Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/395e995d-2342-3186-af19-f9867de9afaa.roa
File:                     395e995d-2342-3186-af19-f9867de9afaa.roa (raw, json)
Hash identifier:          xhgwLRoo+OuTg72UYPKpjP2tSzC2Dz00ZY4CyjFNlsg=
Subject key identifier:   63:C0:D4:83:CE:88:02:44:0D:0E:20:C2:40:A2:1E:6A:56:5E:59:6A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173928E5AAF
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/395e995d-2342-3186-af19-f9867de9afaa.roa
Signing time:             Mon 27 Jul 2020 23:14:29 +0000
ROA not before:           Mon 27 Jul 2020 04:00:00 +0000
ROA not after:            Thu 18 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        199.60.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:92:8e:5a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 27 04:00:00 2020 GMT
            Not After : Apr 18 04:00:00 2030 GMT
        Subject: CN=8f126615-039d-4839-8200-2916916e1ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:ef:29:2a:68:0a:51:56:4f:ff:1f:e6:e4:
                    96:13:1a:87:69:76:38:63:fb:36:08:53:aa:20:50:
                    b2:8b:2b:28:c7:90:42:11:0a:c3:ed:30:6b:1c:bd:
                    35:ee:57:e8:5a:ef:36:35:e0:dd:4e:a6:94:5f:6d:
                    b5:95:cc:4f:76:32:ca:b0:ff:35:78:be:60:6e:28:
                    61:08:44:75:26:4b:c3:ec:89:b2:76:11:e2:64:fa:
                    a4:55:b1:6f:fc:cf:d5:32:8b:06:41:17:65:e3:08:
                    83:de:e8:16:d1:4b:ba:c0:7c:b8:77:47:0f:bd:26:
                    54:2e:2a:28:22:1f:1c:b5:2b:b6:79:48:ec:e0:0f:
                    a5:c1:57:03:e3:5d:e0:9c:43:14:04:2c:c5:40:88:
                    c7:03:3a:1e:79:80:c8:75:36:e9:09:ec:6e:c1:6a:
                    0d:77:b0:c4:21:f5:5c:9c:61:f1:57:04:e8:c7:23:
                    a4:6f:5d:cb:97:f1:b9:6b:91:11:65:86:6c:44:8f:
                    21:8f:c8:ee:bd:a6:df:8e:cb:5b:60:2b:b6:91:56:
                    5c:81:b6:61:6f:2c:aa:f5:e9:3b:76:20:7e:77:db:
                    1d:e4:d8:75:06:f9:66:f4:8a:47:39:4f:72:a3:33:
                    f0:6c:b7:5a:71:9e:3e:c8:fb:08:a6:8f:49:41:a5:
                    9e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C0:D4:83:CE:88:02:44:0D:0E:20:C2:40:A2:1E:6A:56:5E:59:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/395e995d-2342-3186-af19-f9867de9afaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ad:3e:96:dc:a8:1e:60:19:d1:aa:fc:57:58:27:4e:6f:7d:
         c0:d0:eb:86:b4:1a:2e:e3:26:a3:dc:cc:55:b2:8a:e8:48:e5:
         b0:fc:c5:0f:20:62:cd:3f:e4:21:de:4c:97:3e:78:bd:d2:14:
         9f:a5:81:19:eb:78:c6:c9:98:0a:f2:47:96:d0:87:e8:f9:56:
         89:04:08:37:e2:8c:1f:b9:f2:6f:9c:ce:62:d8:74:ea:26:40:
         7e:db:b4:06:4f:d0:70:4f:8b:e7:d5:99:20:dc:33:98:e0:b7:
         bc:c2:ae:91:52:25:65:bc:39:b8:98:a3:ee:41:90:7a:6d:f6:
         4f:17:b1:ed:7b:74:c2:b4:36:f1:7c:11:a6:47:24:6f:5e:41:
         3d:01:19:f2:d9:f0:5e:e5:6c:6b:91:c4:fe:b7:9b:12:36:f4:
         8d:69:6c:90:47:67:9d:9b:46:c9:02:ee:78:1b:dc:cf:b4:c1:
         e9:66:71:f9:e3:3f:29:d8:ae:62:df:17:33:c6:27:d0:1b:87:
         88:d7:be:66:af:02:b9:ed:13:a5:35:30:bc:03:70:f1:38:79:
         11:c4:52:d4:79:e3:e1:d1:a3:93:27:fb:bc:47:b7:be:ce:37:
         6e:e0:b3:97:b7:dc:9e:d0:39:b6:83:89:d6:d2:9d:d4:db:ef:
         52:b3:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:23 2024 by rpki-client on console-ams.rpki-client.org