Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4144051-ceed-3c03-81fd-30cc7adf7ef5.roa
File:                     d4144051-ceed-3c03-81fd-30cc7adf7ef5.roa (raw, json)
Hash identifier:          L0z23XcaAvillCBJ8cToemx5kh9uFMhwgqfQnOHHkTw=
Subject key identifier:   99:E9:A9:BC:A5:61:90:71:89:4E:9C:C7:4B:C0:9D:08:B2:01:B8:38
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E8BB198B7
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4144051-ceed-3c03-81fd-30cc7adf7ef5.roa
Signing time:             Thu 21 Nov 2019 02:01:42 +0000
ROA not before:           Thu 21 Nov 2019 05:00:00 +0000
ROA not after:            Mon 07 Feb 2028 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:8b:b1:98:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 21 05:00:00 2019 GMT
            Not After : Feb  7 05:00:00 2028 GMT
        Subject: CN=0f595394-0f23-4a38-92fe-54dd8d160574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:37:e8:c2:93:76:94:fd:56:9a:b9:4b:51:
                    ba:a5:47:df:52:4a:89:91:6d:f1:51:5a:f4:02:42:
                    a0:0e:b5:12:75:79:32:ba:67:fd:58:6b:a0:0c:57:
                    7e:57:0e:16:7c:61:68:89:5f:4b:ba:b6:b4:aa:a9:
                    2a:3f:80:38:5c:92:00:fd:a6:fd:2c:a5:32:5f:73:
                    1a:65:39:b3:8a:96:9f:77:dc:b2:34:57:0d:53:49:
                    2c:58:c6:aa:b0:83:ba:56:6a:43:1c:99:f2:66:ed:
                    72:2d:7c:05:d2:cb:36:35:0d:cd:ea:58:8b:8e:a6:
                    f3:39:b2:73:a6:8d:94:d1:6a:4d:77:5c:e5:68:54:
                    bc:bb:05:1a:e9:79:f1:5d:c7:68:0e:23:e4:80:fc:
                    31:33:a1:4e:8b:8f:65:16:b6:e9:5c:f1:11:71:ce:
                    fd:83:08:ab:42:77:48:88:8d:82:af:0d:f3:8c:bb:
                    05:71:7d:49:fe:2d:41:6d:40:50:b6:51:7b:97:fe:
                    79:de:79:4c:bc:6e:9e:b6:0f:6d:ac:94:8e:66:75:
                    fa:9c:db:db:c1:e0:50:4c:50:50:9b:7c:fe:ac:35:
                    b2:7d:e2:00:96:21:92:fb:15:94:b0:21:36:3c:fd:
                    7e:62:a7:a6:38:9b:28:06:e7:f7:4a:ba:dd:69:6a:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E9:A9:BC:A5:61:90:71:89:4E:9C:C7:4B:C0:9D:08:B2:01:B8:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4144051-ceed-3c03-81fd-30cc7adf7ef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:66:b1:26:4a:2b:2f:44:5b:36:cf:c5:2d:89:65:78:28:
         44:e1:c3:20:41:5b:fd:0e:43:62:01:f8:d1:bd:b3:41:8e:63:
         9c:aa:68:33:1a:a6:28:e6:15:27:e3:c0:45:02:f2:7c:96:9f:
         32:1e:5b:9f:59:f6:bc:2d:f0:17:c6:8d:21:ad:ae:db:95:5a:
         e6:7d:32:f3:31:61:a3:77:9c:ce:52:dc:db:8b:e4:23:03:04:
         51:a3:87:52:b5:7b:2e:28:e6:3d:a4:4e:78:7f:cd:89:3a:ac:
         64:cd:53:3c:6f:3b:54:1a:07:9a:0c:36:7a:26:a8:ff:bf:ce:
         d1:4f:4f:bd:0f:14:34:87:d2:43:0b:cb:ea:8c:a3:04:8e:b4:
         f0:73:59:ae:a9:0e:06:62:fb:5d:9a:54:6e:50:a6:22:db:23:
         28:77:fb:3e:b4:f3:f4:ef:fb:00:13:5a:e9:0b:7d:c1:eb:91:
         a0:3d:91:e4:1e:3f:08:e9:c3:d6:bb:63:42:40:bd:a9:cd:ef:
         80:c2:33:86:98:4b:1f:1c:27:ae:d1:13:b7:26:f2:f3:f5:6b:
         b1:67:72:2f:97:e5:b4:41:d3:65:a0:c2:a0:f0:3a:32:84:66:
         9f:a3:05:fc:59:a9:8f:93:95:2d:e3:49:47:4c:6e:ba:5c:de:
         37:60:29:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:41:34 2024 by rpki-client on console-fra.rpki-client.org