Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05750043-034e-3fc7-9402-42dc9ce060a4.roa
File:                     05750043-034e-3fc7-9402-42dc9ce060a4.roa (raw, json)
Hash identifier:          W69D4P0puqDMZRr6gI/QHchJRsfLph0BjRwFd9vaOoc=
Subject key identifier:   27:64:37:9C:23:0E:72:32:7F:4D:62:6F:17:64:3D:12:0A:72:DD:CE
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732AB9ED6C
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05750043-034e-3fc7-9402-42dc9ce060a4.roa
Signing time:             Tue 07 Jul 2020 19:21:34 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Tue 05 Mar 2030 05:00:00 +0000
asID:                     8075
IP address blocks:        40.120.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:b9:ed:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Mar  5 05:00:00 2030 GMT
        Subject: CN=30a53115-94fb-41d8-a53b-a5beaa705c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:90:42:d1:43:c6:e2:f6:29:43:fd:18:96:
                    0f:eb:09:c6:6c:a7:24:69:1b:c7:dd:52:9a:4d:03:
                    1b:fc:14:05:d7:77:95:09:11:3d:4a:37:0f:52:9a:
                    eb:8c:0b:f9:65:c3:3f:5a:4e:1f:19:63:8d:9b:9a:
                    00:0f:2d:b1:3a:3c:88:fe:97:06:c5:e1:d4:a5:52:
                    5d:79:07:9d:de:78:8f:d5:6d:f7:8f:f3:b2:f9:44:
                    86:54:0a:cd:6b:6a:de:bc:3e:9e:8e:ca:64:9c:6b:
                    93:34:54:9c:4f:55:09:17:cc:20:f6:80:7e:de:b5:
                    ed:a7:c0:74:26:5b:43:4b:45:79:b1:7a:ae:bb:f4:
                    59:40:95:fe:fc:63:ed:0d:37:83:e5:a2:65:86:1d:
                    98:d4:3b:3f:61:5a:5a:0b:f0:72:ea:72:fb:83:5f:
                    f9:10:02:7e:aa:69:9a:47:25:aa:d5:b8:da:7e:0c:
                    c3:01:67:6a:3d:4c:9f:eb:c1:7e:18:29:04:d3:bf:
                    68:f0:b6:24:42:ec:ea:94:ec:f5:02:f6:20:ff:18:
                    d1:7e:fd:71:1b:d0:5e:9a:9f:62:9a:fd:b2:3e:37:
                    98:05:04:aa:13:85:31:5e:37:f4:4b:b0:72:9c:b6:
                    1a:0e:39:01:8a:a0:11:9a:8a:41:02:5d:b9:b2:a7:
                    8b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:64:37:9C:23:0E:72:32:7F:4D:62:6F:17:64:3D:12:0A:72:DD:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05750043-034e-3fc7-9402-42dc9ce060a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.120.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:e7:f0:43:14:cb:8e:87:9f:ac:b0:29:a5:7a:1d:7d:dd:
         df:28:4e:c3:c9:93:26:f1:df:5e:85:70:1e:34:be:8e:1e:6d:
         34:09:bd:ae:4c:d1:42:0c:72:9b:3f:d0:91:8c:78:ca:cf:e1:
         e1:39:54:55:14:66:a7:d1:5d:4b:2d:93:a0:f0:30:b0:5c:89:
         eb:30:f5:86:88:bf:28:8d:2a:bf:21:7c:c2:99:51:2e:2d:84:
         d8:86:b9:01:4d:5f:5b:a3:bc:0d:e7:b1:a2:54:f1:f3:3f:e0:
         7e:45:20:9f:91:0a:5a:7f:e5:47:13:11:7b:42:b5:b4:31:1f:
         99:b2:5a:07:78:c0:e4:38:cd:12:6d:73:5d:1b:a4:7e:7f:f6:
         ea:fa:fd:06:9c:32:c2:19:5d:de:3d:7f:55:45:c6:0d:dd:ce:
         05:be:2e:01:d4:a4:42:ae:e7:b8:89:a9:8e:ff:9b:93:bc:37:
         fb:cc:bf:b9:9a:6c:d7:99:5c:dc:17:60:95:f2:1e:ee:05:a8:
         b1:7f:62:64:2d:5d:17:65:71:d9:73:1e:5a:29:0b:cf:9b:45:
         33:bb:12:88:9b:f6:43:42:56:20:c5:b3:29:3f:d7:d3:f3:62:
         4a:52:a2:88:ad:6a:2f:a0:52:ba:3b:f3:e0:65:f6:e1:aa:5f:
         d1:dc:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:23:11 2024 by rpki-client on console-fra.rpki-client.org