Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/71073f50-8228-3b77-99ad-a87c0677c88f.roa
File:                     71073f50-8228-3b77-99ad-a87c0677c88f.roa (raw, json)
Hash identifier:          vlb6c1c7eOxaaB58eD8BywZwt5fhX4BPOJseXtJVJkQ=
Subject key identifier:   F3:60:B3:20:F3:0B:EC:CD:8E:15:BB:DB:C4:B5:D4:E8:D0:BD:A3:93
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229E29C
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/71073f50-8228-3b77-99ad-a87c0677c88f.roa
Signing time:             Fri 30 Nov 2018 01:09:31 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:e2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=785f362f-67ac-4785-8c38-3523db10e722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:17:de:88:16:20:cf:62:b8:13:ef:6f:cf:
                    2d:9d:3b:42:2d:6e:0a:40:a5:b9:a3:2e:fc:30:df:
                    b2:ed:ce:19:1e:25:c0:b3:71:d8:85:eb:ee:58:ae:
                    ef:2c:5c:0d:3b:02:4b:7e:6f:4b:45:62:35:2e:92:
                    28:ee:8b:e8:5c:63:48:54:ee:c7:97:b7:85:ea:8c:
                    1b:ce:56:a0:57:74:5b:52:eb:0c:4c:b4:d5:5e:a9:
                    26:8c:86:f0:62:87:40:39:cb:ca:c5:c8:8d:5b:19:
                    1a:b8:d5:dd:5e:65:f8:18:78:26:eb:e4:95:ce:7d:
                    db:4a:37:98:84:c0:1d:cf:5f:ad:8d:99:05:ee:db:
                    ca:60:36:cd:94:b4:7b:b1:b6:53:58:df:91:40:be:
                    c0:1c:29:a7:b5:81:5e:3b:bf:eb:79:64:25:bb:cd:
                    41:a5:1a:b0:d6:f6:0b:86:ad:47:46:fc:80:87:54:
                    2f:31:90:3a:02:46:76:87:bd:71:2f:79:0c:ba:93:
                    0e:20:38:e2:07:55:f8:72:21:fe:ae:57:5c:0e:f7:
                    91:eb:80:96:d5:f3:10:08:07:c3:cf:e2:02:06:cd:
                    f6:2a:b8:e7:9c:90:1a:1f:f0:96:af:c4:98:ab:76:
                    90:92:5e:45:b0:71:0f:46:c0:58:ff:3b:20:13:70:
                    75:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:60:B3:20:F3:0B:EC:CD:8E:15:BB:DB:C4:B5:D4:E8:D0:BD:A3:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/71073f50-8228-3b77-99ad-a87c0677c88f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:bc:91:ee:2e:af:c0:f4:6e:05:da:ae:1d:6e:50:f0:28:ef:
         79:51:11:30:2a:bc:da:6a:2b:86:47:aa:1f:47:84:ba:db:fe:
         a9:bc:af:e4:b1:46:af:d7:3b:5a:31:83:db:33:5b:53:e4:e6:
         6c:65:6c:44:ba:59:81:22:af:b9:ad:9a:5f:65:bd:8b:32:00:
         1b:e2:85:7d:fc:1c:13:5f:b5:f6:c6:16:53:e5:46:2f:f4:d6:
         87:e9:fd:49:dd:c6:8e:54:45:4b:8e:e1:24:fa:32:66:f5:5e:
         81:53:e1:ab:9a:cd:ee:8e:c2:ce:95:94:27:14:57:d1:c0:a2:
         7a:0f:39:1e:7e:d9:c2:2c:10:e1:6d:47:2d:0e:69:10:42:07:
         a9:f7:88:ea:0a:5c:74:f4:ac:14:22:50:c5:1f:7b:1d:9e:83:
         1b:50:cb:2a:eb:b0:6d:2d:ee:f2:31:86:2c:f6:6a:d0:57:75:
         6b:b0:56:6c:30:4a:a9:e6:6b:3b:0a:a7:83:34:7c:f8:84:61:
         2c:06:4c:42:46:b4:f9:c1:a0:63:08:aa:d6:e8:8e:04:0c:3e:
         a4:74:7a:96:8f:0e:c2:3e:34:ae:54:01:e3:01:4a:0e:8a:9a:
         50:0b:0e:11:4d:17:55:63:f6:b4:a2:2c:4e:60:76:a0:94:37:
         21:51:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:41 2024 by rpki-client on console-fra.rpki-client.org