Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/dabb483e-993e-3116-bd91-f1d76b191128.roa
File:                     dabb483e-993e-3116-bd91-f1d76b191128.roa (raw, json)
Hash identifier:          sYk0RW3BbX1LJfaUWTWWIFUYZkQXr54OZt648UBR1pQ=
Subject key identifier:   F6:2B:A4:7E:50:36:BE:F7:B3:12:EE:DF:88:F4:3F:84:64:59:C3:0B
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858477A1106D3769B18B06B4254C0
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/dabb483e-993e-3116-bd91-f1d76b191128.roa
Signing time:             Tue 08 Oct 2024 20:42:52 +0000
ROA not before:           Tue 08 Oct 2024 20:42:52 +0000
ROA not after:            Mon 06 Jan 2025 21:42:52 +0000
asID:                     36344
IP address blocks:        69.168.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7a:11:06:d3:76:9b:18:b0:6b:42:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Oct  8 20:42:52 2024 GMT
            Not After : Jan  6 21:42:52 2025 GMT
        Subject: CN=1125ed04-429c-4c16-9036-f5eb8075f762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:70:ec:ca:0a:96:6d:93:29:fb:ea:53:90:
                    34:6f:f8:0e:80:6b:76:4c:72:0d:ad:48:b5:85:a8:
                    49:1f:a6:f9:a0:95:34:e0:b6:b6:c0:b1:16:7a:89:
                    18:fc:e2:43:9b:ca:25:5b:e0:5d:26:89:d3:f7:e6:
                    88:97:be:72:1d:0e:19:f8:ec:bb:0c:51:3c:dc:fa:
                    65:e4:b2:05:4b:76:19:01:d6:9f:a8:ac:75:d1:34:
                    d4:f6:f1:29:4a:1f:9c:70:19:49:62:72:ee:67:6f:
                    ae:ae:84:5a:72:84:23:04:c6:ad:a2:83:b8:ac:36:
                    79:69:f3:4c:3f:7d:36:84:42:98:90:bb:18:b1:b5:
                    c3:3a:6b:46:e6:ef:46:c7:a4:c5:cb:7f:ce:5b:0c:
                    48:72:8d:2e:56:d6:e6:ed:23:51:84:cc:1e:64:c3:
                    a9:42:6d:9b:bd:cb:f4:96:38:07:5d:1f:dd:5f:7a:
                    a5:69:10:55:ee:f9:32:ae:13:bf:00:19:5e:17:45:
                    d3:ab:18:40:8a:66:4d:88:a9:27:7d:cb:6b:ef:d3:
                    89:27:1a:74:ce:a3:68:e4:10:e7:5c:4a:ad:6f:a8:
                    61:de:0b:31:bd:9b:1e:b8:1a:9b:b1:3b:da:bc:0f:
                    cc:50:0e:96:7f:85:c4:39:f4:d8:0b:87:fa:15:b4:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2B:A4:7E:50:36:BE:F7:B3:12:EE:DF:88:F4:3F:84:64:59:C3:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/dabb483e-993e-3116-bd91-f1d76b191128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:01:bd:3d:28:68:4d:5c:8a:e0:c1:ad:fd:52:6d:c9:5e:dd:
         d0:ce:38:bc:aa:58:e5:2b:b6:d7:91:a6:46:d0:85:72:77:ed:
         51:e4:a2:8d:c1:fa:85:c4:cd:b6:33:a7:ee:d6:b3:f6:38:d4:
         79:cb:74:b6:d0:27:0f:be:69:f8:84:99:de:5d:e6:de:d7:af:
         88:70:06:c3:7f:e8:ef:f8:dc:cc:2f:9f:4b:84:4c:e9:e7:70:
         c6:2e:ba:7c:1f:7f:83:12:20:3b:70:69:42:2d:ce:4c:76:26:
         82:94:18:0c:b1:5c:3f:a1:c9:e8:3d:ca:31:b6:ec:e3:9d:5c:
         54:82:5f:0c:dd:72:a6:b2:48:79:ff:98:49:6c:8c:94:08:a1:
         b5:6b:e9:26:bc:98:34:67:1e:b0:c9:6e:9f:d0:27:ad:6d:58:
         ca:d1:f4:68:46:f7:3a:3d:d4:2f:4a:f3:f4:b1:3a:14:59:85:
         90:f3:cd:92:dc:fb:40:8e:cd:2b:81:e1:46:5d:64:55:74:df:
         e3:a6:34:7b:bf:a9:77:d5:a3:26:6b:07:97:c5:1a:07:8a:cf:
         c4:27:10:18:6a:9a:bb:af:5b:6d:95:2b:5d:c1:8a:33:1b:6b:
         70:89:c9:2f:63:3f:b5:ac:10:3e:2d:1b:57:8c:4e:5d:b6:9d:
         cd:90:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:48 2024 by rpki-client on console-fra.rpki-client.org