Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76501688-832b-341b-9cb0-768908046180.roa
File:                     76501688-832b-341b-9cb0-768908046180.roa (raw, json)
Hash identifier:          NvmH9NeDFD9hfP0EE+sNOXfb2AfmRM2QR6tEgXr4gOU=
Subject key identifier:   AE:CA:D1:5A:A4:5F:BC:0C:36:3D:92:6F:BA:56:3D:94:A1:F5:A4:30
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858403BB5ECA679D49648E4DD1600
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76501688-832b-341b-9cb0-768908046180.roa
Signing time:             Tue 10 Apr 2018 11:26:02 +0000
ROA not before:           Tue 10 Apr 2018 11:26:02 +0000
ROA not after:            Sat 18 Mar 2028 04:00:00 +0000
asID:                     20940
IP address blocks:        2001:418:144b::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3b:b5:ec:a6:79:d4:96:48:e4:dd:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 11:26:02 2018 GMT
            Not After : Mar 18 04:00:00 2028 GMT
        Subject: CN=d3ce39a4-ed1b-4b4a-988c-9987aa0cbcfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:f4:8e:36:d3:26:03:94:4b:95:e9:89:42:
                    e3:0d:76:04:6f:0c:d4:f1:a0:7d:bf:d5:4f:87:24:
                    71:1b:86:f6:75:a5:27:0a:74:df:fe:0e:31:e2:79:
                    96:8d:2a:38:cb:6a:37:f8:b0:d6:d4:c0:fe:bc:df:
                    1b:1e:85:b6:cf:3c:28:43:ad:63:f5:c5:2a:d2:c9:
                    33:38:70:c3:8c:4f:5a:b9:33:5e:4a:d5:38:14:c4:
                    b0:3c:c8:cf:f3:28:e9:9e:07:ea:d9:ac:82:39:37:
                    e3:4c:63:2c:25:69:b0:50:8d:71:d6:fd:9c:9c:12:
                    ce:73:8c:29:50:63:b9:2a:ad:47:f0:66:76:a5:23:
                    b2:c3:3f:4e:db:31:ce:3b:fa:2c:65:e3:f6:be:e1:
                    da:9c:9f:a5:2b:88:3d:94:f6:fd:e5:fa:12:c8:ac:
                    8f:fc:a6:86:03:2d:46:6d:d1:4b:a1:e5:be:fe:c7:
                    4e:69:07:f4:5e:c5:87:57:8d:db:83:ca:fa:1a:f7:
                    03:d2:fa:53:a8:27:36:42:20:ad:eb:f0:7d:53:f9:
                    f7:4f:a0:9b:9a:6f:27:5b:85:b3:0f:26:d9:22:07:
                    80:48:7f:f5:db:62:7c:58:b1:e8:cb:f8:47:95:08:
                    4e:9b:c9:7f:67:3a:62:d6:df:ae:95:7a:ae:17:ff:
                    2d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CA:D1:5A:A4:5F:BC:0C:36:3D:92:6F:BA:56:3D:94:A1:F5:A4:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76501688-832b-341b-9cb0-768908046180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:144b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d0:2a:26:2e:c1:1d:38:98:ee:d2:b7:9b:bc:54:91:d9:1c:
         11:19:13:84:5e:6c:d4:8b:9d:74:12:e9:d8:53:b6:a5:c0:3d:
         86:ad:f3:cb:e5:80:54:41:5a:7f:23:99:7f:35:57:63:00:51:
         fc:44:70:c6:60:43:8d:21:5d:2a:dc:e6:b7:0b:23:d7:47:ff:
         c1:1f:b6:04:2e:1a:3c:b5:3c:30:4a:6a:f0:0e:a6:b5:75:39:
         71:79:74:19:22:02:a9:1f:00:21:e5:72:98:78:f5:08:99:5a:
         92:d6:c7:98:55:81:27:19:67:cc:73:2b:85:fa:20:8a:98:94:
         7a:8c:dd:77:53:06:ef:87:6f:6a:ce:f4:e3:d1:f1:b7:bd:03:
         45:59:cf:6a:51:13:6a:6a:6e:5b:68:6f:c8:43:25:74:dd:5f:
         61:7c:b1:e7:fb:07:76:32:74:ab:d6:8f:8b:3a:9d:33:e4:05:
         67:5f:99:2e:d2:a9:5a:7f:03:b9:b2:73:67:e0:e9:e5:e6:84:
         b5:a5:a3:4e:78:ac:20:02:61:a1:45:08:71:27:85:19:7a:cc:
         31:e1:a5:95:1e:2d:d7:25:e0:dd:c4:88:2a:8d:2a:45:49:8f:
         a1:62:9e:af:3b:1d:98:0f:7f:e0:d9:e9:a6:f8:0c:20:d8:cc:
         ad:5b:8d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:13 2024 by rpki-client on console-ams.rpki-client.org