Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af018771-b755-35ef-aef9-0c67350fafbd.roa
File:                     af018771-b755-35ef-aef9-0c67350fafbd.roa (raw, json)
Hash identifier:          4cILmBb7INz3H+xQZnxm2uwdEJtON5Q257dnQABaCYs=
Subject key identifier:   4D:B9:92:62:99:ED:60:5C:40:35:D3:9D:C1:EF:E4:E0:2C:F6:6A:ED
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838FFCE3A35733424AA65A4BE80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af018771-b755-35ef-aef9-0c67350fafbd.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        97.68.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:3a:35:73:34:24:aa:65:a4:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=3f8cb1eb-ff3e-4a90-944a-dabce72beb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9f:77:ef:c2:73:0b:0d:44:8f:39:84:4c:ee:
                    23:77:93:3a:a6:10:d5:8b:51:56:72:a2:5e:49:20:
                    88:a2:e8:94:5e:c4:d9:c4:a3:e3:05:69:c1:22:8d:
                    f4:78:e6:c2:31:7a:5e:68:3a:f4:27:41:2b:83:54:
                    14:15:3b:ab:00:80:52:89:d3:78:47:29:88:75:41:
                    9c:cd:83:b6:7d:e2:83:2a:d1:2c:e9:2d:1d:c6:e5:
                    74:7d:1f:ae:27:df:9f:6c:68:60:fb:43:ff:e5:fc:
                    d9:39:81:92:02:b4:e1:41:df:19:b7:76:7a:b2:00:
                    5b:9f:e2:9b:0d:97:74:d6:30:65:ad:40:b2:28:03:
                    c0:18:80:22:82:2b:d7:7e:d0:0a:d3:13:9d:01:7a:
                    b0:a1:e0:86:21:a6:7a:29:6c:ae:57:33:d6:a6:9b:
                    8c:cc:2e:47:06:13:19:7e:9e:1c:1e:d9:38:17:b0:
                    a2:92:c0:f6:c9:4f:19:45:a6:0b:81:5d:e6:d9:08:
                    71:2b:0c:f2:a2:16:ba:bd:b9:ad:0d:6c:73:13:bb:
                    3b:cd:1f:fb:4a:56:92:77:06:16:8c:fe:36:63:57:
                    f9:21:43:31:08:c7:0e:68:82:4c:c6:e6:82:9a:df:
                    00:c7:2e:d7:e1:56:3f:ba:78:d6:06:4c:25:68:6e:
                    54:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B9:92:62:99:ED:60:5C:40:35:D3:9D:C1:EF:E4:E0:2C:F6:6A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af018771-b755-35ef-aef9-0c67350fafbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f3:94:66:47:08:b6:3d:65:a2:be:71:4e:15:be:3c:a8:3f:
         cf:23:2f:f0:fe:00:25:87:b1:e1:6b:42:29:48:7c:1c:1b:af:
         df:a4:4e:27:4e:05:db:5a:84:00:36:e1:da:e7:a5:15:8a:e9:
         0b:6d:4f:3e:56:e6:fb:21:24:9e:61:07:1b:aa:e6:48:7e:46:
         05:74:c4:8e:b2:52:22:da:f1:68:86:10:fe:20:2d:d6:21:3d:
         f5:80:67:77:3a:8e:b3:c6:43:4f:8a:d3:81:ae:16:c2:dd:e4:
         0a:e8:38:ad:06:3b:81:62:77:25:5b:63:e9:fd:1e:a5:d0:e0:
         15:be:8f:3a:b0:3b:a6:57:b9:92:af:22:91:02:86:81:25:43:
         ab:3e:13:50:a9:ec:10:33:e9:93:a4:58:f7:5f:eb:44:c3:bc:
         8b:d9:b0:72:e7:66:b8:a3:57:2f:f3:a9:57:48:b3:58:c0:5c:
         0a:84:8d:e3:6a:f1:78:6e:16:af:64:9e:94:8b:17:91:c6:be:
         29:fd:9f:d4:7e:80:da:68:a3:89:95:16:96:ec:83:94:78:f3:
         aa:e6:a7:1a:f8:69:2e:ec:19:59:e1:f2:71:95:e8:b9:08:78:
         cb:0d:a0:3a:43:16:78:54:17:10:1c:f8:e3:88:8f:de:00:13:
         32:55:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:13 2024 by rpki-client on console-fra.rpki-client.org