Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/68798309-1f03-357f-8423-97ae3c5ff57a.roa
File:                     68798309-1f03-357f-8423-97ae3c5ff57a.roa (raw, json)
Hash identifier:          +LQwoMzNZdxMeZseQN6XOT8O0C1AjSbiwvRTHMMFIVQ=
Subject key identifier:   29:4A:89:D0:34:0D:06:E2:35:0D:0E:47:3B:A7:09:48:73:0E:25:B4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E17E5DD81
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/68798309-1f03-357f-8423-97ae3c5ff57a.roa
Signing time:             Tue 29 Oct 2019 14:22:50 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     11404
IP address blocks:        192.67.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:17:e5:dd:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=257460db-cc50-4e8e-a7d8-81678bd81577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:e5:60:ad:fa:7b:79:9f:61:e3:7b:4d:0a:
                    38:56:a1:b2:cb:02:fe:78:38:15:7c:62:e6:b4:e8:
                    8d:8c:72:a8:59:7e:c8:12:75:dd:ea:45:d6:28:08:
                    b8:0f:31:ef:40:c0:be:2c:0b:8e:f2:50:7f:12:30:
                    42:05:a2:21:01:d5:87:53:c4:0a:01:a6:2b:f1:07:
                    e4:7a:fb:f1:d9:bc:d8:35:f4:0d:81:e1:6e:b9:4a:
                    dc:95:da:06:28:b0:c6:5c:e2:6d:5d:02:66:41:ae:
                    0e:6d:a1:b9:81:2f:76:e3:f1:cc:06:8f:db:23:80:
                    cf:9a:e9:e4:a3:1a:55:15:4f:70:3a:aa:f6:70:9b:
                    e0:a8:34:20:46:ac:07:06:ae:e9:e4:5e:1e:5e:b3:
                    b9:e3:3e:32:36:50:e5:94:dd:9a:d5:75:7e:f8:12:
                    bb:b4:31:d4:47:79:a4:82:c4:01:7e:3e:23:39:f9:
                    8a:f0:ba:9a:9b:7a:9d:fb:2c:d6:82:7e:26:a4:df:
                    0e:32:e0:cc:e5:92:96:e5:88:85:d9:a2:f6:5b:93:
                    01:9c:42:30:73:62:e5:53:d0:fb:df:60:5b:b3:ec:
                    18:c5:de:c2:1c:ea:11:87:8e:05:66:1d:85:b1:46:
                    1c:35:5f:75:07:ae:8d:2f:c9:48:f8:b1:03:00:37:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4A:89:D0:34:0D:06:E2:35:0D:0E:47:3B:A7:09:48:73:0E:25:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/68798309-1f03-357f-8423-97ae3c5ff57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:83:2e:98:55:8d:45:11:93:f6:85:03:49:2d:d1:a4:ca:
         dc:0a:80:79:e0:e8:cf:ca:07:17:6e:35:3b:f8:40:ac:d9:ac:
         ec:5e:db:a5:0b:c8:79:9e:81:96:4b:2a:d4:a7:87:3f:6f:ea:
         5b:6b:2b:a7:8e:88:e2:19:7d:b3:67:37:a9:76:0c:01:37:6b:
         26:b6:be:4b:f5:5d:06:4b:c2:f2:12:dc:66:62:ff:29:64:3a:
         aa:ed:2f:ab:6f:c4:dc:9a:3c:a0:7d:c8:4a:f4:73:96:50:17:
         26:2f:bf:5b:b4:88:b3:2e:42:cc:cc:b0:1d:bb:da:3e:f3:6b:
         79:9e:07:45:c0:cc:be:6e:2c:1b:d8:00:e9:1f:b0:14:1a:db:
         53:25:62:76:13:6c:fb:81:90:b8:5d:ea:90:f7:ba:ab:77:5b:
         8c:be:c5:48:d4:bc:55:5b:a2:57:c3:db:d4:09:8a:8a:49:2e:
         71:01:f0:bd:79:6d:66:9f:69:b6:b2:bd:33:20:1f:a9:48:07:
         b6:f3:8e:3e:b1:41:79:50:8d:65:dd:1c:d7:65:51:ef:10:13:
         df:ea:3c:9e:5e:33:94:b7:fe:05:7e:35:90:a5:18:28:ca:50:
         5b:5f:91:f1:64:d3:f0:b3:b5:e4:aa:c1:b6:fe:ff:26:a1:bd:
         73:f0:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:36:52 2024 by rpki-client on console-fra.rpki-client.org