Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88cf6408-24b8-3b23-afd6-fd36d1c1359d.roa
File:                     88cf6408-24b8-3b23-afd6-fd36d1c1359d.roa (raw, json)
Hash identifier:          KCl1hFyYUNWDu7guWR0doJhJj7g384O0Uhk7pa7ADA4=
Subject key identifier:   36:CF:ED:E3:01:3C:B1:3F:40:81:5D:F1:38:B7:BA:8B:A7:20:5C:E7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858381167ED1B9EC661003324B700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88cf6408-24b8-3b23-afd6-fd36d1c1359d.roa
Signing time:             Wed 25 Nov 2020 05:00:00 +0000
ROA not before:           Wed 25 Nov 2020 05:00:00 +0000
ROA not after:            Sun 16 Apr 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:11:67:ed:1b:9e:c6:61:00:33:24:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 25 05:00:00 2020 GMT
            Not After : Apr 16 04:00:00 2028 GMT
        Subject: CN=45248182-dcee-41fb-b577-e4a3978938f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:47:22:88:ba:76:25:a7:8c:e2:5f:0c:b2:
                    14:57:9e:f4:f8:0e:b5:bf:bd:d2:9e:e7:ae:3f:80:
                    bb:ce:d2:0b:12:67:46:9a:8e:34:af:af:0a:58:ab:
                    8d:c2:94:cd:5d:d9:1d:18:aa:98:78:1e:86:2c:c1:
                    b9:1b:b5:a0:e1:f5:1e:7a:ab:7c:3a:5d:6a:d1:7f:
                    42:4e:15:f2:e8:07:56:31:b0:11:21:52:d6:43:ae:
                    1c:51:3a:93:8a:26:17:7c:72:42:fa:33:37:cf:04:
                    5d:7c:be:11:39:b3:4c:d6:5d:12:8e:ca:7c:d6:8f:
                    e0:55:39:24:c3:2f:1f:f3:6e:41:99:d8:4c:73:bb:
                    de:b9:d8:68:6f:9a:25:54:7b:4b:62:81:0d:8c:3a:
                    9e:9a:90:48:af:84:3a:71:1e:2b:8c:84:1e:c3:39:
                    0b:26:5f:81:73:ee:47:19:52:ef:44:d2:5c:e5:bf:
                    99:42:66:c5:8d:cd:bb:15:df:27:8d:38:41:b4:e7:
                    c0:9d:8d:25:64:09:5b:b1:c8:92:a8:ff:c6:d5:33:
                    75:45:c9:56:d9:41:33:7d:bd:c2:da:20:7e:a3:2e:
                    b9:0f:3f:28:fb:e1:43:38:79:7f:7d:bb:95:fd:f5:
                    f9:3d:6e:b9:01:ae:a2:f6:9d:3c:d9:95:5b:f8:e7:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:ED:E3:01:3C:B1:3F:40:81:5D:F1:38:B7:BA:8B:A7:20:5C:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88cf6408-24b8-3b23-afd6-fd36d1c1359d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3b:12:c6:ef:c4:02:fa:76:b9:41:d1:e5:f2:94:69:10:5a:
         cd:bb:55:40:40:87:77:70:14:47:a7:7e:84:1d:5f:51:cd:14:
         74:af:38:ea:b7:b8:6b:ad:60:b7:e8:de:db:c4:bd:df:93:08:
         d3:83:df:ca:2e:7e:62:83:d9:64:9e:dc:28:18:69:af:cc:6a:
         b0:8a:f8:a9:db:a6:cc:1e:86:bf:7f:88:0e:26:29:6b:1f:56:
         34:4e:23:c3:90:8f:2d:b9:c5:6d:95:d0:f0:15:65:67:b9:c0:
         60:42:9f:d2:89:88:33:32:1a:a8:3e:57:ff:2d:24:e9:98:e3:
         8d:39:89:41:83:9f:bd:75:de:42:6d:f0:db:96:4e:d3:82:26:
         6c:3c:9f:da:4f:47:4e:df:53:32:81:d7:12:54:08:88:56:52:
         c6:f9:ed:4c:e8:65:5f:c1:02:5f:11:e0:85:8b:3e:f4:ae:d6:
         67:ec:de:cc:e8:8e:80:5f:ae:d9:45:6e:e7:d1:38:20:ba:c5:
         12:0b:be:ba:88:cd:fd:71:88:84:c9:9b:c8:5b:bd:4f:c6:df:
         5f:69:cc:6f:9d:97:c8:ec:55:22:49:05:f2:bb:ee:a2:c4:79:
         99:9e:7b:bd:1d:9d:8c:cb:d5:68:cb:6f:7f:2b:ea:b1:73:d8:
         dd:aa:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:41:27 2024 by rpki-client on console-fra.rpki-client.org