Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/470dbb79-0a2f-3f6c-8c6f-974373258ec5.roa
File:                     470dbb79-0a2f-3f6c-8c6f-974373258ec5.roa (raw, json)
Hash identifier:          8mI3f+RTgaJZwxIG2ZN93qEvDeIPtUe02r6PfsM9HBo=
Subject key identifier:   37:4D:A5:CF:22:7A:2D:B7:1E:0F:78:73:DD:C8:36:AF:7D:8C:FE:0D
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732ABA1101
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/470dbb79-0a2f-3f6c-8c6f-974373258ec5.roa
Signing time:             Tue 07 Jul 2020 19:21:43 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Fri 29 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        40.126.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:ba:11:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Mar 29 04:00:00 2030 GMT
        Subject: CN=e47d1fd6-2652-4bb8-80e4-f6ffcc5260b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:ee:1d:34:97:6f:40:09:89:76:a9:f7:5a:
                    41:a9:38:19:5d:be:f9:da:d9:b0:85:1e:41:2e:bd:
                    0a:f1:7b:c8:4e:26:1e:31:e9:b6:28:c0:52:be:8e:
                    af:36:66:3b:fd:10:e7:56:e9:4f:8f:bf:24:df:6d:
                    7c:f8:d1:f9:79:87:4b:6c:3f:f2:5d:35:f7:e7:27:
                    24:a5:7c:90:e8:42:d2:3c:85:6b:d3:8e:c5:43:a9:
                    74:9f:6d:d2:14:92:8c:e5:53:d5:a1:8a:88:93:2e:
                    cb:cb:be:47:d5:b6:bc:82:dd:c3:26:28:f4:88:9f:
                    03:cc:b2:df:c7:be:95:81:b5:4e:b4:d9:95:29:24:
                    7a:f0:c8:d4:80:5d:f2:16:ac:d9:01:de:30:d4:9e:
                    6a:3c:4d:5f:68:a1:bf:e7:ee:5f:7d:df:0a:b0:93:
                    1d:8b:54:85:9e:a2:6b:7c:a7:c1:ff:cb:1d:d8:3d:
                    d5:07:ac:f9:14:fa:0c:70:83:67:90:93:75:7a:ba:
                    f5:b3:a4:5e:0b:62:20:ac:50:35:ca:ec:61:47:16:
                    97:f8:bd:67:0d:36:b8:ae:52:06:21:40:13:01:df:
                    7c:92:b6:e2:d8:41:94:1a:5e:5c:99:ff:0d:53:2c:
                    f5:fc:2f:16:8e:0b:52:18:07:31:fb:b0:60:f5:fa:
                    68:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4D:A5:CF:22:7A:2D:B7:1E:0F:78:73:DD:C8:36:AF:7D:8C:FE:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/470dbb79-0a2f-3f6c-8c6f-974373258ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.126.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bc:67:bb:b2:34:0a:d6:bc:6e:2d:03:f4:4d:4d:d1:8e:26:
         9e:0a:c6:a1:d5:45:5e:67:64:5c:eb:88:2e:62:5f:62:df:a4:
         f2:bd:39:20:48:53:91:f2:7a:f2:cf:b4:e1:d4:9c:40:59:a6:
         a3:5a:a8:50:6c:f6:6e:d2:61:9d:54:39:92:53:7f:ae:b4:46:
         e3:f9:67:7f:cf:99:1c:38:3a:f9:e3:6c:0c:50:33:a4:e7:a0:
         06:4e:65:4e:92:f1:ea:11:b1:bf:fe:71:32:9b:10:19:4a:4c:
         59:f8:21:bd:a3:6f:d9:05:a9:bf:16:b2:c5:6d:84:69:28:52:
         91:b7:e8:e8:2f:1b:cf:8b:24:17:ac:92:c2:37:2a:30:b5:4e:
         d1:62:e3:e1:ef:9b:c8:06:91:b8:2c:9c:94:4f:76:9e:1e:c0:
         81:dd:a9:5d:4f:19:07:5d:f3:ce:50:0d:98:fb:84:fb:4b:95:
         a0:2f:03:da:9f:38:e7:8c:66:dd:65:4f:3d:2c:11:72:16:7c:
         a2:a4:95:f5:ca:b8:fc:af:27:ad:74:c1:27:47:82:2c:60:ae:
         7d:70:65:30:be:d1:7f:ce:b9:e9:ca:49:45:30:5c:73:a1:2b:
         b4:f8:39:7b:8f:e0:c4:c1:63:fe:fe:f2:b3:78:80:b9:45:70:
         e5:bd:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:36:55 2024 by rpki-client on console-fra.rpki-client.org