Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac2cebfd-fa8f-33e8-bba4-9c6cf3ab4e4f.roa
File:                     ac2cebfd-fa8f-33e8-bba4-9c6cf3ab4e4f.roa (raw, json)
Hash identifier:          Q5U3bfAvyrKNNLIKfWttFhnGWr1WzTOtd8ykH94nE4E=
Subject key identifier:   A0:69:FF:54:2F:89:F4:23:BD:95:14:22:A0:5E:DC:4D:E8:C2:03:74
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FFE45A5B9
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac2cebfd-fa8f-33e8-bba4-9c6cf3ab4e4f.roa
Signing time:             Sat 01 Feb 2020 01:02:54 +0000
ROA not before:           Sat 01 Feb 2020 05:00:00 +0000
ROA not after:            Wed 19 Apr 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:fe:45:a5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb  1 05:00:00 2020 GMT
            Not After : Apr 19 04:00:00 2028 GMT
        Subject: CN=20bba8ab-5d4a-400b-8f56-97e947dd9426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:5b:64:c4:45:23:1a:a7:4d:18:40:3c:2b:
                    0e:92:43:3c:01:af:ba:44:b8:0a:44:97:ec:cc:6c:
                    77:d9:e9:2c:af:3b:73:20:14:1c:c7:f3:0e:f9:53:
                    99:58:8a:8f:a7:bd:44:1b:94:40:46:9d:3d:c1:67:
                    6f:cb:f9:d9:58:91:f7:14:f5:45:98:78:66:f3:0e:
                    34:35:17:e7:65:e2:ea:90:d9:28:ca:a0:34:72:72:
                    66:ae:17:e3:fe:16:fd:b2:e0:1b:4a:4a:53:f6:4b:
                    f9:87:58:60:2e:6b:d4:88:9d:7d:10:ba:fc:d5:8c:
                    1b:10:04:17:e5:1d:80:c3:40:3d:b2:7a:7a:4b:41:
                    41:5f:8a:b1:96:b5:b1:8e:bb:09:49:03:bc:87:52:
                    4e:16:d7:93:08:d0:1c:85:e1:97:95:ea:cb:9f:f8:
                    71:40:d3:2f:be:b2:bb:55:0f:f1:7e:1d:e1:0b:5b:
                    51:5d:42:52:97:c2:c6:81:cd:8c:ac:f4:ba:99:52:
                    ab:8e:36:a5:ac:b5:bb:0a:50:63:17:2a:aa:cb:e6:
                    e6:50:8e:cb:58:2f:3f:56:b8:b0:e0:46:03:cb:1f:
                    39:6d:47:48:6c:b6:3f:7d:40:f3:f7:6c:8a:32:f4:
                    66:e6:c8:bd:c4:45:b9:0a:d2:a6:83:82:a5:e1:ec:
                    81:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:69:FF:54:2F:89:F4:23:BD:95:14:22:A0:5E:DC:4D:E8:C2:03:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac2cebfd-fa8f-33e8-bba4-9c6cf3ab4e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5a:cf:30:d9:88:68:69:c2:0c:b9:8c:cd:12:59:94:56:0b:
         9b:8c:9b:a5:cd:99:e9:41:aa:6c:05:6f:83:52:a9:cb:35:ab:
         a2:1b:0d:7e:19:90:c8:f4:20:7c:92:70:9c:42:49:f5:79:35:
         7f:06:e3:6b:4d:82:ec:b2:50:07:04:29:a5:d1:e3:f9:6b:18:
         eb:4b:af:2f:aa:ff:3e:ab:71:b6:14:7a:b7:14:94:64:39:9e:
         fc:89:76:e8:c9:f1:b6:20:f3:67:da:68:ea:38:9a:c9:fa:5c:
         ee:48:7c:63:4f:1a:2f:42:85:c1:d0:71:88:22:a4:2b:e2:c6:
         26:78:70:b2:eb:95:88:6a:39:c1:e5:2e:08:5d:e5:28:7c:3b:
         e4:54:a9:c9:61:d4:d7:01:61:92:e2:c4:86:65:1a:d6:ca:70:
         7d:a0:bb:2d:cd:ce:2b:be:51:f4:56:07:c8:56:f8:9e:7e:43:
         d8:6e:9c:47:23:fa:8a:78:66:84:c6:ce:5e:68:d6:e9:ce:48:
         11:23:6c:ec:0a:37:d2:43:dd:f0:e7:83:54:d3:91:5a:94:2d:
         59:0d:7c:9f:bf:8d:c1:b4:65:bd:df:76:b4:41:80:7f:03:37:
         2d:4b:82:00:2c:43:62:fd:34:09:39:8f:24:4e:21:de:be:1e:
         17:a1:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:09 2024 by rpki-client on console-ams.rpki-client.org