Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/af8a1728-81e1-3ca9-ad3a-6cd106e94c0b.roa
File:                     af8a1728-81e1-3ca9-ad3a-6cd106e94c0b.roa (raw, json)
Hash identifier:          8B9xHkAu44WNKEosbFrxFj6F37GZhEOf6QeoMaRwObM=
Subject key identifier:   AD:AD:24:71:03:9C:A5:60:EE:BA:A2:2D:72:CE:16:93:9A:C8:9E:DA
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173108C15E1
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/af8a1728-81e1-3ca9-ad3a-6cd106e94c0b.roa
Signing time:             Thu 02 Jul 2020 17:21:22 +0000
ROA not before:           Thu 02 Jul 2020 04:00:00 +0000
ROA not after:            Thu 11 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        74.240.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:10:8c:15:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  2 04:00:00 2020 GMT
            Not After : Apr 11 04:00:00 2030 GMT
        Subject: CN=d6041032-9441-4cc4-9e33-52e0062b5d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:2f:2d:55:e8:b9:fb:6a:2f:3b:05:62:7a:
                    73:32:b0:36:3f:0e:27:5f:46:7d:47:9a:22:98:07:
                    7e:5b:c6:c9:46:ae:80:65:23:a1:b9:6d:c7:42:41:
                    2b:59:e8:be:1c:d2:ee:56:cb:87:a7:08:2e:4f:c6:
                    ea:f2:79:97:a9:77:1e:52:36:12:7c:2c:e4:ca:10:
                    41:1e:4b:64:f8:e9:38:49:c9:77:1a:7a:39:93:fd:
                    cf:15:c3:28:1f:90:69:5b:96:b7:80:35:d9:9e:8d:
                    21:f7:35:2d:eb:cc:25:7e:bb:2e:17:af:53:b2:1a:
                    b3:71:81:85:63:35:2d:7b:94:45:0e:06:f2:b2:43:
                    5c:34:a6:9b:04:30:09:d6:61:47:5d:2e:3b:6e:72:
                    50:48:9d:77:31:7e:15:9c:96:a3:ed:24:e0:b0:76:
                    f6:2d:a2:9f:d5:75:c3:5c:67:35:cb:b3:60:2a:78:
                    cc:4e:c0:68:53:4e:f4:6d:28:b3:6a:46:da:86:37:
                    e5:88:43:f2:34:1f:1f:92:4c:d2:8c:c9:17:fd:ce:
                    7b:39:b0:ff:da:b2:60:71:74:96:81:4e:03:86:60:
                    f9:64:64:bd:28:a2:c1:03:c3:70:24:fc:6c:88:24:
                    1a:93:30:5c:45:b0:63:97:9e:3a:0d:b2:79:1d:cd:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AD:24:71:03:9C:A5:60:EE:BA:A2:2D:72:CE:16:93:9A:C8:9E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/af8a1728-81e1-3ca9-ad3a-6cd106e94c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.240.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:8a:d1:94:ef:c2:67:57:af:3a:cb:29:ce:a1:a1:b5:0b:cd:
         88:27:ca:be:60:cd:d7:32:76:87:50:9c:bc:6d:1b:5b:e4:6b:
         80:9d:66:31:39:e6:cc:1e:3a:40:e9:7f:94:be:17:08:28:11:
         92:f1:3d:8a:f7:f6:c6:2d:f7:d1:8e:c9:3b:75:89:b8:19:ba:
         f6:1c:a4:b0:5e:a5:26:44:d0:31:82:18:e9:e3:4d:df:e9:a4:
         7f:bf:cc:95:80:b1:0f:2b:f9:c5:9f:c8:5e:4a:b4:38:f3:31:
         5e:d0:03:e4:4f:1a:6b:ac:0b:60:af:76:32:f3:18:d5:fc:da:
         23:51:49:7e:09:86:e0:8b:47:ae:4c:12:e3:9c:20:83:b9:38:
         07:bf:4f:87:3b:73:30:03:71:6b:68:15:ca:ea:20:c3:1f:67:
         d3:80:fd:eb:38:1e:00:dc:c3:df:6b:d8:8e:ed:fa:94:68:20:
         da:dc:05:85:77:bf:ff:2a:2c:e6:6f:56:b2:fc:30:8c:6e:cc:
         05:52:0d:5b:ea:eb:53:e5:61:9a:3b:14:76:56:18:5b:72:8b:
         c1:86:cf:6a:40:6a:92:72:01:3f:c6:ec:bc:79:55:af:60:a6:
         f8:6a:3b:1c:a3:6f:5c:bc:65:81:bc:8a:92:93:0f:35:b8:44:
         a5:36:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:12 2024 by rpki-client on console-fra.rpki-client.org