Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7609b93b-606c-3138-a03c-b87f7fd60bea.roa
File:                     7609b93b-606c-3138-a03c-b87f7fd60bea.roa (raw, json)
Hash identifier:          tAJBfmjixi5D7yWjrPxJTkqaweL8f8pqxcdHjkmjYRk=
Subject key identifier:   61:E5:6D:C6:1E:4A:CE:67:75:DE:F9:EF:5B:9C:7C:55:D2:59:55:4B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A2D86
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7609b93b-606c-3138-a03c-b87f7fd60bea.roa
Signing time:             Fri 30 Nov 2018 01:09:50 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:2d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=d2450c1f-76ab-498b-8b3d-68f0211975d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:94:4d:56:8c:aa:43:e9:38:9c:db:e1:52:
                    67:8a:2c:d3:df:65:9f:56:42:11:f0:d7:f6:6a:5d:
                    09:d1:e4:dc:8f:f7:c7:2a:6c:71:41:58:38:6f:fc:
                    49:d4:69:47:c8:ce:54:a9:a8:20:b2:1a:eb:a7:29:
                    42:bf:43:0e:44:0f:84:3f:5d:a0:94:16:ce:30:9e:
                    96:cd:6c:1d:eb:fc:89:7d:39:3b:b2:8c:3f:52:16:
                    3f:8d:e9:eb:97:ee:6d:0a:e1:81:3d:bc:5f:9b:ff:
                    2c:e1:dc:36:10:b2:94:51:a4:31:ee:e3:14:88:02:
                    9f:be:1f:53:12:95:76:17:07:2c:4c:6b:37:24:52:
                    c5:7a:b9:b4:7b:87:28:08:7c:8f:be:03:e4:b1:e2:
                    95:27:9f:03:16:43:ed:b4:8c:ae:d1:f9:4e:54:65:
                    a9:55:3a:80:e2:a2:0a:b5:7a:3f:30:d7:9c:cd:18:
                    85:7f:c6:0e:8d:a6:0a:30:3d:86:35:e7:1b:0b:8f:
                    91:b9:ef:7b:c7:d5:82:5d:ed:86:eb:66:f5:d3:73:
                    7e:d4:02:89:d7:3d:f6:31:83:92:79:b1:da:c5:6c:
                    56:c3:d6:6c:91:58:37:2c:09:28:c7:04:b7:b8:6a:
                    3f:9d:70:ea:62:63:91:a0:62:0d:86:db:bf:ba:9d:
                    e8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E5:6D:C6:1E:4A:CE:67:75:DE:F9:EF:5B:9C:7C:55:D2:59:55:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7609b93b-606c-3138-a03c-b87f7fd60bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:25:20:0e:35:b4:30:e5:10:b6:3a:d8:1b:74:d4:79:2b:
         24:9c:75:61:b5:83:d6:d9:04:25:a4:3b:7c:45:6f:fb:64:90:
         fe:e5:af:c6:f6:3d:45:0a:99:bc:c0:b0:d7:e8:87:a6:90:6e:
         31:6e:f5:40:d2:f3:d6:62:cf:80:0a:bd:43:89:95:b5:97:67:
         1f:29:b4:38:94:5e:d7:90:4b:1f:27:0b:bc:c0:81:1c:4a:50:
         b2:5a:92:67:8f:4f:f6:c1:bf:94:1b:db:7c:01:ed:b6:dc:af:
         20:93:d1:6b:52:1c:d6:c4:fb:42:11:62:2f:a3:1a:f6:5b:b8:
         a8:b6:86:bc:76:ca:7a:d6:1f:4d:e5:ad:b0:a1:64:de:cf:e0:
         99:8c:54:76:9c:0c:57:ed:f8:cf:2c:dd:1f:ff:08:b0:bc:a4:
         07:76:04:88:e7:2b:7c:5c:c0:f7:63:0a:ce:2e:f9:2d:07:b7:
         82:b5:16:10:3e:5a:e6:0c:06:25:e2:3f:f3:3a:25:4e:42:4a:
         3b:b0:ec:ba:4d:ef:9a:04:a6:9a:ff:0e:14:42:19:a6:63:e6:
         e9:df:11:c4:20:2f:7c:e9:f2:91:6a:38:57:d5:74:de:ff:38:
         e1:b4:6e:87:ef:c9:9d:ae:b9:1b:82:c8:0b:42:36:92:13:84:
         06:14:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:09 2024 by rpki-client on console-ams.rpki-client.org