Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d97d4e8-33b3-33f4-bc95-5cd0b921afde.roa
File:                     7d97d4e8-33b3-33f4-bc95-5cd0b921afde.roa (raw, json)
Hash identifier:          mAk28D5EO1m51DT4Fp8nLUI+mqAbT6kF5IougmJxHQU=
Subject key identifier:   B2:08:4B:E2:39:DA:27:68:23:37:56:51:F6:B5:62:23:8F:D3:2C:21
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A1F4A
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d97d4e8-33b3-33f4-bc95-5cd0b921afde.roa
Signing time:             Fri 30 Nov 2018 01:09:46 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:1f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=53729dee-11fd-43ba-aa9e-29bc23759651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f0:a8:08:9c:7e:d9:79:52:45:ae:8b:48:68:
                    ca:ef:43:e2:75:38:62:5a:8a:56:e6:65:40:56:24:
                    6a:8c:54:8f:95:1e:4c:0d:63:74:a5:7a:dc:2b:05:
                    d7:c8:25:2d:0c:f6:7d:f2:b1:3b:11:e0:19:a1:6f:
                    1e:39:26:0b:12:97:dd:57:91:30:c5:43:6d:fb:43:
                    20:75:6c:2a:58:d4:15:05:62:b4:5c:18:f8:ab:67:
                    44:69:22:a6:cc:4c:ae:f4:ec:cc:df:0f:76:46:a0:
                    c3:8a:fa:48:63:32:59:c2:4c:2e:45:c0:34:aa:47:
                    9e:18:25:9e:df:76:ec:72:fa:d4:c7:93:f8:b8:d3:
                    1b:6f:e1:43:c9:06:3e:61:c4:fb:80:9c:67:bf:c7:
                    22:0c:b0:43:08:22:5a:30:2c:dc:a6:2c:31:6d:52:
                    3b:73:12:00:67:20:a3:c1:10:42:f0:cc:d6:80:0e:
                    01:9e:48:84:58:48:77:12:72:e9:92:34:81:d5:8c:
                    0c:34:3a:56:02:83:9f:99:b2:de:09:c3:34:71:fc:
                    5c:46:f5:d6:fa:84:4f:22:0b:05:69:52:e8:73:d8:
                    35:f1:a4:51:b7:6a:46:ea:b9:ce:08:d4:99:03:61:
                    62:b4:6f:e7:a1:6b:32:f6:19:45:79:93:f3:fc:cc:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:08:4B:E2:39:DA:27:68:23:37:56:51:F6:B5:62:23:8F:D3:2C:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d97d4e8-33b3-33f4-bc95-5cd0b921afde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:39:38:85:e4:e9:50:c8:22:c1:8f:33:97:f7:9d:30:26:ef:
         68:7f:93:ae:a1:59:f4:a2:e3:98:cb:e7:8f:83:ee:3f:43:ab:
         c8:51:79:ec:d8:3a:65:60:95:1f:bd:f2:2a:2f:82:5b:f3:43:
         41:73:40:b7:be:d8:e5:b6:b5:ff:23:cf:1f:5d:a5:0d:60:07:
         16:80:78:f3:7a:be:6b:52:0d:92:88:4c:6f:79:b8:37:06:98:
         91:45:dd:69:d9:8e:8c:a4:fe:9f:11:8e:6b:51:51:6e:75:2a:
         6e:9d:fd:87:71:71:cc:e9:8b:a0:9b:80:fa:8c:e2:ed:c0:92:
         48:53:89:fe:36:7b:a6:59:b5:b8:70:55:db:22:b5:29:b9:cf:
         59:3a:58:ba:4d:b8:51:d3:06:e4:2e:a5:37:fd:00:bb:36:65:
         c9:22:6d:ae:20:2c:92:90:23:8d:76:1c:76:0e:54:ee:75:eb:
         1f:9c:c0:f6:8c:80:a0:5b:af:36:fc:c8:05:7a:88:47:4f:37:
         1e:59:dd:89:e3:5d:d3:e0:f5:ab:7a:41:87:4b:fe:6d:c8:b5:
         06:93:7e:78:25:39:88:e2:4d:c6:3f:a4:e7:ae:6f:29:0d:15:
         5e:8b:f0:f6:9e:2c:d9:ac:45:b2:95:f0:85:94:ef:8c:cb:ee:
         61:08:92:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:08 2024 by rpki-client on console-ams.rpki-client.org