Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4d37225-4eaa-3956-9141-0811442ce095.roa
File:                     a4d37225-4eaa-3956-9141-0811442ce095.roa (raw, json)
Hash identifier:          1cZBaX/RCOmFQ/4Pvda3ri6cmBqShx8UbVwLxxJK16Q=
Subject key identifier:   A1:9E:42:7F:3D:8C:67:FF:9D:0D:F2:99:6D:47:7F:6D:35:D9:68:4B
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173927579B5
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4d37225-4eaa-3956-9141-0811442ce095.roa
Signing time:             Mon 27 Jul 2020 22:47:19 +0000
ROA not before:           Mon 27 Jul 2020 04:00:00 +0000
ROA not after:            Fri 22 Mar 2030 04:00:00 +0000
asID:                     3598
IP address blocks:        198.105.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:92:75:79:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 27 04:00:00 2020 GMT
            Not After : Mar 22 04:00:00 2030 GMT
        Subject: CN=4c54eb20-0971-49ad-a807-06ce85d96cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:ba:43:11:f9:29:f2:e3:2b:0a:1b:69:b7:
                    91:a9:54:d4:e8:fe:88:15:85:e4:39:3d:99:57:26:
                    48:e6:44:22:04:20:1d:8e:ad:a8:e4:b1:cf:25:e6:
                    db:21:99:7b:8e:71:8f:5a:ca:78:36:a9:50:47:d7:
                    92:02:9f:58:98:f3:e6:f2:31:0d:d9:9f:9f:9e:c9:
                    9e:72:3b:fa:4d:c8:aa:eb:38:c7:04:0c:be:24:36:
                    52:28:94:37:18:89:d1:63:ac:78:f1:77:60:11:35:
                    39:5d:6b:8d:9a:63:84:0d:d7:f2:26:df:74:29:8a:
                    5e:6e:87:7c:19:c8:79:cd:bb:4b:a7:fb:2f:64:7c:
                    3c:27:3e:bc:62:4a:e0:e6:4f:8f:ad:f6:d3:6c:5f:
                    e2:61:ee:22:ec:3f:a4:e1:c1:98:35:37:b5:96:98:
                    b1:ac:71:a8:71:66:5a:04:c2:e1:b8:d0:00:d1:43:
                    16:9b:6b:49:20:64:25:5d:c4:4d:be:3c:1e:d1:32:
                    ab:ac:25:88:5d:d9:c8:2b:89:31:64:41:3a:6c:d3:
                    67:bb:fd:db:1a:ea:db:58:26:1f:bd:84:1a:9e:df:
                    6c:89:c1:9d:d0:27:66:aa:3e:e4:6f:98:44:16:2c:
                    ca:29:b7:d8:38:a4:29:74:b1:ce:96:48:d9:7c:60:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9E:42:7F:3D:8C:67:FF:9D:0D:F2:99:6D:47:7F:6D:35:D9:68:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4d37225-4eaa-3956-9141-0811442ce095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:fc:7c:25:91:13:01:4d:ab:05:a2:01:c4:9f:3c:a2:c5:6a:
         3a:34:34:4f:92:33:2e:ca:2e:c6:c9:01:6a:63:fb:8a:94:89:
         5c:7e:fd:d1:a4:ae:f4:92:fc:9f:56:1b:a2:5c:79:c3:9e:fd:
         8f:40:c0:86:b3:f7:f1:f7:02:3c:5c:83:f5:0d:4c:e1:41:11:
         ca:ed:b3:ed:5f:17:65:23:ee:d0:cb:e2:89:78:39:3d:93:4a:
         86:25:fb:77:b7:aa:3b:c0:87:bb:14:84:38:c5:d2:a1:71:47:
         9d:7c:9f:53:17:6a:08:bd:b0:fc:5d:bf:69:a2:81:4b:ea:80:
         8f:94:a8:d9:72:cd:22:20:30:ef:34:6f:d2:1e:1a:bc:80:ec:
         1e:16:90:21:bc:82:af:98:a8:14:44:d9:f2:87:47:5b:98:31:
         a5:c8:bc:4f:93:26:1e:01:dc:d9:21:1f:dc:14:c3:c2:c8:32:
         d6:99:17:c0:46:c6:aa:3a:9a:f1:6f:e4:27:7f:af:7a:c6:81:
         7d:ca:ec:62:12:fd:fd:81:84:0c:c1:bc:ba:84:33:a4:5f:cc:
         65:bb:67:29:36:1c:64:81:2d:49:55:49:ec:49:ba:48:45:69:
         04:af:7a:c4:f4:26:3a:8e:b9:b3:b4:cf:d4:34:ee:d4:33:2f:
         92:9a:1d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:45:33 2024 by rpki-client on console-fra.rpki-client.org