Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fce2d11f-eda8-31f4-8090-d5a22943e97d.roa
File:                     fce2d11f-eda8-31f4-8090-d5a22943e97d.roa (raw, json)
Hash identifier:          FdZHwjZMFcKbHX3f36KG1KnL/qJSBtJT9RLyhJrls4o=
Subject key identifier:   0A:75:09:94:12:09:61:93:A7:B5:97:59:A3:17:74:45:CB:7B:62:74
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16886EA3FE7
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fce2d11f-eda8-31f4-8090-d5a22943e97d.roa
Signing time:             Fri 25 Jan 2019 21:28:45 +0000
ROA not before:           Mon 11 Jun 2018 04:00:00 +0000
ROA not after:            Sun 11 Jun 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:86:ea:3f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 11 04:00:00 2018 GMT
            Not After : Jun 11 04:00:00 2028 GMT
        Subject: CN=c3266ac1-43b0-4dae-945c-8a5c92966b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:c5:0c:c5:5c:b2:a7:a9:64:e0:c6:56:e5:
                    70:5b:32:32:83:11:18:77:e2:4b:a2:50:ae:e7:88:
                    3f:dd:98:c1:39:fd:14:41:93:07:f2:72:ae:a5:00:
                    fa:22:8c:e0:06:95:62:04:90:a5:0b:1a:39:cd:25:
                    50:ee:50:9e:00:b0:de:63:c4:0a:2d:f2:e7:ea:c3:
                    92:42:c2:25:7c:da:03:59:16:42:ca:26:28:4b:6f:
                    92:f9:5a:33:36:0f:e5:37:51:2a:6a:88:40:1c:27:
                    28:af:2f:46:4c:0d:1f:de:68:d9:78:ee:04:cf:3a:
                    15:2c:03:e8:58:28:03:d3:54:38:13:5e:75:ea:af:
                    cc:d6:2c:c6:eb:af:dd:14:72:73:a0:19:29:d1:af:
                    3a:83:9b:0e:83:24:dd:e0:06:cc:b4:30:90:38:87:
                    bb:50:17:19:ef:f0:9b:ff:b9:84:4c:a9:74:33:df:
                    71:a5:9f:ee:29:aa:73:cc:38:d8:37:4c:04:eb:09:
                    43:e9:00:de:e8:b2:73:36:54:8c:20:3b:34:e3:2a:
                    20:fb:3e:21:f9:bd:e8:1d:a7:5e:45:5c:64:cf:c3:
                    89:f3:d5:39:05:28:49:8e:e5:c7:07:cd:13:07:7d:
                    1f:82:f4:02:52:33:d7:d5:93:5d:ef:68:c9:45:8b:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:75:09:94:12:09:61:93:A7:B5:97:59:A3:17:74:45:CB:7B:62:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fce2d11f-eda8-31f4-8090-d5a22943e97d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2d:32:f4:93:76:54:c0:d2:74:ce:0c:1a:0c:be:bc:34:ec:
         26:cc:99:b5:c6:a9:ed:f0:26:67:41:d6:35:9f:fa:85:d3:a9:
         71:75:12:d6:f9:3c:70:b9:7f:d4:aa:b0:41:f7:4c:8b:22:fb:
         8c:11:21:80:df:0a:7d:d5:29:78:8f:2b:b0:f4:c7:4f:47:73:
         28:a8:be:02:ca:39:46:dd:d2:df:bd:98:41:58:32:dd:26:a0:
         d7:9b:8d:59:21:6e:2c:8e:e1:c8:39:b8:df:06:e9:2e:a9:28:
         75:b9:cf:07:ad:a6:29:47:ea:be:ed:96:2a:ce:77:e7:0a:85:
         cb:ac:a5:91:50:8e:11:e6:e1:97:76:38:a3:50:41:14:b9:d5:
         3b:3d:bd:88:cc:a3:b0:b1:2c:ac:ce:73:af:da:be:b4:1d:ca:
         06:f2:48:c6:c6:0c:06:d3:30:16:36:27:4c:7a:7d:09:6b:08:
         dc:0d:12:eb:7b:cc:db:01:a3:e3:31:5b:77:eb:2e:01:83:4d:
         bd:c2:d6:d2:90:d3:d0:23:c4:85:a3:87:d5:22:2f:5c:a3:72:
         02:c4:5d:89:20:84:6e:fb:69:cc:ad:6e:89:0b:f9:ed:df:f6:
         a1:09:40:78:f1:ab:bc:39:7b:d7:1b:58:07:d6:eb:fb:d7:db:
         84:3d:77:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:46 2024 by rpki-client on console-fra.rpki-client.org