Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/52bbcfba-ccdc-30ee-bfea-8949f2b17ab4.roa
File:                     52bbcfba-ccdc-30ee-bfea-8949f2b17ab4.roa (raw, json)
Hash identifier:          kKgd1IaUG1nzi87Bc4ZdtsWasj4tfjgx4BLt3HrJAMY=
Subject key identifier:   64:8D:64:EB:7D:87:A2:5D:E7:D1:BE:D4:4E:14:F4:0D:26:5E:18:F5
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584537EC2158DC77140FDCFD8500
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/52bbcfba-ccdc-30ee-bfea-8949f2b17ab4.roa
Signing time:             Fri 15 Mar 2024 18:31:18 +0000
ROA not before:           Fri 15 Mar 2024 18:31:18 +0000
ROA not after:            Thu 13 Jun 2024 18:31:18 +0000
asID:                     14618
IP address blocks:        68.64.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:ec:21:58:dc:77:14:0f:dc:fd:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar 15 18:31:18 2024 GMT
            Not After : Jun 13 18:31:18 2024 GMT
        Subject: CN=a2852a5c-4e46-4df3-bb8c-a5e94a7f255f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:ab:6b:22:26:49:37:62:f7:7a:f8:ae:8d:
                    da:de:50:cf:84:2f:9c:7c:ba:76:90:ad:32:e6:1f:
                    bf:ef:ce:81:d4:89:c3:65:e0:ae:b1:c3:ee:db:d0:
                    59:fa:87:be:33:1e:b0:7a:b1:89:37:39:4b:84:02:
                    6b:5a:52:e4:4b:fb:15:89:bf:94:ee:be:b8:09:ed:
                    0a:52:5f:cd:a6:44:8b:38:25:5b:03:0c:11:0c:84:
                    4d:1d:2e:b0:c0:cb:f4:1b:9d:a5:d7:de:b9:5d:dd:
                    c8:6b:a9:a6:fc:cc:57:cd:c6:d6:b7:ee:9e:18:88:
                    1a:64:1f:db:0f:71:a9:f8:c9:62:95:85:a8:91:05:
                    81:bf:4c:ef:c0:fe:84:1a:af:22:0e:29:4c:77:d3:
                    c7:d5:1f:86:72:5e:c4:50:6f:79:1c:a9:29:5c:3f:
                    f2:d6:7d:f3:c5:97:4d:c4:29:a7:3a:9a:66:9f:00:
                    25:f8:ee:fc:e5:69:1a:66:3c:f8:49:52:ef:38:48:
                    08:be:e9:01:da:37:3a:dc:e5:13:c3:fe:60:49:77:
                    54:65:c3:b6:18:4f:0b:34:52:ce:0a:1d:c0:cb:50:
                    0a:ea:0c:1b:12:99:c9:94:1f:17:3d:fd:c4:b7:e8:
                    60:81:10:3f:74:08:e3:c5:ba:c3:ed:8e:b0:1e:c7:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8D:64:EB:7D:87:A2:5D:E7:D1:BE:D4:4E:14:F4:0D:26:5E:18:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/52bbcfba-ccdc-30ee-bfea-8949f2b17ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:79:27:f9:ce:5d:b4:12:7e:b3:96:ff:ee:2f:f0:0f:2e:dd:
         8a:7b:c7:87:1e:42:28:c5:89:88:ff:98:7a:81:6f:f7:08:5a:
         fe:76:a5:6f:a8:8c:a7:53:de:d4:88:30:20:4a:13:3e:f9:d2:
         f5:94:95:38:b6:01:6c:a6:ee:af:5f:66:af:4f:78:84:67:06:
         96:48:6c:a1:bd:c3:f3:fa:87:9f:da:52:6e:61:6c:f2:ed:bb:
         63:7f:1c:d7:11:80:b4:7f:e0:06:cb:f0:7f:d9:b9:fd:92:10:
         c2:3a:99:bf:3e:aa:bf:af:a6:ed:75:3c:70:e1:1d:9d:44:2f:
         36:5b:65:a5:1b:1f:59:cc:9e:5a:09:6c:12:5a:1d:71:4b:a4:
         fa:2a:b2:1c:26:7a:a9:9a:92:82:52:53:09:5e:8b:13:68:ba:
         c2:4a:21:c3:9a:cb:c1:be:66:c0:be:1e:05:ce:2f:c8:8a:73:
         d2:1c:99:b9:8a:9d:4a:66:6d:2d:24:0d:b0:38:4a:ae:5f:cc:
         e3:f9:d7:96:01:16:36:43:9d:b5:4c:49:f8:64:86:f4:a8:b8:
         82:53:a3:14:b5:81:3e:b1:23:8a:c6:39:87:33:c8:98:f0:09:
         63:db:3b:fe:49:72:c6:b4:5c:43:0c:5a:5a:e2:94:fc:59:3f:
         75:5c:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:03 2024 by rpki-client on console-ams.rpki-client.org