Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/26c85217-2dc2-32a8-9341-0c9647f8e968.roa
File:                     26c85217-2dc2-32a8-9341-0c9647f8e968.roa (raw, json)
Hash identifier:          mk3SGVHHqAAmfufNCPHdQUizeeOIFCoZvj+fZB+3h6M=
Subject key identifier:   67:4F:4F:6E:10:44:06:F1:39:66:5C:28:57:19:6D:F2:4D:58:EC:2F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173926B6E05
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/26c85217-2dc2-32a8-9341-0c9647f8e968.roa
Signing time:             Mon 27 Jul 2020 22:36:20 +0000
ROA not before:           Mon 27 Jul 2020 04:00:00 +0000
ROA not after:            Wed 17 Apr 2030 04:00:00 +0000
asID:                     8071
IP address blocks:        131.107.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:92:6b:6e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 27 04:00:00 2020 GMT
            Not After : Apr 17 04:00:00 2030 GMT
        Subject: CN=a9d4f569-01b2-46be-96c7-a372e0553009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:2d:33:fc:f7:de:00:e4:0b:a4:ca:16:9b:
                    e6:93:8f:1e:70:09:78:f0:a3:81:33:4f:37:8d:cf:
                    ba:77:1c:38:ed:37:59:72:77:bf:dc:e9:83:bc:37:
                    55:d2:80:06:79:aa:52:ca:93:02:6a:08:a7:6c:d1:
                    d0:89:5e:15:1e:8c:5e:c3:04:d2:94:60:82:7c:91:
                    87:03:9b:73:fd:74:8d:ed:58:5d:06:92:e1:0e:17:
                    61:cf:cc:dc:a7:ba:ff:6f:69:3d:5b:70:c2:d9:1d:
                    0c:d7:b2:79:6e:5d:1c:b5:bf:85:f6:da:74:ce:bb:
                    e6:ca:eb:5a:11:8b:c7:9e:7a:e4:3c:bd:16:f2:4e:
                    4e:84:84:37:82:b9:32:61:d2:a7:31:f7:69:43:21:
                    1b:13:14:ab:31:66:18:55:e4:f9:8e:c1:d7:dc:4e:
                    2f:64:b4:1b:11:10:10:bc:91:b6:3e:f6:3a:62:3a:
                    e1:af:20:11:4d:8a:95:72:b3:0d:33:18:63:ab:1d:
                    7e:0e:5a:09:6b:af:cf:61:85:34:b2:65:89:da:14:
                    cd:89:13:fe:4a:62:a8:c9:6e:b4:d0:e3:3b:c4:13:
                    a1:5e:eb:ef:42:a4:cf:1f:52:45:6b:31:d0:30:10:
                    c9:2a:3e:ff:6a:fa:0a:c1:7e:87:84:70:0f:b6:35:
                    34:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:4F:6E:10:44:06:F1:39:66:5C:28:57:19:6D:F2:4D:58:EC:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/26c85217-2dc2-32a8-9341-0c9647f8e968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.107.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ea:3d:84:2c:08:1d:a2:61:7e:ea:b7:be:a1:86:b7:c1:90:
         38:54:2a:cc:86:15:b3:21:3d:5f:5a:17:3e:06:a9:c1:37:30:
         65:38:ad:4f:fc:3e:c2:4f:1f:39:c1:f6:41:27:7e:8e:8f:9b:
         b3:54:17:e4:d4:40:d7:cf:fc:a9:d5:cc:c5:b7:89:97:f6:45:
         51:da:cd:08:6f:5e:1d:a8:2f:11:26:90:5d:cf:7d:a0:41:93:
         e5:b3:f7:13:fb:93:e1:a8:c9:79:2c:92:aa:a2:2c:6a:37:af:
         63:51:ff:10:05:ba:a4:a1:ad:69:c2:42:a0:81:21:a2:ba:87:
         0d:ba:82:e7:a9:7c:b6:c8:42:1b:f8:a2:dc:9f:db:a5:da:c3:
         a9:8c:4c:f0:d5:4d:73:d3:40:5d:cd:c3:6b:0b:87:f8:95:d5:
         81:76:0f:1c:62:77:d8:fc:79:58:5e:4a:88:f7:d9:1c:92:e6:
         ab:44:90:48:9c:d8:de:b4:ca:4e:d6:d7:2b:32:95:63:f0:fa:
         4c:6b:9d:c0:c6:29:7b:9c:d7:6d:93:8f:8b:12:31:74:86:2a:
         b3:9d:8f:16:df:28:6c:ca:14:12:b0:bf:c9:20:78:21:f0:f6:
         51:34:d4:6e:01:ca:89:76:14:80:83:cf:37:5e:82:d2:32:78:
         c3:cb:63:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:05 2024 by rpki-client on console-ams.rpki-client.org