Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43b1f317-f646-36d1-94de-1277414b2306.roa
File:                     43b1f317-f646-36d1-94de-1277414b2306.roa (raw, json)
Hash identifier:          ts7XYTbZ9fUOCz188qi2VtnSOJczpSJ9OCKMqHYPOZA=
Subject key identifier:   CC:71:66:FA:A5:AE:CB:D2:22:CB:76:9F:08:3D:48:78:6F:13:05:3B
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1739270ED99
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43b1f317-f646-36d1-94de-1277414b2306.roa
Signing time:             Mon 27 Jul 2020 22:42:21 +0000
ROA not before:           Mon 27 Jul 2020 04:00:00 +0000
ROA not after:            Wed 17 Apr 2030 04:00:00 +0000
asID:                     3598
IP address blocks:        157.54.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:92:70:ed:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 27 04:00:00 2020 GMT
            Not After : Apr 17 04:00:00 2030 GMT
        Subject: CN=2f89561b-92ea-4f90-874e-0e8ae2bcf52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:7f:cf:20:1c:24:69:07:b0:9e:7d:5d:01:
                    e1:8b:a7:20:b1:70:aa:6d:6d:49:b0:44:5e:b3:d2:
                    52:3a:f3:28:07:96:e3:0f:be:3f:4e:e2:42:1e:16:
                    3a:b9:8f:5c:1b:52:c8:12:d7:61:c1:bb:6e:b2:38:
                    c9:b5:e7:7e:46:2f:a4:67:b5:33:57:91:9b:eb:40:
                    67:9c:6a:26:a6:3b:3e:fe:05:ac:50:ba:ae:f6:fa:
                    d6:14:16:c0:56:60:62:96:2a:e7:d0:07:70:fd:74:
                    e3:ac:bf:80:cb:dd:67:e9:7a:4a:3b:d8:b1:5c:70:
                    43:44:93:aa:48:75:78:bc:fe:67:f3:42:ec:6b:61:
                    60:d5:8f:9b:e1:26:a2:74:b5:df:98:dc:4a:2f:86:
                    c6:aa:7d:5e:0e:65:52:97:16:0a:c0:8a:e3:12:62:
                    03:33:ab:2e:ed:b6:c5:1b:aa:f4:ac:18:c5:de:78:
                    3f:6d:dc:de:b9:dd:2e:99:20:93:9b:d6:53:e6:b6:
                    aa:b8:f3:e7:c2:00:06:32:fb:bd:cc:e7:a0:4d:bc:
                    e6:56:30:09:21:85:e1:ae:7a:91:62:75:30:94:7f:
                    15:d0:e8:27:08:ec:e5:9d:1f:fc:a3:4e:79:f0:7f:
                    b2:cf:f3:86:f7:e1:db:b0:d3:0c:f7:2e:32:e4:f1:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:71:66:FA:A5:AE:CB:D2:22:CB:76:9F:08:3D:48:78:6F:13:05:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43b1f317-f646-36d1-94de-1277414b2306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:e2:38:ea:0c:94:67:de:25:9b:3b:ba:96:65:cb:2f:3d:
         75:aa:7f:93:a3:72:7b:98:f8:ae:ea:c9:96:ce:cf:13:49:cc:
         50:18:08:09:ff:8a:04:14:ff:9e:fa:0f:4a:83:4f:ad:ed:a6:
         b2:e3:32:69:69:96:2c:20:bc:05:d4:5d:eb:93:27:5f:83:5c:
         4a:1f:73:96:9e:0c:d6:54:a8:ce:73:dd:1d:e0:a3:4b:8f:f8:
         7f:17:a3:c9:77:e0:29:30:82:a1:37:28:6f:2a:30:0a:45:6e:
         d5:84:08:f0:d7:33:54:f4:78:df:2e:cb:35:ff:d6:f9:c7:48:
         69:42:6e:40:00:c4:0e:a7:75:f8:3b:0e:e1:53:85:78:98:24:
         d9:64:bb:84:fe:35:34:e0:ea:0a:8a:41:18:92:a6:03:f1:22:
         92:8d:b3:9b:c3:39:54:a8:31:10:a4:24:7b:af:d7:81:d0:6a:
         ec:b2:55:65:b3:99:55:f3:8c:eb:52:f0:50:cb:3d:2b:46:ce:
         5a:19:a2:2d:d4:ce:c4:4e:3a:61:98:86:57:42:b8:88:67:db:
         55:87:57:da:88:c6:42:3a:9c:16:9b:11:d2:c7:bc:1d:c3:e6:
         2c:d7:f3:95:2d:09:96:5d:50:d2:3e:0b:54:50:d5:80:52:c1:
         e5:76:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org