Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa
File:                     1a07af80-4f86-3445-9db1-9d3ed1101688.roa (raw, json)
Hash identifier:          PLYqZTs2nXbq+LJ1jNZDZpwtlrXoQnENHrHD2kVr6L8=
Subject key identifier:   B0:9C:CA:18:A7:B6:01:92:72:88:74:80:0B:DA:A2:71:AF:7A:E6:D1
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F432858479AABE681103BDD537B9CB000
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     61317
IP address blocks:        68.67.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:e6:81:10:3b:dd:53:7b:9c:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=19d28318-9e66-4aec-8913-75917d9a89d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7d:30:fd:ab:4d:fa:15:94:11:5d:3b:0a:ed:
                    60:fc:60:7b:af:d9:80:be:fd:29:49:32:5e:1a:82:
                    9d:e1:e9:58:26:36:27:bf:41:fe:5b:ae:6c:7a:29:
                    d7:07:b1:f3:bd:9c:fd:a8:6a:20:45:db:1f:52:c3:
                    cd:c8:26:6e:64:a1:a7:2b:91:c8:96:6d:33:87:c9:
                    ab:66:7e:bb:ce:70:aa:03:3c:8a:6c:5c:5c:2f:58:
                    14:89:53:25:c1:c9:c1:37:9b:6b:86:63:8b:ac:e7:
                    18:6a:5d:d7:5f:4d:27:c0:d8:61:c9:b8:2e:90:94:
                    be:39:89:14:80:dc:b0:85:8e:14:6b:30:de:2d:e6:
                    1e:84:21:40:11:d3:75:b6:21:45:09:e0:aa:9a:16:
                    d7:fe:de:52:9a:8e:0c:86:89:ba:6f:33:39:36:7e:
                    ef:d1:ee:37:90:fc:84:78:5e:48:74:98:a3:34:87:
                    22:ef:2f:cb:90:9b:d0:98:5d:38:e4:86:d6:a6:15:
                    cc:1b:be:bc:a5:e0:e6:76:50:8c:35:bc:30:a5:ac:
                    88:8e:69:19:20:fe:a8:bf:ed:66:98:7a:32:49:d6:
                    f8:90:2d:4b:7e:8d:a0:5e:60:78:8f:9c:b7:0e:b3:
                    1e:a7:16:3a:bb:7b:6a:68:30:56:50:fb:75:49:b1:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9C:CA:18:A7:B6:01:92:72:88:74:80:0B:DA:A2:71:AF:7A:E6:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:71:42:0a:d5:bf:0a:12:07:6e:5a:3e:fd:72:65:53:ba:7c:
         2b:3e:d4:02:a8:4b:5f:77:31:da:38:c0:d7:a0:ce:f4:fc:5e:
         77:6e:f2:cb:eb:a9:5c:b7:49:85:e7:39:ad:8e:de:52:09:5b:
         ae:f8:7a:2e:fb:e1:34:28:97:c2:f8:b2:3e:02:e0:ac:9e:1c:
         c9:9a:91:9b:35:77:60:fb:10:4c:cd:2a:e5:95:b2:95:6b:b0:
         41:74:d2:ff:68:a4:aa:09:e8:fa:ac:b4:5d:75:44:f0:8c:fe:
         e3:96:b7:e3:e9:8a:a3:db:ff:a4:a9:07:48:d4:4c:4e:35:d5:
         cb:10:f0:66:8d:da:72:01:e3:cd:bb:33:2f:07:52:9b:54:1f:
         e6:2f:97:7b:be:0b:a9:c9:dc:d0:76:18:ef:30:eb:d6:2c:05:
         7c:11:dc:e6:a7:59:55:54:d3:35:53:c2:72:37:8e:4b:17:11:
         a5:aa:28:7d:89:ea:10:e6:1d:f3:99:02:01:f5:3c:85:52:c9:
         52:2c:d5:31:c4:70:b5:35:9e:c3:0e:37:ed:3f:72:ca:40:0f:
         0c:61:f4:ce:cd:53:8e:92:01:c5:7b:ea:35:49:e5:9e:4b:0d:
         9e:0f:56:72:4a:3e:4d:16:1d:e5:37:b9:25:a7:72:a2:6a:9e:
         2d:97:ca:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org