Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8fddc061-fcee-3c88-a16a-f38b8982fd65.roa
File:                     8fddc061-fcee-3c88-a16a-f38b8982fd65.roa (raw, json)
Hash identifier:          SgDcbcwFMzPL8JnNMuHWx1bUFLlRNAD6ojI0YAXnAnY=
Subject key identifier:   2F:48:6F:7E:AD:7D:3C:49:25:44:BC:8A:57:09:4D:16:F4:4D:C8:F0
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732F66BEE2
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8fddc061-fcee-3c88-a16a-f38b8982fd65.roa
Signing time:             Wed 08 Jul 2020 17:08:49 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Fri 22 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        23.103.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:66:be:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Mar 22 04:00:00 2030 GMT
        Subject: CN=71a6814e-93cb-4606-9b10-2e51dfdd22ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:48:12:5a:38:01:25:71:5a:5f:1e:f0:66:
                    37:b0:09:e1:1b:62:60:ef:db:40:ba:45:fd:c7:c4:
                    02:51:9d:e2:f8:e5:fe:34:28:21:78:b4:24:a1:0c:
                    d9:9f:ee:8f:88:83:c7:18:42:a2:0f:07:ef:46:10:
                    34:37:f6:aa:9f:73:c4:d2:14:82:85:9b:60:47:20:
                    19:9e:28:fd:67:ae:74:9f:7b:ec:c7:e2:45:fb:8e:
                    2a:4c:96:52:01:32:e0:1d:6e:50:b3:0e:35:87:62:
                    33:c0:42:1b:fc:75:90:80:76:c0:da:13:02:8c:66:
                    25:d4:87:f7:79:eb:d4:74:62:0c:12:bd:56:7c:52:
                    89:14:f6:3a:ba:22:c3:28:b3:5e:eb:e7:0d:6c:3e:
                    e3:48:94:11:d2:89:cd:ee:b3:a8:6b:2f:91:9d:e2:
                    e4:38:a1:ab:5c:63:49:2f:0a:3b:32:29:29:66:84:
                    39:b3:ba:bd:2b:f2:49:a6:0c:58:7b:84:3c:7c:b6:
                    77:be:4c:0a:a9:46:f0:26:47:da:de:57:9e:0c:60:
                    11:9f:ab:46:d5:c9:e9:8a:5f:bb:6c:d0:46:d9:88:
                    77:1c:69:38:33:e8:da:45:e2:1a:9c:39:38:0a:4f:
                    2f:99:74:d9:10:65:45:81:9d:51:75:d1:69:4f:96:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:48:6F:7E:AD:7D:3C:49:25:44:BC:8A:57:09:4D:16:F4:4D:C8:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8fddc061-fcee-3c88-a16a-f38b8982fd65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.103.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a3:11:42:10:ec:07:60:1e:1b:e9:7d:7c:f3:c7:15:05:22:
         1a:d2:ca:d3:78:58:91:d6:69:50:85:04:be:05:c2:78:3d:62:
         e9:54:b8:68:df:56:a0:26:a6:3d:bb:9c:c8:1f:63:c2:57:f8:
         0e:45:ea:aa:fe:97:50:80:b8:79:a2:4b:4c:0d:d8:83:81:43:
         a1:28:b7:2a:3d:26:a7:32:17:0d:99:e6:e5:67:f8:5c:82:91:
         8c:d9:89:81:2e:8b:7e:12:12:d2:72:3b:2d:21:94:83:df:ff:
         d6:ca:05:96:b9:87:3c:46:10:a9:4a:91:2b:6e:66:52:e4:b8:
         60:1e:e1:81:bf:e5:4f:11:fa:2e:6d:f0:6f:f6:50:04:66:01:
         38:91:54:a4:fc:7f:15:fc:6e:2f:e3:81:33:d2:ac:40:ed:e1:
         c0:68:70:51:34:eb:41:17:cb:07:aa:cf:10:bb:23:83:aa:b6:
         d9:69:01:5d:ff:a9:2e:c2:e1:78:1d:31:c3:89:b0:de:40:8b:
         d0:19:1c:ea:b8:53:2e:24:b1:98:10:00:9e:d5:ae:5c:82:50:
         95:24:32:cd:91:be:6d:5d:49:dd:c1:98:74:39:3f:d0:6a:85:
         82:53:cd:ce:2b:2d:2a:8a:34:e3:cf:c2:bf:7a:7d:a1:e5:89:
         40:a4:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 06:53:52 2024 by rpki-client on console-ams.rpki-client.org