Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa
File:                     3482c56b-a68f-3216-b18d-c6952ef07146.roa (raw, json)
Hash identifier:          mCNlS0WkbncXaX19XgbnSocMAH4LnuPCwUbA7RYN58s=
Subject key identifier:   39:42:E7:38:9E:7B:9E:3E:9C:B8:AD:1B:15:31:1E:60:ED:38:6C:5C
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F43285847A73BEC551D2015F7CE3260A0
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     2650
IP address blocks:        204.68.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:ec:55:1d:20:15:f7:ce:32:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=7c46bbb1-3e70-4159-a458-cc789047ae48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:0d:d7:6c:a1:cc:47:63:0c:cf:1e:81:46:
                    5f:6e:16:ce:90:7b:e4:92:38:4b:64:f9:e7:a0:2d:
                    c0:73:42:c7:f1:60:4b:87:b9:1d:f8:bf:4e:23:fc:
                    1e:0e:0d:5f:8b:b8:1d:4f:19:e1:63:0f:70:ef:17:
                    36:f9:db:6e:47:e8:8c:5e:bb:7f:70:fd:5f:18:92:
                    b1:56:73:99:fb:7d:ec:5f:77:73:56:09:76:5e:a5:
                    7f:27:f6:d4:55:b7:7b:bd:eb:bd:dc:99:8f:cf:64:
                    78:5a:24:dc:60:cf:ca:c8:e9:4e:e7:2e:fe:ec:9e:
                    68:d7:b7:23:b3:eb:d7:f9:41:b7:04:f1:aa:ce:b0:
                    39:44:94:32:3c:9f:58:0c:54:34:20:67:ed:04:88:
                    f9:f4:33:06:e8:57:b3:9f:2d:89:22:5f:9b:37:de:
                    8d:01:e8:2b:25:d6:4e:b9:1c:04:c0:c8:16:40:03:
                    b7:19:13:b7:f3:67:b7:7b:23:8c:09:e7:49:82:3f:
                    6a:92:04:41:f0:8f:df:1c:8e:77:8f:8e:64:af:f1:
                    a5:81:2a:86:71:35:c6:d5:15:a7:a9:5b:c7:46:de:
                    da:95:52:d0:a8:4b:d8:e1:b1:ab:f9:4b:82:bc:18:
                    1b:5d:6b:aa:da:e8:fe:f2:c4:cd:b9:0e:c7:b9:f7:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:42:E7:38:9E:7B:9E:3E:9C:B8:AD:1B:15:31:1E:60:ED:38:6C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.68.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:29:59:53:fc:5e:68:f6:4d:be:ad:b9:cf:ea:d1:0b:85:97:
         63:6a:e0:b9:4a:7b:eb:15:b9:af:ed:40:dc:51:ec:c0:38:1d:
         d5:66:4a:02:39:3f:57:c9:97:8a:75:be:c5:c3:7d:54:e3:f5:
         e9:61:36:ca:2c:45:f6:a2:20:a4:5e:fd:11:60:2d:96:a5:e8:
         ea:57:b3:c6:fa:c0:26:7e:c4:3d:bb:0d:07:e8:4a:58:70:1b:
         c2:42:ef:00:5c:4d:f4:13:a9:18:94:56:bf:00:1e:a7:bc:21:
         35:9a:d2:e9:0b:b2:0c:87:35:22:41:5a:ab:78:7d:be:c7:b3:
         72:61:5e:e0:d8:f3:95:87:01:e6:ea:ea:22:01:c1:b2:09:1a:
         1b:eb:9f:61:a0:9e:89:f5:69:a0:ac:8d:6c:50:f5:6b:20:cf:
         9f:2b:4a:da:0d:72:7b:7e:dd:3a:be:d8:fb:e6:17:60:c2:b9:
         9e:31:cb:a3:a0:0b:a5:66:30:a3:c7:60:21:0d:70:fa:77:10:
         47:f6:a2:2e:ff:23:43:21:dd:15:aa:fa:f7:ec:ca:cc:a9:c8:
         c3:8e:51:1f:6b:15:4a:e9:77:cd:34:c4:3b:c2:94:c7:a4:5c:
         de:85:e4:da:3a:5c:68:c2:58:f4:9f:e7:da:dc:c2:ed:39:22:
         f8:92:cb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org