Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ddac8040-0755-3a68-96e5-fdd3e8469a34.roa
File:                     ddac8040-0755-3a68-96e5-fdd3e8469a34.roa (raw, json)
Hash identifier:          zp3q+e45wjzAIqM6tqHIcXFy11XWhPSxomnPOgfFmjg=
Subject key identifier:   CC:C2:F1:42:84:72:11:D0:89:D5:9C:FC:11:17:7A:70:3E:F0:0A:98
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847A6642846C9FC0F0394EF8000
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ddac8040-0755-3a68-96e5-fdd3e8469a34.roa
Signing time:             Thu 24 Oct 2024 17:45:56 +0000
ROA not before:           Thu 24 Oct 2024 17:45:56 +0000
ROA not after:            Wed 22 Jan 2025 18:45:56 +0000
asID:                     16509
IP address blocks:        68.182.190.0/24 maxlen: 24
                          68.182.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:64:28:46:c9:fc:0f:03:94:ef:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Oct 24 17:45:56 2024 GMT
            Not After : Jan 22 18:45:56 2025 GMT
        Subject: CN=7cd55aeb-6b87-4c85-b3b3-8f18605f93c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:37:56:80:92:77:ee:39:43:c0:c2:b2:3c:6d:
                    e8:3c:57:37:13:73:2a:e6:31:b3:f8:2e:e7:98:46:
                    de:63:97:36:b6:d0:ef:3e:fd:74:0b:5d:6b:8d:c3:
                    8d:97:fd:80:9c:5d:25:33:0d:c2:00:86:e4:f2:15:
                    b2:a7:ad:50:b1:91:97:b9:98:a1:58:fb:df:ab:27:
                    44:7a:5c:e5:67:2f:99:9a:13:3d:d5:d1:1a:54:56:
                    b3:90:27:e3:08:e5:dd:f0:f7:69:48:1e:50:f2:6e:
                    a1:8e:b3:04:a9:1a:07:01:a8:ad:ab:a6:d3:6b:74:
                    c4:c7:51:74:4b:4e:58:f6:94:01:22:93:c9:f7:4a:
                    a8:01:79:7d:3d:1d:43:e2:62:12:90:b1:ef:7a:e0:
                    e0:6a:b9:03:57:b2:95:49:52:7a:71:45:e5:9b:9a:
                    75:2f:05:53:a3:b4:fa:2d:7e:06:21:0a:0e:db:37:
                    45:0c:03:23:54:05:92:8c:10:26:97:27:02:a0:bc:
                    08:d5:83:06:47:99:38:82:8d:fb:a7:8e:e6:4b:8d:
                    79:f5:b4:cc:6d:a2:4a:f6:da:37:8e:b0:64:58:86:
                    8c:63:e7:a6:d8:91:a9:b0:21:d8:85:fb:0a:d8:b0:
                    34:41:8f:91:8e:f1:35:8e:81:7b:8a:aa:d4:85:0e:
                    68:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C2:F1:42:84:72:11:D0:89:D5:9C:FC:11:17:7A:70:3E:F0:0A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ddac8040-0755-3a68-96e5-fdd3e8469a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:9f:d9:a6:e3:0a:49:d5:19:c3:77:40:11:d6:8a:3d:c8:25:
         58:0d:58:2b:28:e1:34:99:6b:02:29:93:48:d2:3b:c1:b6:c5:
         dd:3e:1c:0b:ca:12:52:0d:e9:64:a8:cc:b2:2b:0c:d6:c3:cd:
         ff:7f:6c:56:90:75:d8:2d:cc:a1:7a:03:9b:1b:41:2d:af:8b:
         ab:27:8b:03:38:cd:28:98:f6:a9:ac:27:da:43:92:ad:39:f8:
         cc:e5:53:89:79:7c:14:ea:92:61:d8:ab:bb:d7:69:c7:fb:95:
         f2:83:96:ab:3e:9e:cc:f8:f5:64:99:c2:35:bb:29:64:58:5e:
         dd:1c:ad:97:37:2b:f6:a5:26:54:e3:fd:8e:85:f6:6c:c1:f2:
         01:1a:82:ba:77:af:76:c2:da:e5:58:22:67:3a:44:eb:ac:93:
         e6:2f:59:3e:17:61:77:0d:54:e7:de:59:29:66:28:b0:96:f6:
         e7:6d:a9:8d:8e:e7:80:a6:22:66:e6:7e:a6:29:d2:96:af:2e:
         1b:be:20:02:2f:69:e8:35:12:c7:a4:50:e2:bd:b2:46:2e:1c:
         90:bb:84:a6:62:29:13:44:83:c4:65:3a:e4:f4:24:96:d6:8f:
         06:f3:64:1a:61:00:39:8b:4f:4e:83:c3:03:9e:7e:39:87:f4:
         97:7a:7c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:29 2024 by rpki-client on console-ams.rpki-client.org