Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa
File:                     3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa (raw, json)
Hash identifier:          BPJgSY8Z2PrUAjhrtMZINkIt6Igy5laVQtLPeKUiJsQ=
Subject key identifier:   08:BA:BA:FD:64:18:8D:79:D4:8F:1D:FB:47:7E:D5:53:85:07:43:40
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F43285847C05C12CA266676FDF961A080
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     3738
IP address blocks:        192.250.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:12:ca:26:66:76:fd:f9:61:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=0fdc3b8c-9b6b-49e4-9bb8-8d04fb802066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:2b:8c:37:c9:52:70:37:39:53:ac:b2:9b:
                    62:07:25:af:b9:39:f1:3a:af:4c:2d:76:b5:4d:4e:
                    14:8c:10:0a:1b:ad:c8:ab:09:89:20:4e:44:22:be:
                    c8:c3:21:44:85:7b:75:9c:1c:00:9a:ad:a6:e4:b6:
                    14:a9:85:34:9d:03:13:05:d7:c9:20:59:d1:a7:2b:
                    9f:f7:a4:8a:f7:96:f4:01:fb:05:b3:39:13:34:87:
                    a5:4e:98:7e:71:a8:31:f0:a4:7e:b8:1d:24:17:48:
                    ff:06:db:a2:f8:e7:c6:bb:90:22:28:1e:7b:98:65:
                    e8:8a:de:69:df:1b:b2:b5:28:10:c8:a8:9c:28:9b:
                    56:b3:8d:45:0a:52:8a:4b:c4:ff:ea:64:c6:62:bf:
                    c8:db:5e:e7:31:8b:aa:52:14:ff:48:3c:f1:7b:de:
                    e4:0b:61:57:51:85:c2:dc:bd:e3:f0:2b:58:04:b4:
                    33:36:c0:e6:1e:7c:1e:53:81:74:65:22:0a:64:13:
                    1a:0d:ed:70:89:70:6a:6d:d1:a4:63:e9:4f:6f:ec:
                    b4:62:14:2d:08:95:60:6d:a1:41:7a:bb:b3:5b:7d:
                    9f:00:61:b1:2d:27:cb:dd:a1:1a:c7:c0:95:42:dd:
                    04:a6:c1:0e:65:d0:e1:7a:a8:46:4b:be:54:5d:46:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BA:BA:FD:64:18:8D:79:D4:8F:1D:FB:47:7E:D5:53:85:07:43:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e7:90:90:a9:dc:c7:48:7a:81:90:9d:d3:10:ab:47:0f:a8:
         d8:06:bf:98:5e:1e:40:77:c0:97:a1:81:e6:40:db:94:d7:c0:
         79:e2:37:be:d4:60:c1:77:40:7c:a1:67:01:1e:b7:57:6f:34:
         79:fe:5f:a9:ce:db:b0:fb:67:37:b5:39:55:36:5c:fc:73:24:
         1a:4f:32:5b:67:c7:e8:67:33:bf:f9:7a:6d:ed:5b:d3:d4:36:
         ba:1c:9f:3a:0b:2a:35:fd:6b:a1:e0:8b:8b:87:fb:23:2c:4f:
         8a:18:66:14:65:5b:53:83:a1:a9:13:ad:3e:75:67:6c:a4:95:
         4f:2e:66:b3:b0:b5:71:56:8d:01:6e:9c:7d:77:ca:42:64:34:
         42:a6:fa:bc:9a:36:36:db:c7:2c:70:19:7d:50:5f:93:c4:c8:
         2a:44:c6:40:57:8b:1e:c6:df:74:7a:47:4c:70:20:d1:20:40:
         f3:ec:1f:26:5f:cd:36:a3:b8:0b:87:07:5f:f5:96:be:5f:23:
         37:36:8f:8b:9f:8a:a4:c4:5f:1e:5e:db:e1:f2:02:3d:47:ae:
         0f:bf:7d:be:eb:fe:8b:8b:48:a4:4a:f3:d9:2a:d0:20:a5:60:
         45:2d:98:e7:1a:34:51:bc:3b:e1:96:1b:8a:19:53:5d:b2:18:
         e5:26:10:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:16 2024 by rpki-client on console-ams.rpki-client.org