Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa
File:                     2c227bfd-f08b-398c-9969-3fff99fa4025.roa (raw, json)
Hash identifier:          ziYN6Mz4vYOSXW7LPz7BrK0OPAnWRLHD6jfztZ6hD6I=
Subject key identifier:   00:6D:83:05:93:73:31:B2:47:2C:9A:AA:06:98:0F:B2:30:7A:F0:0A
Certificate issuer:       /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial:       010D0C9F432858473D25F793A2D3EB5D4B2F2080
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     397444
IP address blocks:        208.68.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:f7:93:a2:d3:eb:5d:4b:2f:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=e40b6618-2a92-40f8-824f-5f11f33a80c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:08:e2:49:54:4e:e4:b1:4c:58:c7:f9:a4:
                    67:b3:08:6a:25:32:f1:d4:2f:19:3f:a1:df:75:e6:
                    58:71:ed:57:be:52:18:9b:2e:9a:c9:f3:17:88:0d:
                    6d:ee:6a:e4:97:40:ac:46:12:fe:77:07:00:16:1d:
                    7d:24:1e:3f:04:43:d9:ac:dd:80:df:41:a5:65:98:
                    76:22:13:07:8e:88:9c:a7:78:97:58:61:1e:c4:77:
                    57:eb:6c:c4:f7:cc:3d:de:a7:02:f7:1f:b6:72:3b:
                    0e:1a:9b:8c:b4:68:73:09:1e:fa:38:94:c1:8b:de:
                    c8:7d:43:4e:a9:bc:11:0c:63:39:ce:98:04:f8:e7:
                    c4:f0:a9:fe:48:bb:b2:6e:78:83:2e:36:81:6d:35:
                    cd:9e:00:e2:f8:56:e4:22:7c:81:8a:1a:29:e0:8c:
                    74:81:2e:fb:24:b5:83:30:ff:43:f9:0e:12:20:8b:
                    8b:1a:8f:b9:3b:2b:16:3f:04:6e:8a:76:98:f6:86:
                    d9:a3:a6:27:ac:8f:a9:54:e1:81:31:ee:af:db:93:
                    f3:c9:df:f8:34:f1:91:26:85:69:66:34:ff:32:eb:
                    04:86:cd:77:a0:f7:1e:42:d6:3f:86:26:68:fd:a3:
                    e1:44:ac:48:a3:38:90:08:e1:79:37:05:4c:c7:4a:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6D:83:05:93:73:31:B2:47:2C:9A:AA:06:98:0F:B2:30:7A:F0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl

            X509v3 Authority Key Identifier:
                keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:cc:00:b2:1f:11:8d:e1:1d:29:a0:2e:35:55:b2:a3:c3:4f:
         8a:8b:3b:26:5c:f7:b6:da:98:1f:11:5b:ef:cc:86:8c:cc:3d:
         0b:f5:68:18:07:57:f2:88:4e:1f:ba:0d:9e:0c:68:ac:a5:1c:
         79:85:1f:f8:66:bd:a6:2b:da:14:cc:c1:3e:d8:27:b2:b4:ab:
         1b:12:14:93:9f:8b:6b:d4:80:4f:b6:79:0e:bc:fb:24:1b:4b:
         e8:8e:05:b1:73:1c:6e:14:c3:f5:fe:fa:32:66:30:1c:6a:66:
         07:7b:d5:21:2f:5c:2d:4f:63:19:b3:5d:f4:a5:a4:1f:8f:99:
         fe:77:34:cc:b3:f3:01:b0:60:1c:32:c9:f7:84:9d:81:8a:23:
         ac:55:85:d0:cc:3e:ba:8a:14:e3:86:c3:93:de:e5:e0:0f:c3:
         9b:e8:6e:5d:6d:78:51:82:af:e2:8a:88:3e:ca:66:b9:9e:45:
         84:c9:6a:f4:41:0f:e8:4c:e6:58:4f:e1:2d:15:f0:ad:db:24:
         33:d2:75:51:57:86:b1:cd:f3:cb:33:73:8f:02:06:0c:4d:4f:
         b1:6d:2c:69:48:30:b4:01:74:c6:4a:24:b2:32:96:95:dc:71:
         c3:f0:f1:8c:a4:ed:d6:1b:c4:e9:a3:bc:63:c2:50:08:56:4d:
         7f:14:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:31:14 2024 by rpki-client on console-fra.rpki-client.org