Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/845c14ee-5706-3c64-94cd-68bb6657c47f.roa
File:                     845c14ee-5706-3c64-94cd-68bb6657c47f.roa (raw, json)
Hash identifier:          6AE6jcPicLcat/LoPBhaLTfRc8aPWef7ZeByZ9DL3Y4=
Subject key identifier:   EA:C4:4C:48:19:34:30:78:C0:73:BE:29:55:4E:7F:B0:24:9E:C6:C8
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732ABA33CA
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/845c14ee-5706-3c64-94cd-68bb6657c47f.roa
Signing time:             Tue 07 Jul 2020 19:21:52 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Fri 05 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        40.127.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:ba:33:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Apr  5 04:00:00 2030 GMT
        Subject: CN=b82c205a-08e6-4ff9-bb8f-c7bef2eba3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:f0:7d:1d:01:51:4d:17:4a:6a:ca:ea:3d:
                    8a:36:74:5f:fa:7c:61:0a:25:a2:43:1a:71:09:02:
                    0f:b6:df:5a:45:f2:a6:4b:81:fc:f5:c8:d5:17:0a:
                    09:a7:a2:a3:af:6f:49:84:8d:5f:f7:b5:43:bf:76:
                    11:ea:56:20:db:80:71:45:3c:0e:20:db:df:c2:b3:
                    0d:ff:0c:7b:30:cc:65:4a:8e:28:a8:7a:1d:e0:fc:
                    85:9f:9b:77:25:ec:cb:16:03:f4:19:7f:be:fb:51:
                    0a:f8:ce:5f:97:da:f1:52:10:e0:01:c3:12:a2:19:
                    6d:e7:30:da:fd:03:90:bd:4c:fc:dc:13:4e:5b:32:
                    01:7e:5f:14:b1:8d:7b:22:97:a1:15:27:bb:19:80:
                    21:be:25:23:82:cc:75:0b:61:4d:23:60:10:a8:f6:
                    a6:48:7c:91:45:40:ca:2f:ce:39:c3:28:cb:f6:5a:
                    15:9d:50:b0:28:45:2f:f4:b7:2a:60:80:6f:10:df:
                    6b:23:9f:0e:a2:eb:40:9a:56:e3:cd:c9:f6:5e:7b:
                    ce:a3:02:0d:ea:fe:bf:c4:fd:e9:02:8e:2b:7f:1c:
                    76:11:d6:aa:8a:f1:c1:09:e2:de:fa:52:d4:38:e3:
                    ed:b3:f5:66:66:8c:e7:db:b8:b3:37:75:44:83:bb:
                    16:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C4:4C:48:19:34:30:78:C0:73:BE:29:55:4E:7F:B0:24:9E:C6:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/845c14ee-5706-3c64-94cd-68bb6657c47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.127.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:80:47:70:a1:6f:58:61:c4:98:3b:16:3c:1b:c5:55:2d:95:
         e9:6f:44:51:5c:3b:fe:a6:6a:16:e8:42:b8:10:9e:d0:66:c1:
         4b:a7:66:5f:1d:01:5e:db:18:9d:7c:9e:63:00:80:e8:54:03:
         c6:cb:a7:22:5e:78:0e:c5:05:dd:e6:63:9c:c4:d5:63:05:14:
         32:66:e4:7e:f9:91:b7:eb:f2:ec:78:f5:7f:06:b4:1b:fa:6b:
         56:06:c4:02:4b:e7:aa:3c:52:fc:38:5e:ac:93:27:c9:d1:84:
         24:49:61:e1:8b:a3:af:e6:9c:9c:49:9d:a5:1a:b1:96:79:99:
         03:3f:4e:e3:e1:d2:75:20:be:4b:34:bd:c8:20:a2:58:1b:ae:
         6a:1f:21:4e:99:96:12:fe:8f:53:67:df:7e:d8:46:61:f2:6f:
         d2:6f:e1:4f:fb:42:57:d6:cb:57:52:85:17:35:30:52:e0:35:
         99:ea:f9:c7:96:01:c3:fc:18:2b:dc:93:80:84:c5:3f:e6:0a:
         d8:10:27:c4:0c:cf:8e:71:0f:b6:18:36:d2:5f:00:54:4b:c4:
         c4:ae:62:73:0c:cf:46:86:d4:5b:69:f5:12:fc:4b:7d:6a:95:
         14:cf:5e:d6:98:09:d1:4d:30:85:9b:95:27:52:63:a9:ee:62:
         71:7e:cd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 14:33:32 2024 by rpki-client on console-fra.rpki-client.org