Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14b06311-1f51-3ac7-829c-c8c5aac0e2d5.roa
File:                     14b06311-1f51-3ac7-829c-c8c5aac0e2d5.roa (raw, json)
Hash identifier:          EyPqLs5tTHKYEBemmo9GYPxRUO99ZWzBazmM1YYMsMs=
Subject key identifier:   77:BB:9F:5E:E9:AD:25:98:41:28:28:57:CD:5B:A9:5B:67:72:F5:0D
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732ABA56B5
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14b06311-1f51-3ac7-829c-c8c5aac0e2d5.roa
Signing time:             Tue 07 Jul 2020 19:22:01 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Wed 27 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        40.67.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:ba:56:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Mar 27 04:00:00 2030 GMT
        Subject: CN=d04b6706-0ef3-41e2-bd8e-0ae05b22c871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:29:39:b8:e4:10:5a:b5:0c:21:75:2d:87:88:
                    1f:50:49:b3:0a:cb:15:8f:bc:3c:1b:54:c6:d1:18:
                    d3:a3:6d:25:68:a2:18:3b:39:7f:6b:d1:c6:f3:4b:
                    27:45:6e:a9:0f:9d:c4:b3:c7:9f:2e:da:2e:e8:89:
                    1e:4c:e7:90:9b:84:d6:45:aa:c0:f7:ee:45:0a:ff:
                    61:1c:ff:97:d1:c2:06:9b:a9:c0:a4:54:28:c9:e0:
                    ef:8b:37:7a:d4:64:10:f7:6a:1b:37:c9:60:81:d5:
                    a4:d6:17:6c:65:d4:08:2f:32:66:d8:4f:bf:87:d0:
                    5e:9f:e5:d5:f4:7f:4e:79:88:16:5c:f7:b3:d2:1d:
                    b4:c3:b1:b7:b1:7f:26:c6:57:8a:af:f3:40:7f:ee:
                    ec:57:d8:41:fc:81:bd:b0:6e:5e:2a:05:90:5d:22:
                    8a:62:2e:c3:59:e2:b3:73:7f:23:50:a9:24:56:7e:
                    0f:78:b6:5d:da:20:fc:ca:ea:82:9b:dd:df:9c:38:
                    64:5d:ac:f9:3b:0b:a3:15:12:ec:6c:23:77:c9:a6:
                    2a:d5:c4:b4:54:a8:c4:c6:59:ff:ec:1b:d2:7f:12:
                    06:0d:35:de:fd:f1:21:52:32:bb:5a:c2:d5:3b:48:
                    37:89:e4:61:fb:06:64:3b:cf:bc:2e:58:00:ca:dc:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BB:9F:5E:E9:AD:25:98:41:28:28:57:CD:5B:A9:5B:67:72:F5:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14b06311-1f51-3ac7-829c-c8c5aac0e2d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:89:4d:24:66:c0:71:17:a3:8f:a6:09:ea:a3:37:49:b4:4b:
         a4:f5:e6:28:34:74:5e:a2:76:11:ee:4c:b6:aa:28:15:90:99:
         32:1e:38:7e:1c:c8:82:af:09:19:35:45:12:83:22:14:a8:98:
         69:95:c9:6f:81:b7:5c:51:e3:53:70:75:51:19:59:02:e8:5c:
         7f:6b:13:2d:cc:28:4d:73:99:f3:d8:f9:70:42:f7:22:75:e1:
         64:a8:35:99:a0:1c:0b:e3:ed:12:64:3f:79:23:68:ae:aa:9a:
         70:02:0c:5b:8e:da:e9:02:b0:3b:af:eb:3d:c1:68:b5:a1:98:
         d4:0f:9f:03:d5:0f:fa:c9:bd:85:b4:22:f4:3d:25:a8:53:02:
         7d:06:f2:9c:2e:69:a4:9f:ab:e4:cb:7f:fe:2a:54:5a:29:d3:
         43:46:86:56:c2:f1:ea:2b:a1:a0:37:a3:b8:3c:46:30:8c:0a:
         73:5e:91:d1:bc:ec:ba:80:9d:c0:dd:f8:e2:52:29:49:67:5d:
         38:58:30:17:11:38:a2:8c:f2:5d:1a:af:b8:f0:b4:cb:36:6c:
         43:b5:50:5b:9b:38:2e:e9:35:a9:a6:0d:15:c7:ad:62:8b:aa:
         7a:fb:ff:cb:dd:13:0f:a8:16:b7:7b:7c:fb:21:e1:36:36:96:
         66:f2:02:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:05 2024 by rpki-client on console-ams.rpki-client.org