Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43b434d3-86ea-38fd-9cd2-92401c9aaa60.roa
File:                     43b434d3-86ea-38fd-9cd2-92401c9aaa60.roa (raw, json)
Hash identifier:          x5bhvQmcSJDtJWX/i/0E8NiFX6bzaKy73HIyDyQGbhg=
Subject key identifier:   41:0B:68:3B:88:22:75:56:01:60:1E:C6:ED:34:FB:97:9C:3B:F0:E7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A2C50
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43b434d3-86ea-38fd-9cd2-92401c9aaa60.roa
Signing time:             Fri 30 Nov 2018 01:09:50 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:2c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=ecc9b3d0-9a6c-489f-a925-b793afa667a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:bd:75:7b:f8:17:06:46:88:31:cf:d4:2c:
                    8b:f4:ab:99:34:87:81:6b:94:cc:c7:56:b1:c2:b9:
                    36:98:95:31:1d:b8:bf:22:dc:5f:01:c4:3d:25:ef:
                    9e:44:ad:04:29:37:a5:0b:7d:b3:8d:11:38:8e:4c:
                    81:b7:87:4c:70:3d:86:c4:eb:08:40:c0:71:a2:08:
                    a4:3c:d7:f5:08:83:b5:25:db:57:44:dd:a4:aa:a1:
                    9a:b3:6e:8d:1d:ad:f8:cb:65:a0:62:1e:51:25:e6:
                    e8:90:b2:cf:26:df:52:1b:99:9a:9b:32:15:5f:3e:
                    7e:10:8f:97:48:4d:c8:57:9b:3c:59:05:ea:c3:ed:
                    40:26:e3:bc:c0:03:35:18:3f:32:dc:be:af:18:f5:
                    02:b0:96:af:7b:d1:06:cb:fc:5e:3b:72:f6:13:f8:
                    68:5e:3c:c0:2e:64:18:e3:7d:2f:0b:f0:db:e6:3d:
                    13:6e:03:53:d8:3d:ba:10:61:3e:08:35:46:90:69:
                    56:7f:8e:b9:46:45:c7:f8:fc:29:92:2a:5e:2e:5f:
                    a4:49:24:93:c9:5a:53:79:c4:e0:82:c1:f6:50:45:
                    c0:1e:6b:b5:7e:d1:37:6b:e5:7b:3f:f0:ba:71:3d:
                    97:87:4d:1d:63:da:06:f3:ef:4c:ac:6b:26:bf:60:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0B:68:3B:88:22:75:56:01:60:1E:C6:ED:34:FB:97:9C:3B:F0:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43b434d3-86ea-38fd-9cd2-92401c9aaa60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:13:71:ff:9e:43:9e:3d:a8:41:4f:73:a0:1b:14:03:a4:49:
         39:7c:0e:36:e2:98:0d:0a:4c:71:0f:bd:d9:3a:f8:e1:d4:bf:
         b2:84:a0:60:8a:10:62:f4:44:e6:54:1f:ef:ef:ba:22:a9:c9:
         fd:8a:79:36:31:d5:14:0d:bf:d1:c5:31:0d:01:34:ad:7d:88:
         71:7c:8b:42:80:53:6b:b2:2c:4d:99:b0:ed:36:fe:19:48:79:
         8e:a5:1d:cb:63:85:18:b6:01:b0:35:83:6f:61:56:4c:58:11:
         03:64:dc:e6:22:f9:a1:e1:3c:06:ed:4a:ca:3a:e3:68:10:5e:
         84:fe:5a:3d:11:15:1c:dd:5e:a6:72:26:57:4a:9d:bf:a4:8b:
         6d:12:3f:b1:6a:50:08:c5:1f:64:77:55:39:ef:91:7a:41:7c:
         8c:6f:0c:e8:12:87:a6:a7:a0:74:5e:28:5b:8c:83:48:ce:b3:
         8a:2a:91:1d:86:71:5a:58:11:3b:76:29:39:69:d2:1e:fc:ac:
         5e:36:e0:01:4b:49:2a:b4:bf:08:98:32:45:be:2c:c7:31:80:
         4a:77:b8:4f:ab:c0:6c:bd:2e:88:4c:78:02:3d:67:e9:fd:4a:
         9b:3f:87:75:81:be:d4:26:d3:6f:2e:66:5b:c0:f3:f9:e7:ad:
         75:9a:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:30:13 2024 by rpki-client on console-ams.rpki-client.org