Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6433d98a-990d-3117-b44a-348a50fcb4ce.roa
File:                     6433d98a-990d-3117-b44a-348a50fcb4ce.roa (raw, json)
Hash identifier:          lv/4jcnYqCTJQXJz96W88Tky/i2GO9tfShzvscoT9Os=
Subject key identifier:   25:12:72:F9:F2:92:FF:B9:7F:EF:D8:6B:62:76:E4:A9:A6:21:7E:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2ADD1F0C7B3301DD2EA0A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6433d98a-990d-3117-b44a-348a50fcb4ce.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        207.68.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:dd:1f:0c:7b:33:01:dd:2e:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=65997674-64e6-4098-96f8-8932afd70fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:c4:fd:88:1c:b3:f8:36:54:80:20:e5:80:
                    cd:61:2f:64:da:ff:91:ca:11:e9:30:7f:f0:b0:85:
                    80:72:53:bf:5e:12:ae:54:b7:11:44:b8:a8:60:ba:
                    28:70:ec:26:42:c5:37:ad:95:2e:26:81:5e:b8:5d:
                    17:fa:13:a2:e7:fd:e2:3d:0e:a0:ae:90:3f:d5:51:
                    b5:c2:59:5e:2a:a4:bc:b0:48:a0:90:23:46:b8:1d:
                    55:7c:75:bf:4f:20:52:47:56:0d:11:c1:7e:b2:92:
                    1d:67:b0:00:29:77:0c:cb:a7:ef:7a:65:63:b3:b6:
                    ed:17:d9:21:74:61:72:7f:41:45:2d:fd:5c:29:12:
                    f7:a8:08:84:17:74:45:0c:f0:01:dd:0a:6f:58:6d:
                    28:49:47:71:1f:94:9c:a5:3a:16:b5:93:81:55:42:
                    f6:b9:2b:87:04:24:fd:b7:41:64:0d:5c:38:c8:78:
                    03:d9:7f:fc:e3:67:8c:fe:bb:90:46:cd:df:40:8a:
                    f0:24:5e:80:5d:51:fe:e9:de:34:fb:35:fa:ca:79:
                    32:18:d0:e2:eb:3a:95:cf:68:df:d4:1d:29:2f:74:
                    8e:55:1b:ac:13:3d:4a:31:04:94:ee:55:36:18:55:
                    3e:c6:59:77:f9:7e:d2:01:4e:37:a1:a5:f0:d1:47:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:12:72:F9:F2:92:FF:B9:7F:EF:D8:6B:62:76:E4:A9:A6:21:7E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6433d98a-990d-3117-b44a-348a50fcb4ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.68.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fc:f2:33:22:3a:ec:e3:95:b4:ee:e5:4c:89:0a:8a:3e:c0:
         c6:75:9f:03:19:07:55:ed:30:ac:f3:af:ec:ab:9c:00:76:4f:
         bf:16:60:4e:de:89:ce:9e:b9:08:b2:2e:cf:44:38:b6:5a:78:
         0e:00:0a:90:de:0c:dc:5b:70:0b:8f:8e:d2:d6:97:c9:9b:de:
         7c:c0:bc:aa:92:8c:9d:94:60:46:5f:b6:7d:d9:50:b5:7c:5a:
         b7:12:f3:a0:f6:07:d7:ec:73:e0:e3:cb:ac:7a:17:a9:b4:33:
         b5:be:a8:7b:12:fc:f4:e9:ef:0b:43:e0:69:7f:22:03:76:f3:
         07:fd:6e:a9:83:08:cf:12:86:bc:12:93:d0:ac:2b:d4:3e:47:
         4a:14:9b:b3:0c:0e:97:79:4e:29:4e:b3:82:93:f0:ec:72:66:
         02:f7:dc:42:7f:f8:a3:92:c4:4c:3a:de:bd:74:ad:8b:ca:76:
         04:55:cc:0b:38:16:0c:49:c5:88:d6:02:60:9d:1f:30:34:43:
         7a:97:83:42:d5:ff:cd:f1:ab:08:ef:a1:4b:00:73:af:6e:d1:
         18:43:6c:0f:ca:53:79:1f:f8:cd:12:d9:cd:06:cf:d1:98:2d:
         25:cf:83:dc:6f:b4:fb:54:10:64:35:b7:c1:cb:47:cf:79:39:
         5a:d0:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:25 2024 by rpki-client on console-ams.rpki-client.org