Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa
File:                     565d44ec-bec4-3ec2-934f-75404fa3de9f.roa (raw, json)
Hash identifier:          vR3bzhgyyGA8AKpmza6ja2oLqb53FCTXO1ltHFHAieI=
Subject key identifier:   FC:2E:1E:2A:2C:FF:7F:22:96:34:B7:85:C5:FF:59:39:E1:A6:70:0D
Certificate issuer:       /CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
Certificate serial:       010D0C9F43285845A428D07E09B30DC869388B40
Authority key identifier: A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     3257
IP address blocks:        68.69.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d0:7e:09:b3:0d:c8:69:38:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=32c64956-9a12-4ee9-adad-422671c109f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:89:7e:52:b9:05:e3:64:e4:52:bb:3b:0e:27:
                    eb:04:e7:e1:fc:b5:56:1a:52:3c:a8:11:b5:0d:89:
                    35:b4:9d:9f:81:ff:1f:12:f6:6f:89:1a:94:47:3f:
                    56:0b:26:cb:e1:3a:c3:c4:1b:7a:20:bf:0f:b7:29:
                    94:48:54:ff:b2:e7:29:8c:57:c0:07:8f:69:cd:19:
                    c1:e6:f3:01:c3:00:f5:eb:15:0d:57:51:c8:53:81:
                    7e:cf:0f:a5:5e:49:7d:c9:f6:7c:4e:db:78:26:69:
                    7b:b1:08:0c:1b:82:59:85:8c:33:b6:14:34:46:16:
                    36:a4:1f:55:2f:c1:74:79:b0:6b:4f:fe:94:4b:64:
                    ee:69:e9:b7:d0:36:b7:c3:8f:bd:4c:fc:53:ba:65:
                    78:97:e8:92:37:13:7b:f2:53:fb:62:b3:74:1d:49:
                    51:20:26:e2:4c:93:59:35:61:40:4e:9f:82:37:12:
                    bd:57:2a:85:ab:af:5d:a1:4e:c4:63:24:10:fb:10:
                    b9:11:be:30:44:45:cc:5c:ae:8e:d3:47:51:bf:f8:
                    da:04:a3:2a:c1:76:dc:8f:09:d7:6a:96:01:81:1d:
                    35:9b:7b:60:d2:6d:54:f2:23:8a:df:a6:e7:8a:74:
                    e7:54:5b:94:0e:58:19:64:1a:54:be:d9:0e:9d:5d:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2E:1E:2A:2C:FF:7F:22:96:34:B7:85:C5:FF:59:39:E1:A6:70:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl

            X509v3 Authority Key Identifier:
                keyid:A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:cf:0b:1e:cd:bb:55:db:4d:4f:77:ac:05:bc:15:e3:5b:29:
         81:1c:af:86:76:1c:8b:a4:77:df:34:5a:29:18:95:44:80:87:
         0e:7f:e7:44:98:0e:1f:b5:ac:84:0b:41:b4:e0:c1:1b:4f:ff:
         c1:3a:b5:dd:e9:99:82:d6:51:c0:b4:93:a4:78:48:f3:ea:ec:
         56:35:db:eb:fb:d5:99:2a:a0:89:5b:6d:ba:07:c9:06:5f:13:
         1e:96:79:c7:e1:d9:e4:09:fd:c2:0f:fe:50:20:73:96:76:b6:
         97:db:cc:54:ec:12:ab:7b:e6:31:32:2f:0a:21:e4:54:c6:ee:
         41:38:7d:e1:6d:0d:9e:5d:da:7f:e6:65:c2:9e:3a:b7:28:9c:
         8f:b9:29:9c:34:89:44:4c:53:94:e0:c3:ea:97:3b:96:aa:60:
         3a:ac:31:f9:5a:2f:82:9e:e6:15:45:a2:8d:56:b3:25:d6:21:
         38:9b:6a:bf:53:b4:19:ff:b1:70:fe:35:d8:6b:a0:63:0d:a5:
         47:aa:f9:a3:7d:b2:a7:d3:7f:2a:a6:dc:ef:50:a6:a6:dd:c4:
         14:40:89:95:77:78:19:98:7a:82:06:f2:1d:d5:93:58:f6:7e:
         0b:a9:a9:39:3d:22:e4:0e:99:59:53:b1:0e:ed:6c:02:68:e0:
         89:67:ed:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:26:20 2024 by rpki-client on console-fra.rpki-client.org