Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b240c5a4-bb76-3a1f-9c63-9936528655b7.roa
File:                     b240c5a4-bb76-3a1f-9c63-9936528655b7.roa (raw, json)
Hash identifier:          lgz1xHnXiGww4VKwhElLV0wsywWlK8Yc+MjAGPqcJyU=
Subject key identifier:   AC:DC:71:69:51:4A:47:58:80:F9:B1:AE:01:3C:60:91:F0:58:05:77
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E71906EE8A26183CDD080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b240c5a4-bb76-3a1f-9c63-9936528655b7.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        68.207.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:71:90:6e:e8:a2:61:83:cd:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=00cfe3a7-3761-463c-8caa-64f7e1388031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:db:45:26:c6:a7:9c:bd:be:a9:7d:4e:a0:15:
                    f6:8c:1a:c2:3a:bc:ed:2d:4f:a9:78:e8:d7:9a:a0:
                    91:2c:bf:24:26:bb:9f:37:cb:65:49:a7:9e:65:c5:
                    45:83:bf:43:b4:86:eb:9a:55:d7:1c:0d:2d:bc:72:
                    91:16:0c:91:90:f5:2c:81:5c:07:2d:bb:88:46:a8:
                    ee:c0:e0:c6:ee:ed:53:5e:cb:0e:cd:2f:e7:f4:67:
                    30:4b:73:98:ba:06:46:c5:a6:ef:33:09:13:16:76:
                    b0:15:39:c3:8c:07:f4:9e:ef:ff:06:c7:09:28:48:
                    e1:e7:b0:13:37:cf:22:23:ea:84:f3:b8:d2:a1:3f:
                    22:eb:ee:5e:0f:7d:08:0d:86:38:9a:34:83:18:85:
                    59:2a:20:92:80:1e:74:d4:51:c3:1d:e2:df:86:65:
                    0b:5c:79:d8:ae:d2:6f:ad:af:ef:58:b9:76:02:4a:
                    35:4f:72:09:61:ab:d7:cf:39:9b:de:1d:73:b9:93:
                    9b:e5:06:bd:bc:40:ca:bc:4c:50:5a:ee:94:53:4f:
                    47:4f:7f:68:4c:cf:56:7e:32:d0:bd:2c:25:33:ab:
                    a5:11:1f:e5:f3:f1:e5:88:92:5c:4d:df:c0:8c:fb:
                    02:e4:fa:cb:2f:5d:6d:b0:aa:4b:3b:1b:4a:b7:bc:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DC:71:69:51:4A:47:58:80:F9:B1:AE:01:3C:60:91:F0:58:05:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b240c5a4-bb76-3a1f-9c63-9936528655b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:33:45:c4:fc:81:ca:50:17:c1:4c:62:94:70:92:99:24:46:
         57:c9:d8:79:45:94:6c:87:3d:0e:b0:4f:31:11:b2:6f:7d:a3:
         85:0a:3d:00:06:d6:1a:5e:c2:3a:7e:5a:05:c1:de:45:9a:09:
         ff:2d:32:81:8f:97:08:c2:93:c5:d6:aa:a5:3a:ed:62:5d:25:
         93:f5:23:65:8c:3d:da:02:84:66:31:82:46:47:d0:7f:c5:cb:
         9a:c2:99:a7:bf:d7:3a:33:27:55:42:64:b6:cf:2a:b0:d0:28:
         aa:72:19:3b:d6:28:c4:37:a1:f0:5e:38:8e:0f:7e:21:62:53:
         81:d3:0f:0a:73:a6:83:57:ee:8c:f7:d9:9d:72:1c:83:69:09:
         6f:3a:04:38:5a:6d:a2:ac:99:ba:79:eb:08:39:53:3b:58:20:
         52:7e:4f:dd:8e:7f:c0:f0:1f:ce:e5:27:1c:6c:01:fd:d0:1a:
         57:f8:25:0a:e6:0f:70:34:65:49:05:c8:03:02:ed:a4:1e:b1:
         f8:aa:c3:66:1a:db:20:89:19:ef:4d:79:26:99:d8:10:79:a5:
         41:f9:bc:5d:d8:73:19:b6:bb:da:97:21:3b:31:db:80:89:12:
         21:c5:96:40:24:06:4d:fb:99:9a:fe:8d:c9:d4:c5:a0:c2:26:
         93:45:66:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:10 2024 by rpki-client on console-ams.rpki-client.org