Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b39c606-f114-3a3b-b18d-3068a1a9e9a5.roa
File:                     7b39c606-f114-3a3b-b18d-3068a1a9e9a5.roa (raw, json)
Hash identifier:          JFe10vgp0Dng1/7cCgEdwOAfEwLKQek/VFBin9oAB4c=
Subject key identifier:   47:E5:C0:F3:A1:99:8B:04:6E:F5:ED:F7:DC:F2:DF:18:05:8C:B5:04
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173253C0E21
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b39c606-f114-3a3b-b18d-3068a1a9e9a5.roa
Signing time:             Mon 06 Jul 2020 17:45:59 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Sun 24 Mar 2030 04:00:00 +0000
asID:                     3598
IP address blocks:        167.220.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:25:3c:0e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Mar 24 04:00:00 2030 GMT
        Subject: CN=65f29c2f-b25e-4a4f-8d93-f086b7da5fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:aa:c9:19:ff:23:55:e5:24:36:d0:be:07:a1:
                    e2:8d:56:e2:b8:61:b3:98:ae:05:7b:53:2a:de:8c:
                    d3:ea:8b:f0:1e:0b:0c:38:02:ac:6b:64:f4:15:2d:
                    19:00:71:24:85:ad:ed:99:2b:0a:a2:45:3b:86:d6:
                    cf:a7:ed:5a:18:8b:1b:d9:5c:78:23:90:76:df:7e:
                    e9:c9:40:c9:00:fe:28:c0:6e:93:9d:b4:58:70:d0:
                    6d:bd:64:37:b8:1a:26:97:fa:9d:a7:c8:d7:ac:3f:
                    19:c0:fd:30:a9:04:70:86:c3:34:4d:68:04:6b:3b:
                    dc:bd:a9:6a:80:e0:6d:9a:ac:b6:db:92:b3:f5:24:
                    e9:f5:26:36:b9:30:81:2c:eb:1e:5c:cf:e2:8e:59:
                    21:36:a3:bb:d2:da:83:17:25:a7:7c:4f:aa:df:c4:
                    2d:98:2f:90:e0:ea:9a:26:0c:80:c9:77:82:14:ea:
                    53:07:99:17:c1:6d:bb:f4:74:dd:c8:1a:12:8c:50:
                    1f:9f:da:5f:b0:f6:9e:d4:33:9b:1e:98:dc:17:b2:
                    8c:8d:7e:6b:50:94:b4:f4:4b:4a:b7:43:5d:b9:ca:
                    4a:25:93:d1:21:89:e0:6e:fb:54:6a:d8:37:e7:6d:
                    fe:ef:90:2d:d8:de:85:c1:c3:df:8b:38:ef:7a:3d:
                    74:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E5:C0:F3:A1:99:8B:04:6E:F5:ED:F7:DC:F2:DF:18:05:8C:B5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b39c606-f114-3a3b-b18d-3068a1a9e9a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.220.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:9b:8f:c0:fd:0c:3c:f0:76:0b:0a:63:0c:9b:a6:2f:3e:9c:
         b0:1b:bd:12:5e:23:e0:c9:5b:79:3d:a3:e2:a3:c3:86:6d:4a:
         39:05:b1:11:bf:8f:bc:9b:ee:d5:6e:e4:96:68:1f:3a:de:61:
         b3:5c:3a:4f:60:3a:20:bf:78:e3:67:93:f5:b4:a0:3b:8c:b7:
         35:30:48:7c:7f:1e:49:91:13:3f:29:90:43:d0:58:3f:19:93:
         e6:82:04:66:29:e9:db:3e:97:37:67:ed:87:8b:4c:a9:6e:fb:
         4f:58:d5:8c:6d:b9:b3:9c:a7:00:a2:24:7c:59:f2:ef:c7:ef:
         84:11:d7:0f:96:e1:85:8c:e9:b5:ab:82:0d:97:5e:66:47:8b:
         33:d7:34:72:60:e8:2d:59:53:0b:72:2b:d8:b1:61:53:0e:35:
         ec:2c:11:c1:d6:01:89:75:ba:71:06:97:c1:bb:3b:8c:da:a0:
         73:14:82:a6:0f:8c:cc:89:45:81:ec:fb:69:e8:65:97:69:e7:
         5e:a0:4a:53:48:8b:84:4a:bd:b7:ef:2c:64:08:11:df:06:ae:
         b4:09:fa:b2:c9:e0:39:e9:42:44:cf:45:ca:8a:15:6c:bc:84:
         b3:13:ea:65:71:ee:4e:d2:cc:28:cd:52:ef:71:24:e2:33:26:
         a4:49:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:06 2024 by rpki-client on console-ams.rpki-client.org