Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fb610e79-0231-32e6-8712-52f34106bb03.roa
File:                     fb610e79-0231-32e6-8712-52f34106bb03.roa (raw, json)
Hash identifier:          yKIBMRCTCjGn46DIvXjm0J/49mwdsio7TJjEW2A/0BY=
Subject key identifier:   C6:DD:30:FF:F3:F8:8D:CF:CA:4A:C4:A3:C8:F7:7B:CE:C3:A1:90:23
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF262EF9A3E892C6B484A40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fb610e79-0231-32e6-8712-52f34106bb03.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     33363
IP address blocks:        68.204.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f2:62:ef:9a:3e:89:2c:6b:48:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=4fc4f15b-3097-4ac4-8148-2926e54d6a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:94:2d:d5:13:58:57:57:c2:36:15:ad:6b:
                    be:06:19:0d:7b:cd:95:94:25:87:96:04:79:1f:de:
                    b8:78:1c:7b:be:93:28:68:af:f7:b1:37:77:d3:61:
                    2f:42:4b:4b:11:d0:16:e2:40:63:07:34:e7:f0:3e:
                    df:28:15:5d:5e:94:f0:df:3b:7f:c4:d1:92:a7:ec:
                    c0:65:dd:83:c8:84:c4:b2:4b:f3:4b:df:79:9b:6d:
                    5b:ad:5b:61:f4:89:2f:68:fa:e2:d2:b5:de:f0:f7:
                    b4:36:fa:5d:d9:e7:f0:27:5f:d4:61:60:d8:d4:3d:
                    92:a1:f3:79:2e:4c:ec:e5:65:31:8a:30:a8:e2:11:
                    fc:6a:11:77:1e:0e:1e:34:cf:89:73:b9:18:f0:be:
                    ab:8b:da:d6:c9:2f:a1:da:c6:ed:cf:90:c3:f7:02:
                    36:81:9e:96:2d:f8:38:85:8c:11:49:fb:22:12:c6:
                    d4:2c:ca:a6:c4:3b:5b:f0:fa:3c:2e:2c:b8:e8:03:
                    65:ac:24:96:ab:9c:42:d8:85:a4:7f:47:9e:d1:28:
                    dc:ee:b7:b2:60:c2:81:f2:d3:aa:0b:fc:4d:5c:93:
                    ee:e0:a0:56:76:06:55:ac:e8:b4:d2:bc:88:6e:10:
                    19:03:80:9d:31:89:e9:d2:4a:fe:77:8a:88:3e:1e:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DD:30:FF:F3:F8:8D:CF:CA:4A:C4:A3:C8:F7:7B:CE:C3:A1:90:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fb610e79-0231-32e6-8712-52f34106bb03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.204.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:57:52:f4:10:2b:f4:f6:8c:31:36:51:c5:75:8e:0e:a2:a3:
         71:81:33:56:32:60:cb:d9:4d:e1:b5:98:e7:bb:8c:3c:c7:8d:
         ec:42:c7:a8:81:1d:92:e4:99:18:ff:93:05:04:6c:7f:00:83:
         4c:44:28:b1:a5:55:07:22:02:55:bd:6b:6b:bf:d2:91:3f:6b:
         fc:01:b6:0e:10:90:03:7d:8c:04:cb:a7:c4:05:b7:9d:3e:03:
         dd:50:8a:3f:1a:ef:d3:3f:4b:86:6a:d0:bf:94:35:bb:90:c3:
         1d:d3:1f:f3:36:9d:f9:5f:af:78:82:85:57:95:9c:59:c0:15:
         f8:1c:3d:27:dd:cd:74:f9:53:9e:d6:eb:f9:45:c8:03:b9:e6:
         10:cc:6b:4d:90:c8:e6:73:96:22:23:98:6e:13:4c:e0:2a:04:
         23:15:c5:4a:2f:9c:e2:2c:1d:01:a1:61:4f:e6:f7:a8:05:14:
         d7:7b:b7:91:50:93:4c:fa:c3:cf:16:50:32:30:08:fa:f2:ea:
         a3:02:1a:bb:25:11:40:d1:20:6a:21:5b:56:3c:cf:06:93:9e:
         07:9a:8f:6d:fe:d6:36:6f:12:cb:18:59:6e:4d:71:90:7e:6c:
         a8:80:46:b4:15:16:73:28:fc:e3:77:27:7e:98:89:ac:a2:77:
         37:f6:41:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:41 2024 by rpki-client on console-fra.rpki-client.org