Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5b75a3a-c81d-3d6f-b37e-a54b1071bc65.roa
File:                     f5b75a3a-c81d-3d6f-b37e-a54b1071bc65.roa (raw, json)
Hash identifier:          bV+JI9Yqt5i70ez5i5S5u6B5hl+zsywoiQbNyi4O59o=
Subject key identifier:   BB:57:9B:18:8D:0F:7E:98:24:CD:DA:98:F8:D4:17:5C:10:A9:67:69
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B48A3200A7927ED068E76E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5b75a3a-c81d-3d6f-b37e-a54b1071bc65.roa
Signing time:             Mon 29 Apr 2024 09:50:01 +0000
ROA not before:           Mon 29 Apr 2024 09:50:01 +0000
ROA not after:            Sun 28 Jul 2024 09:50:01 +0000
asID:                     16625
IP address blocks:        104.68.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:8a:32:00:a7:92:7e:d0:68:e7:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 29 09:50:01 2024 GMT
            Not After : Jul 28 09:50:01 2024 GMT
        Subject: CN=6de7533e-a8db-40f3-9d07-07f7f36255a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:02:2f:53:36:15:81:32:68:2b:3e:7c:66:
                    03:e3:18:fb:95:65:1f:78:64:b2:55:a5:c7:df:f0:
                    3a:ff:e8:9b:11:67:48:d9:75:73:1e:0a:cd:bc:4f:
                    45:03:e2:bf:53:c6:9d:0f:07:bf:db:04:a9:f6:5b:
                    cd:d2:d1:37:f4:ad:af:33:31:c8:ac:53:35:9b:cb:
                    5a:fc:93:ce:5a:df:b2:70:4c:0a:bd:0e:ca:f0:d3:
                    b1:6e:6b:93:28:2b:d4:b5:a6:7b:f9:9d:b3:7d:e3:
                    9e:d1:3f:d1:a1:83:2a:fa:8e:d7:aa:71:1b:ff:42:
                    07:62:67:c1:eb:3e:ae:30:22:98:ea:d9:f9:14:0f:
                    a6:b2:2c:8c:2c:10:24:58:ed:22:39:d8:8f:a7:4a:
                    bd:89:68:da:0e:90:58:20:62:52:94:4b:c6:cb:01:
                    89:be:80:f2:e4:8e:09:53:55:1e:06:4a:7a:c3:46:
                    43:b7:76:b6:0b:8e:19:80:39:70:94:ff:70:d9:f7:
                    f6:d1:92:e5:72:18:ed:38:b6:f1:7f:db:b0:52:8e:
                    56:c6:8a:09:33:3d:ca:3d:de:05:47:01:ce:83:0e:
                    e5:79:bf:d7:e1:d9:d2:b8:98:7d:5f:8a:61:01:8a:
                    87:83:14:80:76:47:e7:80:72:de:62:98:77:4d:55:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:57:9B:18:8D:0F:7E:98:24:CD:DA:98:F8:D4:17:5C:10:A9:67:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5b75a3a-c81d-3d6f-b37e-a54b1071bc65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.68.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e1:87:df:89:41:71:36:56:22:78:ef:a1:e9:4d:f6:37:34:
         53:c3:54:98:e3:1b:02:47:6b:c8:73:db:7d:e8:20:bd:74:e2:
         4d:b1:1c:2c:e8:75:2b:15:36:a2:ef:ec:ab:28:cd:cb:9c:36:
         08:ba:7b:c7:ef:f4:e1:63:a1:1e:b6:ee:7d:d2:fe:e6:6c:2b:
         98:90:e0:98:ef:a5:45:d3:7b:12:b5:17:b1:7b:6a:fe:24:16:
         a9:8a:12:27:68:90:9b:da:e4:3b:ba:bd:93:f0:04:99:7d:d3:
         d4:80:7a:f9:d3:6c:e7:b3:ed:9a:53:07:e9:74:e9:0b:f7:79:
         b5:18:bb:11:55:65:b4:36:86:5b:31:32:93:ad:06:1f:a8:0e:
         3f:ea:07:d6:9c:48:0a:7f:4d:b9:9b:b8:2d:e2:32:28:75:7b:
         19:29:10:d7:a1:34:a8:89:b5:89:74:31:c3:aa:9f:1a:aa:4a:
         de:af:88:5a:47:4c:eb:3a:0d:cb:c8:f2:d0:e5:d1:ce:81:c2:
         2f:48:58:55:66:17:70:49:8e:4c:5c:14:f4:4c:b5:f3:c1:d1:
         4d:6b:d2:22:af:62:10:a0:b8:2e:97:73:65:ba:2b:f9:cd:32:
         ed:61:07:d9:29:67:bd:1c:9c:86:da:23:4f:18:01:4a:dc:04:
         15:c5:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:58:05 2024 by rpki-client on console-fra.rpki-client.org