Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f43fd7dd-10f4-3852-86ca-09ead825e7bc.roa
File:                     f43fd7dd-10f4-3852-86ca-09ead825e7bc.roa (raw, json)
Hash identifier:          g6ppDGJmQYJ7eO+Kr/+EZaTbAzg3kaFO27ggZ8vLyBg=
Subject key identifier:   2C:A1:DC:98:F2:3A:FE:90:77:22:16:7C:A0:3D:85:FB:6F:58:57:BF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF25BAE5DE49D983BB39580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f43fd7dd-10f4-3852-86ca-09ead825e7bc.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     33363
IP address blocks:        68.200.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f2:5b:ae:5d:e4:9d:98:3b:b3:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=94848fcc-ed53-447e-93ab-d1a7e1ba5d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:67:59:85:2e:2a:92:35:7d:5d:27:12:f4:
                    9e:de:87:dc:db:49:89:4a:12:12:a6:05:75:88:0e:
                    e1:1d:21:f8:b0:9e:66:41:66:51:9b:50:a8:3e:0b:
                    c8:b4:ca:69:99:90:c9:3b:e6:a1:b1:b9:a6:30:41:
                    a8:be:07:03:e5:bb:b8:cb:fc:37:04:a2:15:3f:9c:
                    73:20:f3:17:0c:64:cd:40:93:e3:fe:7b:73:6b:c2:
                    8e:12:b8:11:79:84:4e:9d:3a:c0:16:6c:f3:db:d0:
                    99:65:17:0c:55:81:d4:72:91:7b:e2:7e:97:2c:a3:
                    3c:1c:80:ec:a9:d8:e9:b4:0a:06:01:b9:52:11:c2:
                    80:80:3c:98:11:68:34:8d:73:27:4e:1a:4e:6c:62:
                    fb:7a:50:2e:89:03:6e:64:08:5d:9f:e0:34:8b:51:
                    2e:f2:4f:67:a5:e4:21:7c:88:67:2f:f1:f1:9f:f0:
                    1d:6c:ae:cc:fe:69:53:4f:19:4f:d4:38:93:c6:e4:
                    c4:71:5a:ba:90:69:14:e8:fc:9d:0a:22:02:e2:e4:
                    2b:1c:65:4b:7f:b8:90:a5:c5:b1:c2:ad:18:de:cd:
                    9d:a7:9b:8a:94:82:cb:3c:93:1f:9e:4f:96:7d:05:
                    01:ca:93:a2:d0:2b:a0:e9:6a:80:10:7f:9b:c0:d5:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A1:DC:98:F2:3A:FE:90:77:22:16:7C:A0:3D:85:FB:6F:58:57:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f43fd7dd-10f4-3852-86ca-09ead825e7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3a:9e:4e:a4:29:a7:f9:44:fd:c2:b1:e5:64:f3:95:3d:31:
         14:64:95:2e:69:f7:b2:3f:0f:f1:fb:aa:68:7d:f3:93:19:0e:
         1f:cc:6e:12:ca:9b:b2:ee:b8:9a:a7:f1:5e:ef:11:9e:0a:ec:
         23:dd:c7:fb:d6:06:6f:12:82:9d:93:d4:d2:dd:fc:a1:63:31:
         15:91:03:35:61:ff:1a:5c:40:7c:c2:6e:0f:44:ad:2f:1d:31:
         2f:09:39:d6:47:ae:d3:fe:ef:e3:10:ae:9f:52:ed:76:7e:99:
         60:58:f5:37:0c:36:dd:1b:f7:f8:8c:28:aa:9c:63:05:d5:dc:
         49:93:f6:b2:aa:02:a8:14:a2:c4:c9:17:2e:bd:18:2f:f4:b8:
         0b:f1:18:df:c6:41:ba:4f:f6:48:31:1f:f9:5e:07:25:2e:36:
         b6:8a:c3:1b:4c:0a:93:83:ea:b1:ad:18:9e:bc:c4:31:28:98:
         be:30:65:6d:b4:b0:29:77:45:df:0b:d6:36:b6:1b:4c:8c:7a:
         ae:e7:43:18:a2:13:ed:88:10:64:db:bc:08:1d:4f:98:93:40:
         5e:50:24:d3:27:84:25:c1:12:fb:5d:12:d7:46:1f:6f:eb:3d:
         2f:35:31:01:ad:b5:8f:b5:30:cd:5e:cd:45:e2:77:3d:e1:89:
         9e:70:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:40 2024 by rpki-client on console-fra.rpki-client.org