Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91a20a63-b422-3cb7-b4a7-875fcb1d640e.roa
File:                     91a20a63-b422-3cb7-b4a7-875fcb1d640e.roa (raw, json)
Hash identifier:          NUEs+K0ETQEW7X0KTZkJxkdphqkos1uhU1uT5XxOg8U=
Subject key identifier:   2A:86:71:68:F0:92:8B:F0:FC:23:D5:A5:63:E5:3B:85:08:FE:01:4E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285839F5AB0721D997B338AD59F300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91a20a63-b422-3cb7-b4a7-875fcb1d640e.roa
Signing time:             Tue 18 May 2021 04:00:00 +0000
ROA not before:           Tue 18 May 2021 04:00:00 +0000
ROA not after:            Wed 22 Mar 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:f5:ab:07:21:d9:97:b3:38:ad:59:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 04:00:00 2021 GMT
            Not After : Mar 22 04:00:00 2028 GMT
        Subject: CN=9916e28a-843a-45c1-b22a-be4c8bf0a956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5e:d8:44:dd:2d:16:32:4d:f9:5a:c6:b9:79:
                    9e:0a:ab:09:7b:df:7e:c0:ee:44:4f:76:14:fb:e2:
                    33:70:54:f9:2c:ac:c6:87:61:9f:8d:a4:36:ce:35:
                    2a:ac:c4:8f:0d:5c:f8:86:c2:6a:92:1a:9a:9c:b1:
                    03:72:1c:46:84:cd:bd:c9:a7:c9:cc:3c:62:a9:97:
                    5e:15:91:0b:2a:74:ea:57:16:70:3b:cb:58:2d:c4:
                    77:21:97:ed:80:7d:be:01:e6:70:f6:0c:18:11:68:
                    e4:9d:c1:7b:17:3c:9d:9b:1e:aa:53:1a:32:5e:af:
                    1d:1f:bb:00:65:98:91:54:b8:27:35:0a:91:be:ee:
                    af:e4:bd:05:69:33:5a:f0:1e:e6:02:e3:b8:f9:b0:
                    52:5c:cd:1e:90:8b:a4:27:d9:39:6f:f9:30:9a:51:
                    23:32:68:d4:9d:7f:a8:87:38:25:50:9a:28:0a:b7:
                    94:a8:18:ea:2e:28:02:30:a6:6c:58:ca:b5:00:2f:
                    eb:c0:b7:b1:0c:59:57:d1:ea:9b:4e:b5:f1:79:b5:
                    59:c9:89:d2:69:80:77:07:9f:a7:78:4c:a4:fc:a2:
                    19:b4:0d:25:3c:46:50:0a:95:73:b8:c6:5f:a5:0b:
                    33:47:3f:4f:4d:9e:1d:a8:87:23:8d:73:57:0f:b7:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:86:71:68:F0:92:8B:F0:FC:23:D5:A5:63:E5:3B:85:08:FE:01:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91a20a63-b422-3cb7-b4a7-875fcb1d640e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:35:a1:2b:bc:7d:b2:5b:9d:4d:32:2e:ee:88:1d:b6:db:77:
         fa:16:8e:57:c5:26:16:54:b4:d3:56:b4:0c:54:a0:ac:31:95:
         00:ce:54:63:40:c4:f3:08:aa:9c:24:3b:08:3b:41:b4:11:89:
         a8:b4:5a:42:5f:10:0a:e0:e4:fb:02:28:65:d9:8b:b1:d4:38:
         a8:89:dc:08:85:22:f9:4d:2f:a1:f2:e0:b0:8a:54:a8:84:25:
         0d:7c:b8:57:db:2b:86:55:a9:36:62:fe:8e:89:d9:bc:43:ef:
         ea:6d:c9:0b:7b:89:0c:58:34:62:b9:85:37:d7:0b:29:c0:55:
         c8:7a:07:cc:06:83:64:c0:c1:32:25:71:f6:1b:1e:2a:69:01:
         d7:13:dd:29:97:cb:b4:b5:f5:01:da:d9:83:a6:f2:ea:59:e1:
         86:e6:87:8a:92:8e:82:e5:03:ed:3a:66:92:af:aa:e1:c6:8b:
         4d:7f:4d:36:95:7c:dc:37:f0:49:46:03:40:e7:7f:0c:87:b0:
         16:ac:a8:f0:5a:51:42:7c:a7:3f:c7:78:11:f5:43:5e:50:89:
         7c:76:da:f8:2c:42:fb:e4:dd:1f:db:f1:82:f8:b2:8b:bf:fc:
         1c:13:5c:39:ad:e3:92:c7:3b:82:df:e8:cc:69:45:3c:d9:ab:
         c5:2d:25:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:08 2024 by rpki-client on console-ams.rpki-client.org