Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9eb030f8-04f4-3460-aa41-1712f7e310bb.roa
File:                     9eb030f8-04f4-3460-aa41-1712f7e310bb.roa (raw, json)
Hash identifier:          DvkAct8WEXcdnxByJGMyi5tIBF3bLbrnyYUatLqacxk=
Subject key identifier:   B7:C4:5D:62:8D:A0:CA:EA:8C:73:D1:51:B9:AF:A2:B9:ED:0F:7D:E8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285838D41EAD16CB094C4A2C266600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9eb030f8-04f4-3460-aa41-1712f7e310bb.roa
Signing time:             Wed 03 Feb 2021 05:00:00 +0000
ROA not before:           Wed 03 Feb 2021 05:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:d4:1e:ad:16:cb:09:4c:4a:2c:26:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb  3 05:00:00 2021 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=5c97f38f-3c47-4e6d-ad52-8edc1d3f27e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:66:0c:b3:91:a4:4e:c6:56:de:18:19:89:
                    ba:a5:68:57:25:c8:bb:1e:99:fd:86:78:13:e8:5a:
                    db:37:09:b0:e3:9b:00:95:85:69:99:ce:2b:64:27:
                    35:9e:6c:25:73:5c:eb:c5:cb:cf:c7:70:0f:7f:40:
                    e2:1a:2d:4f:60:d0:4a:da:26:94:51:2f:8d:f4:af:
                    a8:13:31:23:a4:8a:0f:b8:5c:40:84:e4:0d:59:06:
                    3a:66:32:ce:06:5d:71:f3:b6:d7:0a:67:7b:eb:aa:
                    a8:5d:c8:c6:b6:34:0a:88:a1:ed:57:9c:53:03:9b:
                    6e:0e:f9:33:39:25:18:fc:be:0f:61:36:f5:6c:de:
                    68:27:f3:6c:4c:5a:5a:49:6a:36:c0:18:73:4c:07:
                    ab:a6:ba:84:4e:d1:90:ca:af:d0:af:19:12:98:44:
                    d7:7f:a1:fc:df:9c:93:04:e0:96:3b:15:da:b6:5b:
                    81:8a:a5:99:b6:01:98:13:d1:dd:59:42:b4:a7:cc:
                    22:c1:2b:dc:ab:32:05:06:29:b3:bd:38:bb:88:11:
                    89:7c:80:74:45:61:17:b4:0b:ac:07:63:5f:4f:e6:
                    c0:59:b2:8f:4c:cc:75:a9:55:77:11:56:6a:3b:e4:
                    47:77:57:18:4b:31:38:b3:da:06:09:37:35:15:98:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C4:5D:62:8D:A0:CA:EA:8C:73:D1:51:B9:AF:A2:B9:ED:0F:7D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9eb030f8-04f4-3460-aa41-1712f7e310bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:05:4f:9d:4c:79:cb:6f:58:d8:74:47:a3:68:28:72:36:29:
         54:d5:bf:b4:2b:34:26:01:c5:90:d0:0c:4f:1a:59:bb:fa:3f:
         8e:12:cc:02:e8:d1:d1:c2:76:c2:d8:2e:12:78:81:42:e8:7f:
         c9:d3:cc:f5:78:fb:2f:b9:51:13:2b:48:26:a8:ea:fd:4e:3d:
         d7:89:80:24:aa:55:c6:e6:e6:23:d9:11:c9:1a:c9:53:b3:b4:
         72:fc:85:32:f8:cd:01:7d:61:9d:78:c0:31:95:dc:b5:68:3a:
         37:b4:78:13:11:84:8d:b4:9f:e8:92:31:79:4a:67:27:e1:71:
         2d:59:f7:d5:68:9e:55:5b:d6:f5:1a:ad:4d:d1:98:fd:85:bf:
         45:2e:f2:b6:a9:d5:69:31:02:19:15:6a:7e:0e:2e:20:88:4d:
         21:7f:eb:e6:69:41:c6:e4:ac:00:5c:63:10:8a:65:09:7e:c5:
         8d:ba:76:bf:c4:62:4f:47:44:c6:58:5f:8f:4d:c6:ad:8e:e8:
         61:39:33:5c:ae:df:97:3c:09:f8:e7:d7:18:df:7f:63:0f:04:
         02:b5:ce:d2:79:6b:26:47:f6:5d:e0:6b:3c:98:6b:de:8e:5d:
         2d:3d:8b:04:8b:8a:ce:c6:cf:c4:68:9f:be:96:ef:c8:5a:62:
         42:5c:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:41:28 2024 by rpki-client on console-fra.rpki-client.org