Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f929c95-ae43-3e26-b5e3-8775bab3b742.roa
File:                     1f929c95-ae43-3e26-b5e3-8775bab3b742.roa (raw, json)
Hash identifier:          r1IdySGihDtNaCbwfPRHP2RvUHQfeNGTHueEVv/WFKI=
Subject key identifier:   03:8C:33:7D:3D:35:76:F5:CC:86:84:37:B2:E7:FA:F7:A2:C4:D2:9F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732AB99D7A
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f929c95-ae43-3e26-b5e3-8775bab3b742.roa
Signing time:             Tue 07 Jul 2020 19:21:14 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Wed 20 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        40.107.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:b9:9d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Mar 20 04:00:00 2030 GMT
        Subject: CN=0beb7289-f445-4d74-b0cf-5c489e939628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:68:0f:f7:0b:47:9e:52:b6:ce:40:0f:c4:
                    11:f0:4c:7a:0a:20:c1:43:93:3a:76:fe:5e:24:63:
                    93:db:32:2e:3e:09:b2:ad:4d:42:41:ab:ab:0f:3a:
                    73:f5:a9:8a:e2:b5:cc:f0:65:47:66:63:62:d1:8e:
                    bf:41:44:a8:02:c4:ef:71:9a:95:14:43:22:5c:2e:
                    bd:4b:0f:c6:3b:42:91:f9:d9:c7:47:be:ce:e5:a8:
                    35:80:ed:fc:dc:fb:79:e6:bd:24:70:2f:b4:18:00:
                    7b:1a:a3:83:a9:5d:cf:94:d0:db:63:e0:12:61:c8:
                    17:b3:fa:2d:6a:d7:c0:3a:92:f5:d8:e5:cf:f6:84:
                    65:d4:fe:75:0d:39:f0:16:a4:6c:b8:80:0d:d7:c8:
                    41:2b:09:62:39:02:84:80:80:43:b7:a7:58:c5:bd:
                    10:1f:50:a5:47:7f:75:82:3f:2b:39:2c:86:5d:b1:
                    97:5a:f4:9f:1d:40:f9:53:55:26:7a:05:37:ab:99:
                    8d:b8:a8:4e:93:37:45:6b:66:a1:39:54:35:fb:12:
                    3f:4a:6c:66:5b:bf:09:69:7b:bc:7b:e2:76:e9:41:
                    1f:a9:27:2f:b9:c5:81:52:7d:47:0a:ca:5c:c1:28:
                    6e:dc:96:98:59:d0:40:32:d3:da:37:5b:e5:30:83:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8C:33:7D:3D:35:76:F5:CC:86:84:37:B2:E7:FA:F7:A2:C4:D2:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f929c95-ae43-3e26-b5e3-8775bab3b742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.107.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:32:0b:b7:eb:3d:d7:b4:75:9d:0d:04:41:38:80:aa:81:8d:
         37:43:ab:d9:68:f0:57:2f:69:2d:d7:f9:89:53:33:fe:34:47:
         8b:18:56:2c:b1:a4:15:26:40:ec:ad:dd:36:02:04:f3:12:42:
         fa:67:ff:6e:c8:1d:ce:5c:79:f3:55:6e:20:e7:5c:c9:a8:c2:
         65:79:d6:27:d2:51:26:95:8f:8c:6d:a6:62:d7:af:df:38:00:
         1c:1f:27:ab:cf:13:8f:06:f0:70:f0:21:71:8d:59:65:e0:70:
         b0:23:e5:e0:e6:07:0a:56:c8:1c:7a:38:2d:12:0f:f5:d2:f8:
         f2:c6:60:09:6f:d7:d3:03:e6:c5:db:38:69:74:ff:57:43:54:
         0b:69:8c:34:66:f0:94:62:fe:d2:02:03:a7:26:61:29:ab:4a:
         dd:d0:25:ba:58:d4:44:16:77:27:12:f7:6c:13:a9:5e:70:b1:
         80:be:c3:1a:ad:71:d9:7e:e6:33:4f:ab:cd:1e:ab:be:53:fb:
         92:30:e8:75:88:58:11:5e:47:6a:4a:3f:8b:94:e0:ad:7b:d4:
         57:42:ca:78:fe:f4:82:26:6e:be:a9:18:2c:a9:7b:f7:18:1a:
         e1:26:cc:1f:7a:7d:1d:17:fa:3f:2a:d6:6c:b3:64:cb:20:9f:
         45:60:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:11:06 2024 by rpki-client on console-fra.rpki-client.org