Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65e975b5-0327-37b8-8d8a-e27bcfe63b17.roa
File:                     65e975b5-0327-37b8-8d8a-e27bcfe63b17.roa (raw, json)
Hash identifier:          f02V+2trFafyqu8Yy/6MYbSerlRDcr6G/lhabmtN0RE=
Subject key identifier:   E0:39:76:CD:48:FB:ED:1D:43:63:6E:9A:DB:36:BC:44:41:C2:0D:20
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A2818
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65e975b5-0327-37b8-8d8a-e27bcfe63b17.roa
Signing time:             Fri 30 Nov 2018 01:09:49 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:28:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=d01bcc3c-0d26-4407-b35f-ad38cc5aeb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:10:76:47:f1:7f:41:6f:a7:f9:4f:78:3a:
                    3e:6e:c7:0c:f2:9b:08:fb:df:d8:3c:57:02:ec:75:
                    91:da:34:9f:c2:03:61:42:3a:e8:c1:d3:a0:4c:52:
                    98:a0:2c:e1:50:40:53:8f:ea:99:1f:cd:0a:6c:35:
                    36:76:3e:9d:3d:31:c8:79:12:c6:71:c8:9a:b4:44:
                    8b:09:20:27:40:c6:9b:20:78:21:8c:e1:80:46:4b:
                    3d:f4:fe:c4:54:7d:bd:c7:7c:97:bb:50:9d:f0:1e:
                    10:1a:fb:bf:35:3f:fd:54:47:e0:c4:e2:98:54:79:
                    3c:fe:e6:89:6b:e3:7f:4d:4b:72:c0:ed:fc:aa:a1:
                    7d:1e:93:33:e8:4c:70:b7:37:82:9b:9f:03:f0:22:
                    90:77:bc:84:27:56:65:d0:f3:2c:e6:b9:8a:00:d4:
                    ae:f2:9d:4b:f3:01:0a:25:1f:04:72:95:64:6c:c7:
                    91:10:8b:62:2c:d2:a8:2a:65:3d:87:7e:e1:b9:8f:
                    25:87:00:9e:2a:85:f3:24:ba:cf:b5:2b:fa:ab:64:
                    93:d5:c0:d0:08:67:71:34:54:f3:2c:44:f8:b1:b7:
                    25:65:ff:6b:21:39:c6:9b:57:7e:08:98:db:14:bb:
                    76:c3:ec:ec:9f:2e:6b:4b:79:ca:20:6b:20:81:bb:
                    73:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:76:CD:48:FB:ED:1D:43:63:6E:9A:DB:36:BC:44:41:C2:0D:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65e975b5-0327-37b8-8d8a-e27bcfe63b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ab:fa:71:88:0b:5f:de:b1:43:a3:61:8c:0c:ab:9c:db:7a:
         0b:88:78:07:be:96:98:08:a6:57:cc:2c:cc:0a:ef:aa:94:f6:
         bd:8a:96:6c:58:d9:ef:34:8c:3e:a6:f8:1b:cc:5d:b4:b4:5a:
         12:c3:8b:e5:7c:ef:3d:5b:38:0b:ac:35:71:e2:5d:93:14:60:
         b6:37:a7:b1:74:ca:db:f5:6a:29:f4:78:fe:0c:c0:eb:d1:89:
         f2:49:d9:a7:bb:90:9e:e0:be:94:28:d6:46:23:7a:f5:e5:32:
         be:76:29:06:6e:fd:ef:91:59:51:4e:6a:37:ca:26:c7:29:7e:
         fc:ec:af:73:db:59:48:b1:f3:ef:dd:17:14:75:54:6d:30:3c:
         09:18:12:36:95:1b:93:50:33:31:dd:76:7b:9e:b0:14:72:57:
         b7:73:81:aa:ba:c6:85:72:2b:62:1b:03:d4:60:d9:7e:96:af:
         cd:a7:1c:a1:f7:60:93:f2:a9:0c:f7:23:bc:85:d2:15:8e:29:
         08:2d:23:88:90:f6:a7:90:40:b4:b6:db:d5:42:68:23:93:99:
         b1:da:42:df:10:58:e6:ee:12:bc:88:8d:e3:3e:6e:8d:52:06:
         ce:95:9d:35:12:fc:14:ca:eb:3f:d6:22:cb:01:09:95:3f:a4:
         b8:13:1d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:17 2024 by rpki-client on console-fra.rpki-client.org