Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa
File:                     35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa (raw, json)
Hash identifier:          IWSTbZPGk/BcBu6rxMffGCLm4FOz69Ek2vBjIhz0mWI=
Subject key identifier:   B9:AF:1A:E4:9F:14:D5:53:4F:E3:B2:FB:01:C2:CB:68:5D:57:2D:93
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732ABA0456
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa
Signing time:             Tue 07 Jul 2020 19:21:40 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Sun 17 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        40.125.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:ba:04:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Mar 17 04:00:00 2030 GMT
        Subject: CN=b619b4bf-83d7-49a5-9ba5-afe20c179087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:36:e5:1c:74:4d:d5:82:eb:c6:3a:9a:15:9e:
                    08:03:86:32:9b:ba:cc:d0:e6:59:e0:e0:e5:bd:6a:
                    3d:77:ea:6e:ee:83:09:ba:20:d2:17:5d:27:42:04:
                    fc:ad:5e:fb:37:61:9b:1c:f8:b0:78:8d:af:32:22:
                    f8:80:cc:ad:1c:8e:c8:5d:f6:e8:45:dc:ab:ff:36:
                    6d:59:e3:38:1f:a5:33:a9:d0:85:26:32:e9:cd:56:
                    2c:0f:89:91:b4:36:91:11:f3:56:0d:a0:59:41:d1:
                    19:c6:fe:75:1c:5d:7f:e3:d2:3d:f4:a8:c7:54:2d:
                    59:cd:0f:2c:73:b0:7e:61:0c:b3:31:06:94:41:8e:
                    a6:a6:77:5b:d5:4a:8e:05:3b:6c:8c:8a:6d:47:16:
                    a3:6f:3a:79:1c:6b:c5:f4:ea:cc:52:af:bd:e1:80:
                    cc:7b:e8:b4:51:8e:9f:29:8d:d9:99:b2:4b:32:f5:
                    45:d2:6b:53:67:3e:df:72:53:40:c0:e4:90:c4:98:
                    6d:aa:25:84:75:ac:82:50:91:a5:10:84:90:a2:e7:
                    ab:e1:58:68:87:f2:ee:7f:4a:b8:36:e0:e5:86:5a:
                    78:2b:cd:cb:30:4c:04:41:92:ae:84:5d:4e:eb:16:
                    16:6a:97:37:e4:b6:0d:e8:9e:91:58:ad:8e:9a:8d:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AF:1A:E4:9F:14:D5:53:4F:E3:B2:FB:01:C2:CB:68:5D:57:2D:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.125.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b6:9d:45:41:41:1a:5a:fc:05:c7:e3:6a:cb:76:69:a6:b0:
         a0:7c:67:b2:d3:ad:b1:39:57:7c:f1:fb:42:f2:db:2a:08:70:
         33:d7:65:96:44:32:05:d4:72:a5:46:9b:da:c9:3c:89:14:eb:
         ba:75:ac:84:1a:76:e0:ef:40:f7:a2:ca:f1:ac:49:69:f9:1c:
         a0:7c:aa:0e:41:3f:36:62:a1:0f:d6:4e:11:77:05:a2:4d:ce:
         35:6c:78:58:1b:37:9c:f6:9a:db:59:a1:63:a3:b2:52:a0:a1:
         e2:b1:03:01:9c:be:95:71:e9:e4:3c:04:b7:53:a9:c1:21:40:
         43:f2:97:4f:01:41:b7:d8:c1:0d:f4:c1:6e:b1:72:0b:45:f9:
         00:e7:b3:22:2b:eb:3a:cb:27:b0:1f:51:6d:14:16:67:dd:ec:
         5a:b7:e6:06:42:28:55:95:fb:7a:6a:82:af:37:7c:fb:bc:3a:
         6e:df:87:e9:b5:4d:bf:96:cc:6b:04:ad:02:a6:0a:fc:01:e8:
         e8:b9:5d:00:be:f5:93:23:c9:53:d4:3e:2c:b4:26:40:8d:c9:
         56:55:92:99:e9:4d:d3:66:3c:86:23:18:94:cd:d7:38:f5:84:
         e0:36:22:c7:a8:c1:b0:91:84:90:d2:40:54:a1:38:65:75:09:
         96:7e:b3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org