136-a78ff9120482.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        68.168.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:d8:33:56:e1:ca:36:67:cd:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=644986e8-39ac-4192-86ba-2684f71e2bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:72:67:24:82:05:ab:f4:e0:04:eb:d8:a6:
                    17:9b:9e:60:f5:63:ba:fd:c7:87:de:90:2f:05:a2:
                    48:5e:a1:f7:f1:8a:36:a8:90:12:5f:3a:bd:71:ca:
                    e9:a4:5f:55:fa:88:e0:95:16:b2:b8:37:4e:ab:5f:
                    58:4d:b9:d1:fe:b9:48:b4:77:2d:a7:71:e0:85:21:
                    39:ff:24:43:45:b6:36:c5:37:94:99:49:8d:12:16:
                    34:4f:7d:55:7d:4c:4f:0d:17:cd:f5:e4:49:2b:4e:
                    e9:91:15:cf:25:ed:02:64:18:ee:62:ec:a7:a6:f1:
                    7a:32:ba:ad:a2:58:da:83:dc:88:fe:4f:77:1b:c5:
                    11:91:74:79:c3:77:45:c3:4d:c6:ab:39:f7:e8:11:
                    30:92:97:47:60:23:57:e2:e5:69:70:4b:72:35:17:
                    c7:26:47:28:d0:aa:bb:eb:57:51:e8:10:d8:0b:65:
                    e9:a4:ea:b6:4a:29:ff:30:37:f2:cd:55:62:c2:02:
                    02:2d:57:b8:37:6b:90:54:76:a4:ce:20:c0:d8:a5:
                    37:66:b3:47:96:f6:f0:ce:31:75:64:65:3a:8c:aa:
                    2e:4c:63:e4:d9:72:e0:4c:15:02:93:1b:03:23:5e:
                    43:da:bd:70:28:a3:74:3d:64:ab:ed:a4:09:ad:16:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:90:F8:20:52:34:EB:88:D6:49:AE:9D:DA:BD:09:DB:60:92:BD:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/878b6ebc-cf3d-3b90-9136-a78ff9120482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:09:05:c1:94:f0:73:23:78:f9:1c:b1:6d:ed:1d:c8:cf:7d:
         3f:2f:e5:88:c7:f0:7e:4a:1c:1a:1b:c8:1a:6d:b2:45:20:08:
         8d:00:8e:6b:6c:95:2d:f5:d9:3b:09:06:45:63:ae:95:5f:bf:
         b3:ae:eb:11:7a:13:3e:a0:70:98:97:be:62:77:dc:6f:b1:3b:
         a2:9c:85:1f:e7:2f:ea:e4:3e:7c:b0:f2:d6:1a:35:16:43:3c:
         68:75:f8:65:c4:51:03:12:5d:9d:18:5b:58:b7:8f:43:9a:2a:
         f1:91:19:ab:80:bf:ac:c9:94:24:ca:21:5c:74:42:b5:da:c0:
         f7:76:e1:96:fb:6d:d3:7c:c2:85:29:f8:34:39:d5:a1:ab:8f:
         af:54:85:cf:e7:dc:81:6a:26:70:19:e2:9b:5c:8c:40:11:d5:
         dc:8a:76:b1:ba:ee:05:d8:21:46:a3:f9:77:23:28:62:12:cb:
         95:63:62:ae:f9:88:13:d9:ac:4e:e3:59:e4:b7:a4:c1:a0:e2:
         0f:08:7c:6e:7a:e1:d5:df:1b:25:25:50:e7:10:af:a5:ce:8f:
         26:09:b6:99:4d:c3:05:fb:62:1f:cc:89:e1:4c:d4:ff:6c:9e:
         a2:c5:7c:fe:0d:72:cc:55:d5:93:e2:5f:7e:7e:8f:cf:c6:ac:
         6d:f3:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:15 2024 by rpki-client on console-fra.rpki-client.org