Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/06141f40-0ed6-3044-b153-d74b76cba921.roa
File:                     06141f40-0ed6-3044-b153-d74b76cba921.roa (raw, json)
Hash identifier:          xy7IFD8GgnYMf/7zTSPKAJjaNJmRpom9nRO80FenPNg=
Subject key identifier:   9D:05:CE:B2:48:BF:CC:B6:83:A2:78:F3:BF:2F:37:07:F3:8E:EC:3F
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584797E14119D10B1B6DFB8DEA00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/06141f40-0ed6-3044-b153-d74b76cba921.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     30103
IP address blocks:        149.137.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:41:19:d1:0b:1b:6d:fb:8d:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=f5c004fe-c881-4635-85bf-3597469b5ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:d1:28:7e:42:d0:61:9a:18:94:dd:a5:49:
                    c2:60:8d:f3:48:52:a8:c6:c7:d4:e2:b0:3c:02:dd:
                    0b:bb:a7:87:5d:25:fc:34:79:4b:e9:9f:00:29:b5:
                    50:74:24:ce:14:c5:1c:6a:63:f2:1c:e8:50:1e:97:
                    2f:4a:2c:5b:19:00:e0:49:cc:81:0a:56:e8:31:3e:
                    5f:ad:81:1e:f2:85:c4:2f:29:fb:ba:5c:04:44:fb:
                    57:f7:05:9c:f4:55:9c:63:20:86:cb:e1:ea:18:84:
                    3f:d9:44:68:af:40:f1:b5:3d:2e:a0:f4:8f:a0:e2:
                    f2:40:3f:1d:b7:a6:fc:95:19:f9:bb:7c:10:17:ed:
                    c9:56:52:03:6a:d5:11:a0:2b:0f:a9:30:51:ca:97:
                    4b:03:6c:20:e0:d4:14:d1:62:de:0e:f6:03:10:a7:
                    0c:86:ee:a8:dc:99:60:25:c6:e7:9b:7e:4d:5a:b0:
                    b8:f2:88:e0:41:71:d0:ae:cb:bb:27:e8:69:0c:56:
                    56:bc:64:1c:e0:d3:ed:b7:ba:e2:f1:58:bf:1d:e8:
                    47:c6:d3:93:19:76:6b:2e:2a:80:2d:a9:b1:d2:78:
                    43:ea:a3:ea:7b:cc:3e:65:b3:62:53:bc:9c:ea:20:
                    d8:31:ad:b3:f7:9e:9e:9f:f5:36:0a:70:40:1e:37:
                    b0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:05:CE:B2:48:BF:CC:B6:83:A2:78:F3:BF:2F:37:07:F3:8E:EC:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/06141f40-0ed6-3044-b153-d74b76cba921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:bd:6d:63:b7:67:ea:8f:bf:ab:63:8b:e6:38:dc:f9:ef:2c:
         18:f8:9b:e0:99:6b:ce:74:52:a0:41:33:d9:5e:2b:4f:ce:e7:
         e3:5b:4d:cb:3a:43:f5:55:04:ed:ef:89:59:9d:fb:6b:55:84:
         bb:a1:fe:e5:f3:b7:63:13:0a:11:8d:c4:70:f8:85:f8:38:66:
         97:1d:c0:10:cb:32:ba:5e:45:59:8d:06:86:88:21:ff:00:f8:
         e4:f8:17:46:53:43:20:58:3c:a2:6a:47:ed:d7:36:81:58:9e:
         80:c6:2a:c6:b1:10:d1:27:29:0e:25:ea:d8:db:ab:51:32:ce:
         4d:cd:bc:bc:c3:ac:4f:88:d0:33:5d:24:7f:5b:6b:16:11:ae:
         8d:fe:2c:88:0a:8d:43:48:0b:06:8b:ad:7c:31:65:c2:4f:21:
         82:19:7b:6f:3e:ab:a3:b4:98:a5:97:c9:20:05:42:3b:3f:c3:
         f5:aa:a9:29:54:ec:b5:3b:c6:df:87:52:98:76:58:b8:3e:5c:
         2f:f5:ee:67:5d:a4:12:8c:05:e4:cb:ba:14:6f:c5:bb:d4:7d:
         1a:34:60:ff:f8:11:15:0d:ed:20:a8:38:99:69:31:f3:7d:3f:
         7a:67:60:85:11:c8:03:f4:c9:94:c8:b6:03:fc:39:12:2d:bd:
         58:16:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:24 2024 by rpki-client on console-ams.rpki-client.org