Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/720a909c-5cf5-3e00-a604-1773ae04d379.roa
File:                     720a909c-5cf5-3e00-a604-1773ae04d379.roa (raw, json)
Hash identifier:          i09uMOrBPckW8DWFwmy9I4nkFlFtDPof6S43z3OUbfI=
Subject key identifier:   7D:EB:07:E8:CA:FE:D4:8D:3C:AA:F1:4F:74:AB:F4:2B:3E:15:5C:C3
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732AB9CC6B
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/720a909c-5cf5-3e00-a604-1773ae04d379.roa
Signing time:             Tue 07 Jul 2020 19:21:26 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Sun 14 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        40.112.0.0/13 maxlen: 13

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:b9:cc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Apr 14 04:00:00 2030 GMT
        Subject: CN=4dffadcd-f4a8-415c-b840-b337c1c760f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:8e:cb:22:e3:09:bf:ba:52:8d:5b:16:a4:
                    79:49:79:fd:0b:0d:de:1b:74:f2:e4:e7:78:55:fa:
                    32:99:3c:4d:ab:81:1b:ac:08:fd:41:32:c7:6b:7a:
                    c5:3f:c5:30:d7:03:fb:4a:fd:8b:88:35:8b:a6:1b:
                    32:08:55:5c:cb:03:3f:52:02:32:bc:80:c2:d1:91:
                    9d:19:db:63:1a:7f:94:03:e1:d4:00:06:ff:3d:c9:
                    72:7c:e5:13:b5:6c:60:1a:01:63:ca:4a:dd:06:b4:
                    66:ad:ac:13:71:c9:68:83:d0:c4:9d:f3:1e:3d:72:
                    db:f0:c7:f3:f9:42:31:6a:ef:85:a1:2f:04:a8:77:
                    5e:05:10:c4:02:6d:71:4d:1c:84:45:7e:11:90:86:
                    e3:fe:0c:6f:43:3e:02:34:51:79:d9:7d:f1:f2:ac:
                    ed:98:8f:8a:78:5a:e2:18:d9:12:80:8d:0d:e8:76:
                    cd:e3:7c:88:dd:cc:2e:38:6a:67:85:14:00:64:16:
                    5b:7c:39:66:c7:1d:e6:34:64:ca:af:1e:d9:0f:8e:
                    8c:1a:3a:d1:86:7c:d1:1a:06:61:b6:86:79:10:a6:
                    9d:ba:b1:5c:13:6b:7a:58:a2:57:40:b4:37:fa:67:
                    39:3c:e2:99:2a:b3:f9:db:a6:13:bd:44:4f:c3:af:
                    7f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EB:07:E8:CA:FE:D4:8D:3C:AA:F1:4F:74:AB:F4:2B:3E:15:5C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/720a909c-5cf5-3e00-a604-1773ae04d379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.112.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:00:df:af:d4:20:85:0e:3a:37:79:06:ea:a5:b6:09:ff:6f:
         3f:e5:88:c2:bc:68:43:60:36:5c:d7:c8:ff:88:cd:ca:0b:61:
         7a:05:b2:7b:6b:a4:65:c0:03:32:3d:04:85:7b:f5:01:b7:56:
         9c:b3:11:1c:5b:6d:6e:e9:86:22:7b:9f:e0:10:b7:a4:81:7d:
         ac:3a:69:90:86:72:73:3a:94:0b:70:83:47:62:50:b5:7d:c4:
         b8:2e:43:38:66:a3:2c:68:57:36:11:85:cb:6a:f3:41:9d:e3:
         cc:45:fa:b7:c2:98:e2:c4:e4:b6:bc:9b:00:cc:63:76:a1:f7:
         04:07:1e:2b:3c:c7:09:71:6e:4c:6c:9c:41:26:22:47:59:7b:
         b4:53:b1:64:a6:d6:c2:55:5b:67:87:bb:02:32:c0:8b:d5:59:
         e3:71:b9:ba:0d:2e:73:d7:f2:53:92:43:cc:ac:95:01:76:18:
         b6:6a:4c:93:9b:74:45:33:cc:81:95:40:a4:02:fb:2c:e9:fb:
         2e:ce:d4:3b:09:cd:1e:f9:39:53:6b:35:86:1e:3c:77:35:be:
         cb:20:7c:6c:6c:39:6f:cd:a9:7f:0a:8c:28:2a:f9:b9:01:3d:
         88:a8:19:8a:f4:47:f0:c6:fc:b3:8e:75:df:cb:f2:ca:41:04:
         b1:0a:ea:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:23 2024 by rpki-client on console-ams.rpki-client.org