Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa
File:                     24563349-a664-362b-a317-02cb1d641489.roa (raw, json)
Hash identifier:          50wxMKFYZi9XkuCC+UCRAB1LrmgaCPK2+DSVw1zZxJQ=
Subject key identifier:   CC:B8:D3:B7:15:97:98:77:0E:5E:B1:33:48:66:6D:71:B2:7C:E4:E1
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F43285845734DA2AABD3775E9068E8300
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     35874
IP address blocks:        69.58.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:a2:aa:bd:37:75:e9:06:8e:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=dac2f358-4369-47b1-804b-ee6847233abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:92:d1:d1:65:a1:0a:95:bc:63:ac:a5:d5:
                    1e:dd:53:15:2b:15:5a:13:22:e2:4e:cf:b3:10:2d:
                    9d:15:b3:52:82:33:2e:ab:2f:d1:ce:fd:9a:82:42:
                    01:53:02:bd:e3:47:09:69:84:a0:12:eb:05:e9:15:
                    f0:f3:2c:a6:c4:b3:39:e0:cb:71:8c:24:29:f0:2a:
                    e1:cb:e9:7d:a2:17:18:cf:a8:f1:c9:4f:98:2a:90:
                    bc:a0:d0:f0:b1:07:d2:71:62:3f:4f:af:c3:54:94:
                    da:fa:a0:c9:e0:1e:cb:29:5a:b4:4d:c3:21:a6:42:
                    e9:94:f5:70:86:47:3e:0c:d3:98:d0:d1:8b:08:5c:
                    7a:c7:d2:43:92:c7:fe:13:b2:65:84:69:ff:1b:42:
                    05:b9:40:dc:68:76:ad:a2:88:19:c6:dd:77:78:c4:
                    f5:00:67:bf:95:39:23:13:bf:f0:28:38:fa:c5:5f:
                    c0:12:a3:88:03:f8:17:e3:94:37:b0:61:11:d6:13:
                    d4:8e:bf:b8:89:d4:74:21:c5:b1:25:44:32:53:dd:
                    76:ef:eb:7c:6b:dc:f4:16:62:2f:24:64:8e:41:d4:
                    a9:ee:ba:4d:cc:2d:c9:60:36:68:28:75:89:e1:07:
                    ae:b9:de:b8:83:78:3c:d4:12:aa:db:d0:72:5b:17:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B8:D3:B7:15:97:98:77:0E:5E:B1:33:48:66:6D:71:B2:7C:E4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:d1:d7:62:de:10:e8:86:15:31:ce:e9:c2:d6:b6:bc:1e:
         18:bc:4e:b3:db:0a:b8:32:13:f0:46:77:c3:a2:f5:8e:a3:26:
         97:28:6e:4f:51:9d:3a:69:89:c0:04:ac:4c:a8:40:a9:a7:31:
         bf:ad:20:ec:27:f8:2e:f0:7a:33:01:45:c3:98:d0:6d:90:a8:
         bf:cd:7a:bf:ce:da:16:e0:3f:a8:c7:3e:03:c3:fa:b3:0e:e2:
         50:14:27:80:aa:38:99:e5:fc:12:b7:14:8e:7c:b2:c6:b3:0c:
         4a:2e:07:e8:bc:01:29:d4:fa:99:ad:f5:f7:d2:e0:13:c9:51:
         dc:8b:11:c4:be:8f:45:5c:89:b2:3d:78:e1:88:c6:78:2f:09:
         d7:f9:9a:8f:8a:e1:03:7c:1d:ff:d8:28:d3:bd:33:2c:d7:32:
         d8:c4:3f:d2:c5:f1:9c:02:8c:e9:71:04:b7:1c:54:1f:1f:fa:
         d9:89:7c:91:97:c9:46:9d:f1:be:ce:ed:a0:e3:92:a3:8b:c1:
         57:cb:13:c1:09:44:fa:c0:31:ac:4c:49:04:54:9f:f1:52:b6:
         7a:d6:2f:d9:f4:2d:92:f2:72:9e:97:1a:7c:01:42:70:7e:68:
         a8:35:fe:7e:e7:65:2e:8d:12:ca:e4:91:e2:81:25:ab:7b:10:
         9e:9f:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:47 2024 by rpki-client on console-ams.rpki-client.org