Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b48a397f-b2c9-311f-9c00-920188b4abf8.roa
File:                     b48a397f-b2c9-311f-9c00-920188b4abf8.roa (raw, json)
Hash identifier:          C6TpRCmG6hgL6v2vmYWFQtlm5CjWBAInpUwX0dDEv4U=
Subject key identifier:   60:94:E6:BA:EB:F0:00:12:54:7D:8C:BB:95:C5:9F:1C:B2:11:83:1E
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285839E2FF0A6147C414E8BFF2FA20
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b48a397f-b2c9-311f-9c00-920188b4abf8.roa
Signing time:             Tue 11 May 2021 04:00:00 +0000
ROA not before:           Tue 11 May 2021 04:00:00 +0000
ROA not after:            Sun 03 Mar 2030 05:00:00 +0000
asID:                     8075
IP address blocks:        4.192.0.0/12 maxlen: 12

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:e2:ff:0a:61:47:c4:14:e8:bf:f2:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May 11 04:00:00 2021 GMT
            Not After : Mar  3 05:00:00 2030 GMT
        Subject: CN=ed44288b-73f9-4f66-a874-7f384d2827b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1a:9d:a0:57:56:3e:48:61:d4:6c:54:99:86:
                    bf:5b:ce:b4:4f:a2:de:6f:90:27:42:17:ab:09:98:
                    38:ce:7c:be:a1:25:56:49:5e:a9:f3:f8:fe:b8:90:
                    f0:8d:fd:9c:45:81:9e:87:f3:1d:5c:73:f1:0d:a4:
                    d1:ae:ca:bf:9d:61:33:26:0d:3b:a5:49:cb:76:54:
                    d6:0e:30:ae:b0:40:88:b7:ae:73:99:11:5f:4c:27:
                    10:9e:88:bc:a4:04:18:dc:8f:d1:41:7f:6b:61:5c:
                    d1:08:54:9c:0b:04:47:1e:ea:63:68:f4:c4:04:ef:
                    9b:77:f4:b3:c0:db:96:d9:06:c5:1d:d2:ba:95:b5:
                    af:38:f2:5f:4f:ef:2e:69:ee:09:86:da:ba:ee:2a:
                    d4:47:f0:05:7c:58:da:a5:44:34:2b:8c:4a:b8:30:
                    c3:ba:bc:7d:1c:ba:c5:62:e3:40:1c:9b:b3:26:3f:
                    8d:11:eb:d5:10:c8:71:f4:56:bd:3c:94:af:12:5d:
                    e4:c6:52:cb:fa:65:ec:94:a8:ed:db:28:4d:b0:87:
                    1d:de:c1:10:39:57:91:cc:f9:21:f2:fc:89:9c:37:
                    8a:88:b9:ac:c6:4f:6d:34:c4:d3:a6:38:6a:7e:6c:
                    58:73:99:f0:26:81:6c:55:c3:56:50:56:8f:b7:d2:
                    94:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:94:E6:BA:EB:F0:00:12:54:7D:8C:BB:95:C5:9F:1C:B2:11:83:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b48a397f-b2c9-311f-9c00-920188b4abf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  4.192.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:45:ef:9a:f7:b0:7f:0b:a8:ca:c0:d5:68:05:65:58:a3:5e:
         19:15:39:c0:b4:67:a4:cc:86:52:e9:83:d2:56:b5:a9:f1:65:
         94:46:0c:37:1a:24:fc:40:01:a6:11:e0:a4:9d:a8:74:08:5d:
         75:ac:d9:90:7f:5f:51:6f:af:ef:1d:44:17:30:35:c3:f6:e3:
         7a:45:b3:7c:65:9a:e3:d3:5c:40:ee:7a:c1:b0:3c:ab:81:b6:
         10:db:e6:2d:26:a8:8f:d1:83:40:36:b3:6b:01:2c:69:ed:09:
         ee:97:a5:35:f0:e6:99:22:8f:b2:46:50:58:bd:32:71:8c:45:
         23:de:f4:09:27:89:de:c4:18:a3:d5:06:19:e2:17:a8:27:26:
         71:4a:7c:c3:ec:d3:82:50:3c:8f:94:3d:89:04:53:82:dd:8a:
         1a:31:74:10:7e:4a:cc:ce:5e:2b:6b:41:a5:a0:f4:9c:90:e5:
         ea:91:c1:87:10:87:c0:8a:e8:8b:71:0d:8b:de:d4:0f:fb:f0:
         75:63:19:f1:7f:d5:bd:61:8b:30:48:ce:da:09:e1:7f:3e:44:
         9a:18:47:4d:19:26:61:8e:4c:a0:06:21:21:50:cc:e8:34:8a:
         78:d2:00:4c:9a:26:fe:cb:fb:c7:43:bd:1e:4e:42:04:8f:c1:
         2d:c5:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org