Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc13973e-b895-31ab-a03b-1d14cbea8429.roa
File:                     cc13973e-b895-31ab-a03b-1d14cbea8429.roa (raw, json)
Hash identifier:          rI7k2PGh4Lc305jGcbgyg+zwpJ03ozBridzxxpOOjxY=
Subject key identifier:   C0:6E:55:06:43:D6:90:A5:34:60:B4:8E:38:3C:06:5D:4C:0A:4E:B2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC171CA1D8157
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc13973e-b895-31ab-a03b-1d14cbea8429.roa
Signing time:             Thu 30 Apr 2020 08:04:23 +0000
ROA not before:           Thu 30 Apr 2020 04:00:00 +0000
ROA not after:            Fri 05 Mar 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:ca:1d:81:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 30 04:00:00 2020 GMT
            Not After : Mar  5 05:00:00 2027 GMT
        Subject: CN=66cbcc14-ad38-4ab6-96b3-4db9c4fa93f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:2d:ac:fb:05:8e:09:99:e5:9c:23:85:56:
                    3d:3d:f6:56:b9:f0:6f:b5:59:d3:d2:64:25:bd:3c:
                    3d:d4:00:74:e2:a6:74:08:d8:76:32:e9:9c:1a:5f:
                    99:13:34:2e:bd:fd:b8:2e:90:a9:2d:05:d6:34:d5:
                    b8:d4:2d:ff:85:c4:09:cb:2b:30:c8:eb:c5:0e:33:
                    55:c6:69:15:88:a8:89:03:22:62:72:c9:cb:71:2d:
                    0f:a1:74:9f:3b:86:1e:29:56:f8:99:65:b1:b8:33:
                    d3:7b:70:9e:6b:8b:19:38:78:4d:37:9c:be:93:34:
                    ae:1e:1b:cf:ad:51:d1:81:63:eb:2c:03:37:95:59:
                    f0:f6:8c:6b:e8:f3:97:c8:fb:6d:ad:e8:7a:99:3f:
                    ea:c1:a5:f8:fb:01:e6:3f:13:8c:72:93:f3:99:ac:
                    f8:00:00:b0:f4:6f:42:0f:96:71:e9:70:ae:99:0b:
                    70:13:92:c7:2a:51:55:8c:31:57:ba:87:d2:d7:0b:
                    93:c2:5d:5f:eb:8a:c2:f0:22:f9:18:c7:59:22:98:
                    cf:95:ab:d7:04:f7:34:51:ae:20:f4:f8:2c:a9:7f:
                    d2:92:c5:b4:06:1d:6a:01:fd:11:91:a2:0b:6e:68:
                    b8:5b:be:29:02:a8:df:56:12:5c:2f:37:10:97:0f:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6E:55:06:43:D6:90:A5:34:60:B4:8E:38:3C:06:5D:4C:0A:4E:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc13973e-b895-31ab-a03b-1d14cbea8429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d0:db:c9:d7:62:a5:77:ed:78:a2:63:94:87:65:80:d8:64:
         b6:62:f4:7f:08:b1:16:93:83:24:89:fb:8e:17:da:5d:5e:07:
         0c:23:1a:78:f7:bf:80:6f:76:ab:71:33:c5:56:43:fa:10:6c:
         35:e9:7c:d4:a0:2c:ed:9e:78:83:39:46:a7:9b:5c:f8:e4:7d:
         31:19:6b:d3:f3:0a:13:5f:29:a0:85:ce:e9:c7:2a:97:d8:6b:
         b6:2c:8d:07:0a:4e:fa:f8:c7:4d:71:f3:3c:ed:ea:8e:92:b1:
         77:01:61:99:b8:20:4e:d9:dd:01:fa:99:0c:9a:bf:f2:c6:d9:
         4b:b4:ec:77:dc:f3:7b:1d:fa:58:22:ac:21:4f:01:a8:31:ea:
         4c:73:ee:2b:d0:12:0e:cc:57:95:5b:e5:22:d9:28:cc:a1:12:
         d0:39:dd:02:5d:80:21:9d:59:08:d2:1c:04:84:86:47:ce:60:
         f3:f6:9c:6e:01:79:39:72:54:4a:f8:25:0d:9c:ff:96:56:ec:
         d8:1b:f8:6e:99:e8:c3:20:d2:77:ef:ac:6e:07:22:b2:48:1d:
         cf:e8:73:a7:40:29:d7:40:6b:d2:1b:0e:fa:36:27:63:1b:25:
         81:8f:4f:09:04:9b:76:67:db:ea:39:6b:db:67:02:5a:6d:9c:
         f8:9f:24:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:14 2024 by rpki-client on console-ams.rpki-client.org