Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa
File:                     6de1fbab-8ba5-3ece-969d-b6be65026f84.roa (raw, json)
Hash identifier:          M9ihYQezBnRoVA/cWmo3rPF9nwbhmsUpcyd8y8BwhA0=
Subject key identifier:   C3:D1:68:AE:E9:F2:BD:59:57:23:FD:16:F8:D4:0E:C6:81:81:E7:73
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285848B78B8105CA4A431CBF919D00
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        68.64.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:81:05:ca:4a:43:1c:bf:91:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=b438336e-814b-4b6f-b674-f185327f4aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:0a:35:18:c5:d9:89:b1:fa:48:bc:35:ed:
                    a8:b8:9a:6b:02:29:b5:b3:be:f7:4d:97:8a:c5:d0:
                    18:c2:e5:d7:ec:2c:60:c2:e2:01:fb:57:b1:7d:43:
                    b5:12:f6:e3:75:53:65:1d:cf:e3:20:27:73:87:84:
                    43:41:7e:8d:dc:45:40:d9:2d:17:fe:91:1e:f4:4d:
                    f8:19:42:0e:0a:d3:d7:7c:e8:17:7b:77:05:70:91:
                    32:b3:2d:8c:75:7a:ff:2c:7b:49:5c:78:28:bb:e3:
                    be:8f:70:aa:78:19:9b:b8:4b:58:75:3c:94:65:71:
                    a6:63:5d:5d:4e:78:b1:8a:ce:91:bb:59:49:be:d6:
                    11:72:bd:3a:e4:1f:41:63:35:83:91:ec:85:ad:74:
                    5e:09:ab:2d:91:1e:87:5f:dc:78:61:6b:29:e8:8b:
                    5e:fa:3d:ee:fa:7b:d7:b8:bf:df:94:0e:9a:de:9f:
                    9b:c0:cb:21:30:55:9e:cc:1e:e2:7c:bb:9e:66:79:
                    03:a5:fc:94:73:09:3b:08:1e:06:81:f9:17:b2:9d:
                    44:ba:b4:03:69:2f:ee:87:5c:fc:4a:3f:eb:cd:90:
                    91:3a:4c:fd:ac:e5:63:52:8c:a6:ea:48:96:b0:f9:
                    3b:e0:4e:28:70:70:a8:f9:74:0d:22:42:6c:90:a4:
                    37:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D1:68:AE:E9:F2:BD:59:57:23:FD:16:F8:D4:0E:C6:81:81:E7:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c5:c7:a9:16:a6:84:76:1f:2a:63:90:20:cf:cd:cc:3c:ff:
         a1:27:cc:13:62:80:31:c3:95:7e:4e:95:dd:e5:65:65:f4:2e:
         9c:99:fa:91:42:2b:f6:46:c5:9b:f2:04:80:2e:19:d1:7b:b8:
         70:03:e8:23:4a:3e:32:36:d2:32:4e:e8:bf:5a:d6:4b:e0:59:
         5f:f1:89:0b:3d:e3:fc:23:22:d1:48:54:2f:ef:eb:40:96:74:
         20:9c:7f:b9:7b:be:6d:d1:a0:8f:cf:59:6c:62:74:a2:9b:ce:
         04:0f:0e:3d:0b:7d:4a:c5:ba:1b:8e:26:9c:05:db:eb:43:6d:
         06:d6:66:e3:6d:f4:e4:f5:cb:85:c3:53:e1:aa:c1:da:0a:cd:
         4c:19:72:02:f0:37:19:ae:2f:c1:54:2f:49:54:77:53:a1:70:
         1d:f2:87:2e:21:6d:bb:dc:9a:7b:c1:df:5a:10:77:92:c8:86:
         a2:ea:74:5b:3e:14:e2:99:46:8e:2d:72:32:2b:28:68:8b:c2:
         71:31:39:f4:3a:c4:f9:42:e2:0d:90:7c:94:4d:40:89:9b:c3:
         ad:f3:9c:54:07:ec:89:62:dc:e2:48:8d:af:0c:65:68:cc:2f:
         db:dc:2d:e8:c1:bd:07:24:c8:4c:09:cc:14:ad:be:41:aa:fd:
         a3:30:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:12 2025 by rpki-client