Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfeb1242-2582-3242-802f-39d2e247b487.roa
File:                     cfeb1242-2582-3242-802f-39d2e247b487.roa (raw, json)
Hash identifier:          2/2FetOvKgwONOCXsLwrdtNXBVIGeH4+Ot+M80hxyzQ=
Subject key identifier:   7A:05:3E:93:95:63:B6:4C:C7:20:53:E0:46:61:D8:67:D7:BC:6B:F7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858383BB4393F1E3784B7EA5BEE40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfeb1242-2582-3242-802f-39d2e247b487.roa
Signing time:             Fri 11 Dec 2020 05:00:00 +0000
ROA not before:           Fri 11 Dec 2020 05:00:00 +0000
ROA not after:            Tue 02 May 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:3b:b4:39:3f:1e:37:84:b7:ea:5b:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 05:00:00 2020 GMT
            Not After : May  2 04:00:00 2028 GMT
        Subject: CN=08430875-5972-4a19-959a-ae65787e7766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:f0:83:09:d5:f5:07:d2:28:b1:58:71:11:
                    66:15:41:c1:75:14:80:54:6f:41:ae:46:b9:54:93:
                    4b:e1:1b:ed:a9:f1:9b:8a:c9:d8:b6:ce:90:e3:fa:
                    9f:63:47:62:5c:ce:7a:a5:a2:61:46:30:c3:43:59:
                    d9:a8:66:d2:54:fd:75:77:24:69:65:5f:7c:8b:96:
                    da:8e:3f:b1:af:04:63:4b:63:30:83:36:f8:a9:01:
                    61:5a:9d:41:87:cb:7c:e4:25:17:bd:b7:ed:f9:06:
                    e4:c8:15:95:94:f4:68:b7:de:06:4e:e1:9d:6d:d8:
                    0d:4a:25:45:73:4b:59:18:13:e0:b2:fd:94:58:90:
                    9f:d6:75:56:f4:59:49:80:94:05:34:29:2a:fb:5c:
                    91:fb:5e:95:bd:cf:cc:68:4c:c0:03:22:77:d4:4e:
                    93:ea:11:e6:03:67:c8:91:94:60:c2:1a:ec:d5:2f:
                    08:27:59:09:14:a9:4a:5b:99:87:cb:3a:52:35:0e:
                    77:d7:10:7e:f7:16:fe:39:35:92:ea:2f:f6:a1:02:
                    f4:55:44:d3:19:18:f2:f6:39:f4:75:01:21:26:99:
                    3c:8a:43:76:86:d0:5e:a8:1d:23:1a:4a:d1:2d:a8:
                    48:f8:29:ff:a9:48:27:a9:28:02:9c:79:89:34:98:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:05:3E:93:95:63:B6:4C:C7:20:53:E0:46:61:D8:67:D7:BC:6B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfeb1242-2582-3242-802f-39d2e247b487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:0f:83:1f:8e:a6:b2:ae:aa:db:3d:b0:46:d5:64:43:a0:d5:
         36:b2:54:da:be:12:93:f1:c5:df:6a:68:a2:54:c3:35:fb:dc:
         10:38:80:41:77:aa:b0:95:77:7e:6f:ac:7e:5d:e6:55:a2:49:
         15:a2:5b:0b:b5:2c:96:05:af:a9:a3:d6:3e:51:02:18:ca:f9:
         c3:16:e2:cc:27:37:3f:8a:28:56:db:2d:2e:40:7f:a0:ac:9a:
         2b:14:ba:3e:2c:14:47:ee:39:1e:52:a3:c8:02:c7:ca:e3:99:
         85:40:95:dd:3f:1b:7b:ff:23:1f:40:09:c7:37:5d:f4:20:fa:
         45:1b:d2:82:73:aa:8d:97:c1:a7:c7:87:f2:a2:bb:22:1a:03:
         5e:fe:a9:12:b7:ea:4b:2c:a6:46:85:ff:95:87:bd:ae:b4:0f:
         1e:8c:4d:4b:d0:40:3c:07:7e:b3:8f:40:fa:a0:f8:ff:b0:c7:
         c3:db:67:18:2c:f1:c1:dd:c4:e6:f6:0d:d7:e8:58:02:70:84:
         26:a6:7f:23:7e:09:d6:0a:4f:b7:f4:0a:ac:cd:20:60:54:b9:
         39:84:d2:66:45:43:fa:7d:2a:f1:69:52:40:88:6c:3a:c4:81:
         4c:28:f6:79:13:ef:04:ce:74:08:e8:cc:eb:fd:b7:6e:63:18:
         90:51:c6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:06 2024 by rpki-client on console-fra.rpki-client.org