Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/945a76d5-7ea3-392b-a1ce-e103cdf45a78.roa
File:                     945a76d5-7ea3-392b-a1ce-e103cdf45a78.roa (raw, json)
Hash identifier:          8ZuxfErrl6WuCU004+wYE7PLGZUo2IkxvSbH0OL+GqY=
Subject key identifier:   E4:74:03:98:33:1C:31:34:1B:74:80:42:6B:C7:96:E5:1E:73:59:14
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16956E240A4
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/945a76d5-7ea3-392b-a1ce-e103cdf45a78.roa
Signing time:             Thu 07 Mar 2019 06:41:02 +0000
ROA not before:           Mon 11 Jun 2018 04:00:00 +0000
ROA not after:            Sun 11 Jun 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.16.0/21 maxlen: 21
                          172.68.24.0/22 maxlen: 22
                          172.69.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:69:56:e2:40:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 11 04:00:00 2018 GMT
            Not After : Jun 11 04:00:00 2028 GMT
        Subject: CN=5c1d54b2-d47a-40cd-a111-7fcf4c9afd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:5b:52:47:a1:a7:65:3f:7f:64:a4:c5:5a:
                    66:1f:1b:7f:9e:f7:4f:01:ca:fb:c6:58:d0:92:a3:
                    76:24:33:f6:28:70:48:91:7a:4d:d8:a0:6b:98:41:
                    64:f7:6a:b0:48:88:d7:41:26:27:46:f1:55:aa:ec:
                    9a:c4:61:b5:63:62:ba:83:2f:c8:a4:0f:4d:70:50:
                    d1:57:0f:49:42:a7:39:eb:fa:6b:ec:d2:13:00:dd:
                    a8:21:00:5c:47:8f:88:f8:06:bb:eb:4c:1e:f1:19:
                    35:2c:5f:2d:b2:88:db:e6:77:d3:ee:b5:06:f4:84:
                    97:3a:a6:07:cd:3c:8b:01:99:fb:08:2d:97:71:b4:
                    cd:7a:23:88:0d:0a:4a:03:79:4a:0a:dd:36:25:5b:
                    69:b6:fd:b1:7d:70:41:da:bb:27:3c:a5:6c:8d:c4:
                    60:67:6a:21:03:30:b1:76:83:6c:ab:61:f4:18:5b:
                    4e:7a:1e:f1:44:64:d4:15:32:d6:f1:cb:cd:d9:a7:
                    61:91:a3:3f:30:45:30:0a:80:bf:0c:6a:69:aa:70:
                    f2:91:7f:74:7b:a5:36:a4:58:7d:f7:a6:c6:f0:94:
                    13:1a:6c:f3:a8:97:69:d2:3d:39:ab:2d:8c:47:87:
                    da:e3:40:81:87:1a:d7:b3:2a:81:fb:86:cc:e7:58:
                    47:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:74:03:98:33:1C:31:34:1B:74:80:42:6B:C7:96:E5:1E:73:59:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/945a76d5-7ea3-392b-a1ce-e103cdf45a78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.16.0-172.68.27.255
                  172.69.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7b:5d:5e:2f:2c:72:e7:57:4b:a1:f9:3f:5f:03:15:39:b7:
         98:e0:96:4c:04:57:57:dc:05:0a:cd:2d:5e:5f:40:7e:ff:71:
         83:63:17:b6:a1:aa:98:d0:19:73:b1:9c:8d:e4:30:dd:2d:20:
         56:1d:c7:a9:21:02:df:ac:44:f0:26:14:92:27:5e:a2:51:98:
         b4:c4:b0:0c:07:43:51:1d:25:15:70:46:3e:dc:3c:a2:5e:cc:
         2b:f0:07:24:24:1b:ba:e1:5d:f5:7f:58:98:eb:5a:31:f0:f5:
         cf:91:b2:2d:14:b8:9b:b7:0f:fa:09:ee:17:f2:17:df:13:93:
         d6:f3:51:da:f2:c7:bc:88:68:eb:32:25:a8:9b:88:58:cd:e2:
         ab:0e:a4:8a:00:ce:b0:73:e5:83:3f:77:cf:00:fc:54:c8:a5:
         1a:5e:96:8c:73:d5:ad:82:cd:0f:7b:8c:fb:94:c4:d0:96:4a:
         68:a7:2f:3d:22:d1:14:78:5b:09:0a:f4:45:a2:80:6c:e9:db:
         aa:0b:ae:09:42:18:60:84:60:9d:10:f3:52:03:37:e3:34:48:
         c4:ab:27:78:13:09:6a:52:0f:28:73:36:c7:85:d3:53:35:23:
         60:56:64:db:b8:8a:31:8f:b1:45:e8:44:04:f5:e9:d3:b3:e9:
         75:50:cf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:11 2024 by rpki-client on console-ams.rpki-client.org