Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/00a11684-e29f-3819-bd55-fba30f869068.roa
File:                     00a11684-e29f-3819-bd55-fba30f869068.roa (raw, json)
Hash identifier:          MVYC25lUzYI6BECG5Qh49kH6ACWo5bcnJaVe2QMduXU=
Subject key identifier:   2B:E9:B6:38:E7:A6:F2:F5:0B:40:CA:BC:D9:36:65:1A:C4:A0:25:BE
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172DCB2D9CD
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/00a11684-e29f-3819-bd55-fba30f869068.roa
Signing time:             Mon 22 Jun 2020 15:43:28 +0000
ROA not before:           Mon 22 Jun 2020 04:00:00 +0000
ROA not after:            Fri 12 Apr 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        150.171.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:dc:b2:d9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 22 04:00:00 2020 GMT
            Not After : Apr 12 04:00:00 2030 GMT
        Subject: CN=eddc3cb3-b35c-4b63-ab00-1582f8a4b2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:bb:eb:22:05:54:ff:16:67:46:28:3b:73:
                    de:84:d8:b1:69:f5:ca:5c:06:29:d9:80:b9:4a:f6:
                    c7:6c:85:41:f9:72:78:76:f8:db:92:f2:76:fe:ec:
                    a5:20:9d:eb:46:85:9d:63:f0:0b:66:34:da:00:49:
                    cf:c7:82:36:d8:55:0d:9f:00:92:64:a7:24:87:ac:
                    89:f7:f9:7b:66:45:4b:e4:da:7a:f2:e0:27:a8:ff:
                    f3:4a:dd:23:1e:17:89:03:69:ce:36:99:1f:c5:a4:
                    fc:33:51:36:db:fd:b6:78:df:9f:f9:5a:c1:70:09:
                    50:64:b1:2c:0c:5e:d4:90:6e:de:ff:4e:c5:49:3f:
                    b3:5f:75:3e:61:a2:e1:ec:50:8e:ed:74:a4:9b:dd:
                    1e:17:30:1d:fb:9f:ce:e8:37:e3:08:7c:42:1b:35:
                    ac:a0:3b:e2:09:67:5d:bc:86:f6:8e:7b:df:72:cb:
                    89:2b:ab:29:99:3c:31:18:20:03:29:ec:81:62:d7:
                    43:83:8a:6f:9d:cc:f4:f6:20:7a:5f:da:c6:83:49:
                    85:54:f3:cc:6c:7d:7e:6c:ba:a1:01:9a:a4:66:df:
                    f6:b3:07:f8:ce:c9:06:e9:13:68:3e:b1:b9:27:f2:
                    68:a1:33:ae:46:f7:64:4f:d2:31:46:96:4f:51:a3:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E9:B6:38:E7:A6:F2:F5:0B:40:CA:BC:D9:36:65:1A:C4:A0:25:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/00a11684-e29f-3819-bd55-fba30f869068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.171.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:84:c5:ba:c3:df:ff:a1:63:3a:35:09:e0:67:45:ef:24:61:
         62:f0:84:28:d0:c0:c4:94:bd:af:01:2d:03:ab:28:46:d1:a8:
         b3:1f:6c:73:68:2c:01:c9:90:7c:f3:b1:f6:fa:a0:1c:27:06:
         f0:f9:0c:c1:24:5a:79:00:2d:35:9f:03:54:0c:25:75:9e:98:
         f3:b6:f3:03:23:c8:13:b7:8b:c5:87:cf:a0:97:b9:3f:43:ba:
         1a:67:d2:26:e4:0f:ce:35:e5:b9:96:c0:9a:d0:32:c5:dd:f0:
         9e:8e:5c:d4:b2:25:f6:63:cf:3e:b5:72:11:ad:25:d8:d4:44:
         07:9c:22:6a:d4:26:01:13:ee:2a:cd:c7:97:13:d1:86:1c:90:
         8e:ea:81:74:51:fa:31:1c:b4:2e:54:e9:3d:fb:79:98:78:e5:
         61:48:fa:d1:45:a1:d6:a3:0c:57:8f:8f:d4:b4:e6:5d:38:25:
         47:ec:0a:72:80:38:56:2c:eb:fa:55:57:0e:b5:af:16:8f:a8:
         3b:61:48:5c:68:3c:d5:d6:93:06:d9:18:28:53:0f:43:21:49:
         d0:dc:3b:ee:db:97:e0:69:0b:f3:94:cb:19:bc:bd:7f:58:61:
         fb:2a:cb:1f:58:82:0e:de:ec:a8:50:44:fa:0b:59:47:1b:60:
         7b:ef:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:04 2024 by rpki-client on console-ams.rpki-client.org