Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9669b0f3-0ed0-3a01-bd8f-c283a6881493.roa
File:                     9669b0f3-0ed0-3a01-bd8f-c283a6881493.roa (raw, json)
Hash identifier:          VogIxprwpSQVQVCjJnYdy5Pl6ZxPgzHwAWNBKN70Af0=
Subject key identifier:   0D:BE:32:AE:40:9B:29:6D:28:77:97:5B:A9:CD:29:96:FB:E6:C8:FC
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173929047D6
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9669b0f3-0ed0-3a01-bd8f-c283a6881493.roa
Signing time:             Mon 27 Jul 2020 23:16:35 +0000
ROA not before:           Mon 27 Jul 2020 04:00:00 +0000
ROA not after:            Wed 17 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        204.79.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:92:90:47:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 27 04:00:00 2020 GMT
            Not After : Apr 17 04:00:00 2030 GMT
        Subject: CN=cfdd5b3a-5596-43e5-ad0d-80af36311adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:d3:e6:b2:8c:ba:0b:dd:e1:bf:f7:6a:f1:
                    93:b5:6c:98:2b:06:ec:a3:d1:46:6b:3b:0b:16:36:
                    fc:92:59:6c:1f:67:2a:e0:11:3a:6e:18:dd:65:31:
                    db:9a:dc:f0:13:76:6b:d7:ea:9c:ef:15:1f:1c:20:
                    87:aa:d8:69:8b:a7:e3:28:fd:b5:92:76:65:50:99:
                    53:74:9e:60:4f:23:ec:3c:99:e2:8a:d1:51:91:df:
                    a2:45:21:40:dd:06:5c:70:ec:a1:b7:87:32:1a:68:
                    67:d5:a3:43:7a:39:5b:18:9f:52:c0:79:3b:06:14:
                    f1:f9:1c:58:b0:dc:31:15:78:73:5d:4e:53:ee:a5:
                    24:23:dd:b3:f6:f9:18:29:13:9b:28:22:91:2b:52:
                    da:3e:46:a0:29:14:71:b9:b7:c6:3c:cb:41:2e:41:
                    5f:a1:07:db:f8:ea:9d:1a:31:8c:29:65:d2:9b:b7:
                    30:30:f5:67:ad:2c:7b:d5:16:79:c8:98:c5:1b:ee:
                    8b:58:5e:0a:5e:39:0c:c0:7c:ff:19:f9:34:18:9b:
                    45:d4:52:66:74:69:b3:19:d8:cd:7e:6f:ab:dd:4f:
                    41:e1:14:7b:dd:dc:e5:ad:3d:b0:f0:85:53:28:0f:
                    91:69:58:a1:cc:7d:7d:ed:0e:83:56:e0:38:22:94:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BE:32:AE:40:9B:29:6D:28:77:97:5B:A9:CD:29:96:FB:E6:C8:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9669b0f3-0ed0-3a01-bd8f-c283a6881493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:48:26:00:d9:17:fb:71:c3:62:cf:bb:98:9e:d8:6a:e6:b3:
         9b:32:85:8e:f7:f6:2b:4e:e6:2e:41:5f:c4:2f:f2:89:c0:81:
         ba:7c:5c:f9:aa:3c:76:51:36:f1:52:9c:06:40:e1:31:b5:59:
         bc:b3:75:f6:cd:f8:a0:46:77:8f:85:e0:9d:b2:2a:2f:b5:5b:
         4b:f1:8d:6a:d7:f9:6b:d1:ec:19:d3:58:27:da:fe:61:71:8d:
         b6:89:8f:08:d4:93:22:7c:d0:ad:ff:c8:3b:f2:e7:67:07:90:
         5f:d0:ad:e3:c2:b7:82:62:3f:40:1a:e1:0a:06:97:3d:31:12:
         a8:ef:07:a5:e2:f9:5a:70:7d:d6:56:9b:d8:07:7e:26:4f:2d:
         ab:f2:01:95:08:99:44:a4:1d:0a:2e:af:dc:35:1f:70:b7:bc:
         05:99:2d:a7:d9:53:ba:0d:98:44:f6:0c:48:03:7a:ac:df:92:
         59:f4:84:4d:99:59:36:b8:92:5b:b1:d5:12:bf:38:4d:0e:1c:
         88:e7:89:53:23:af:31:ff:92:7a:14:a6:1c:05:81:d6:eb:0c:
         b4:9b:af:0b:b9:47:be:65:8d:47:b3:74:23:83:23:1e:ef:68:
         3d:e1:b3:18:94:b7:9e:d6:d9:77:83:b9:be:dd:19:28:c7:c7:
         39:4b:c5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:12 2024 by rpki-client on console-fra.rpki-client.org