Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b56fb3cd-5cc8-365e-b336-f14f21e7793c.roa
File:                     b56fb3cd-5cc8-365e-b336-f14f21e7793c.roa (raw, json)
Hash identifier:          8Ur6jlSAKdXn9X0CYHXcKZkFXDOu0it0OdQHZzNFMs4=
Subject key identifier:   60:38:B9:6A:7A:9A:59:9D:5B:E0:49:82:A8:29:26:C5:43:FA:54:FC
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858372BF8C07A8A2B5BB16AA754C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b56fb3cd-5cc8-365e-b336-f14f21e7793c.roa
Signing time:             Fri 04 Sep 2020 04:00:00 +0000
ROA not before:           Fri 04 Sep 2020 04:00:00 +0000
ROA not after:            Thu 14 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        40.123.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:2b:f8:c0:7a:8a:2b:5b:b1:6a:a7:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Sep  4 04:00:00 2020 GMT
            Not After : Mar 14 04:00:00 2030 GMT
        Subject: CN=8848abe4-195a-41c8-bd37-c03e6178ae87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:79:24:2e:ec:ae:a4:07:7d:c1:63:e3:c4:
                    76:e1:c3:4b:4a:2c:af:40:0d:d0:71:f7:60:b0:f6:
                    39:77:75:52:6a:c7:b7:a9:d9:32:5c:b0:f4:f4:e9:
                    96:95:30:a0:74:21:0c:70:22:5e:2c:21:d5:3a:ca:
                    1d:b3:60:0f:9d:e3:6c:b3:37:3c:2b:7f:35:04:c0:
                    52:bc:aa:d5:7f:8d:54:ad:ef:de:55:1f:41:6b:4d:
                    f6:17:3b:67:2a:7e:0b:47:78:ff:b2:7f:f7:b6:c6:
                    d5:f5:46:70:b1:d6:dd:f6:f8:67:3b:df:8c:c5:4f:
                    a8:ca:d1:42:49:fb:c3:d8:52:d6:91:0b:20:ed:cb:
                    cb:80:78:89:fd:34:23:5e:a8:71:b7:b2:f5:3a:67:
                    29:f6:41:6e:36:83:53:14:8e:2c:12:97:3a:02:07:
                    31:26:60:a5:8e:16:9b:c4:eb:1d:52:56:65:aa:a1:
                    53:c6:58:19:bd:10:ce:12:82:04:e8:66:d7:e2:5a:
                    66:97:3c:64:a6:78:e8:5a:9e:48:ce:01:8c:fd:de:
                    12:b2:67:b4:b3:74:ac:e4:6a:38:c1:7d:c1:20:33:
                    18:64:cf:60:87:3a:fb:0c:96:4b:c9:a7:c4:1a:67:
                    c9:1b:2e:21:9d:ca:86:8b:af:fa:f0:f9:31:af:77:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:38:B9:6A:7A:9A:59:9D:5B:E0:49:82:A8:29:26:C5:43:FA:54:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b56fb3cd-5cc8-365e-b336-f14f21e7793c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.123.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:fe:22:f6:c1:94:f1:8b:84:32:ea:d2:18:9b:59:4b:3b:7d:
         03:4b:8f:85:5b:ec:63:83:5d:ab:3a:0e:aa:67:14:75:3e:fa:
         55:78:7a:54:3d:16:fa:09:59:0e:5a:1c:37:d2:8c:52:d3:fc:
         91:21:11:f1:ca:1d:3c:15:3a:2c:01:6f:e4:4b:8b:ec:39:65:
         a1:e6:69:01:82:14:99:4e:03:5f:c9:aa:94:4e:99:54:a4:18:
         8e:73:25:b4:64:aa:96:63:e3:06:7b:0e:36:e6:c9:c4:ce:34:
         3b:71:52:ac:0c:ab:bb:92:a3:07:61:8a:11:0e:dc:65:32:84:
         a3:18:9b:26:b7:d6:c1:c4:7b:34:96:b8:12:84:84:e9:20:34:
         3f:f9:13:d0:0b:37:8c:4b:2e:af:44:8e:f2:86:32:34:ee:ee:
         a9:9f:ff:46:eb:34:f2:f0:14:6f:ac:d5:02:c1:d0:cd:db:43:
         46:ab:04:92:38:65:6b:3f:b2:2b:a3:aa:f4:5d:ef:13:7e:ca:
         73:d9:46:02:d1:0b:05:c4:f2:66:41:83:5b:b0:c9:2d:8f:5d:
         ce:71:e1:b2:45:a4:d2:d6:74:21:62:83:8b:7a:3d:14:cb:f7:
         33:71:3c:ac:2f:26:85:da:44:4c:2d:d8:1e:4f:3d:e9:4d:8b:
         a2:99:05:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDcr+MB6iitbsWqnVMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTIwMDkwNDA0MDAwMFoXDTMwMDMxNDA0MDAwMFowLzEtMCsGA1UEAxMk
ODg0OGFiZTQtMTk1YS00MWM4LWJkMzctYzAzZTYxNzhhZTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRh5JC7srqQHfcFj48R24cNLSiyvQA3Qcfdg
sPY5d3VSase3qdkyXLD09OmWlTCgdCEMcCJeLCHVOsods2APneNsszc8K381BMBS
vKrVf41Ure/eVR9Ba032FztnKn4LR3j/sn/3tsbV9UZwsdbd9vhnO9+MxU+oytFC
SfvD2FLWkQsg7cvLgHiJ/TQjXqhxt7L1Omcp9kFuNoNTFI4sEpc6AgcxJmCljhab
xOsdUlZlqqFTxlgZvRDOEoIE6GbX4lpmlzxkpnjoWp5IzgGM/d4Ssme0s3Ss5Go4
wX3BIDMYZM9ghzr7DJZLyafEGmfJGy4hncqGi6/68Pkxr3cQKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGA4uWp6mlmdW+BJgqgpJsVD+lT8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjU2ZmIzY2QtNWNjOC0z
NjVlLWIzMzYtZjE0ZjIxZTc3OTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKHvgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACv+IvbBlPGLhDLq0hibWUs7fQNLj4Vb7GODXas6DqpnFHU++lV4elQ9
FvoJWQ5aHDfSjFLT/JEhEfHKHTwVOiwBb+RLi+w5ZaHmaQGCFJlOA1/JqpROmVSk
GI5zJbRkqpZj4wZ7DjbmycTONDtxUqwMq7uSowdhihEO3GUyhKMYmya31sHEezSW
uBKEhOkgND/5E9ALN4xLLq9EjvKGMjTu7qmf/0brNPLwFG+s1QLB0M3bQ0arBJI4
ZWs/siujqvRd7xN+ynPZRgLRCwXE8mZBg1uwyS2PXc5x4bJFpNLWdCFig4t6PRTL
9zNxPKwvJoXaREwt2B5PPelNi6KZBQk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:12 2024 by rpki-client on console-fra.rpki-client.org