Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98dd98e8-6d6f-3698-b2fc-0fee33ea64c2.roa
File:                     98dd98e8-6d6f-3698-b2fc-0fee33ea64c2.roa (raw, json)
Hash identifier:          sYCP7saOg+3Tqag2XxHROihBvmuyWpMwI2i35h+QlSw=
Subject key identifier:   9D:14:3C:61:E4:B5:69:BA:E0:AC:2C:43:73:76:3A:A9:3A:6F:96:C2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A16E6575B270CBD2CF3580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98dd98e8-6d6f-3698-b2fc-0fee33ea64c2.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.118.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:6e:65:75:b2:70:cb:d2:cf:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=daa09921-b20b-4d38-8a29-83a5f5aaa539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9c:a9:06:c1:be:7d:5b:e2:b5:59:79:17:d4:
                    93:4b:a1:8c:a4:ae:99:91:e0:a3:13:ab:9e:2d:cf:
                    65:c1:87:6c:1b:5b:00:d4:4f:07:99:13:05:47:d5:
                    07:57:28:3d:a9:df:ee:ad:4f:ea:bf:f6:6f:3f:07:
                    2c:ba:e7:51:ef:2d:37:89:8f:aa:08:01:db:94:de:
                    66:44:17:a0:dd:31:c8:50:88:29:8d:6c:6c:53:4f:
                    db:56:aa:05:fd:22:7b:91:86:c9:01:0c:84:09:d9:
                    d9:4c:28:84:c1:44:38:b0:85:91:a5:55:e5:95:6b:
                    45:b9:04:d2:90:3c:6a:1a:e6:37:41:8a:58:00:c5:
                    66:97:94:26:b7:6c:4b:e2:0c:ee:84:6e:cd:96:d0:
                    11:9e:25:76:d5:fa:bd:59:ac:43:ff:87:b6:9d:48:
                    a8:e9:f7:f5:35:d9:67:78:37:67:4b:82:2b:73:16:
                    b4:3b:7e:27:71:9f:a9:a0:2f:f5:e8:05:7d:b0:0e:
                    a3:71:6b:84:93:0a:28:c6:bf:3b:f7:a5:17:6c:c8:
                    7a:37:d5:94:e7:a8:77:94:f2:af:22:84:39:d1:a4:
                    a3:a0:bb:2b:b3:22:b4:4a:7b:8c:b5:f5:70:43:68:
                    c9:dc:a9:b5:1c:3f:35:af:c2:e6:04:19:70:27:38:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:14:3C:61:E4:B5:69:BA:E0:AC:2C:43:73:76:3A:A9:3A:6F:96:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98dd98e8-6d6f-3698-b2fc-0fee33ea64c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.118.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:8d:04:e4:c3:5f:cb:49:6f:dc:40:94:0e:83:53:95:82:a8:
         7d:0b:45:4d:a3:de:ad:15:e7:d7:1d:86:c0:73:70:e0:34:f6:
         9c:5b:83:a4:fa:11:79:cd:d3:5b:b7:25:5b:d1:f3:da:d9:81:
         19:cf:29:43:18:8b:31:55:7b:1f:0a:48:9d:92:66:ef:62:1b:
         60:d8:62:c2:21:7f:53:5e:ac:12:43:cc:be:88:08:2b:9f:17:
         ff:48:38:6e:b0:99:1d:40:7d:e2:7d:1d:f2:e8:78:48:90:aa:
         a3:ce:06:9c:ac:18:ee:8e:5d:8b:a7:81:8a:74:f7:ca:50:1a:
         96:33:e0:6d:84:59:74:ae:0e:3c:e9:7b:14:e5:cb:1c:3b:76:
         fe:64:32:30:91:a6:9a:32:98:1d:99:a0:a6:fa:03:55:c7:e3:
         76:88:17:e5:cd:a9:a0:23:b7:27:33:88:92:e3:cd:ba:43:47:
         df:23:1e:83:d4:47:85:fa:1c:f1:00:64:45:bd:21:ac:1d:2f:
         93:fb:65:b3:7e:40:32:df:ba:49:5e:e0:d2:49:d7:fd:76:9d:
         c7:dd:23:15:0a:81:3d:e3:cc:04:bd:63:51:66:96:80:c3:44:
         db:8c:a1:80:02:18:07:91:9b:9b:70:fe:16:c0:78:7f:0f:a4:
         5a:98:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:51 2024 by rpki-client on console-ams.rpki-client.org