Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff889415-5542-3f69-a4b4-86f38f99d2ee.roa
File:                     ff889415-5542-3f69-a4b4-86f38f99d2ee.roa (raw, json)
Hash identifier:          WqgUxSh+rLHz+hyq6kHvixs8YhtJ5GFB2Nx6ZHtHe4s=
Subject key identifier:   CB:F3:36:B1:D9:22:8C:FC:84:3D:6F:A4:28:94:B5:C2:CC:21:BC:D2
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732F637005
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff889415-5542-3f69-a4b4-86f38f99d2ee.roa
Signing time:             Wed 08 Jul 2020 17:05:12 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Sun 17 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        208.84.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:63:70:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Mar 17 04:00:00 2030 GMT
        Subject: CN=e08c81be-33bd-4595-8512-ecb77cfe1bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:88:73:1f:fc:7d:05:71:48:49:d6:39:9e:
                    be:79:b1:ed:62:21:86:59:cf:ea:eb:c9:00:67:a5:
                    e2:3e:58:90:4d:7e:b7:d3:e4:89:ca:71:84:6a:dc:
                    08:94:19:4a:7b:ac:e2:22:cb:4a:33:aa:ab:bb:58:
                    1d:f5:fe:37:af:7a:a6:d1:4d:14:ba:c0:5e:8a:b1:
                    1a:c8:36:72:e2:fd:7b:f6:89:4f:ba:64:0e:33:3a:
                    36:d9:d9:bd:da:d6:2b:9f:25:e7:03:f2:92:4b:8a:
                    13:33:70:e4:69:a0:ec:36:68:d8:65:9e:cd:89:cb:
                    39:f5:5f:b5:48:1a:50:97:8c:e2:cb:36:b5:05:54:
                    c7:12:5b:74:f7:77:c0:68:6c:47:85:d5:91:16:eb:
                    c2:d7:88:68:6b:f5:01:be:9f:56:11:22:1f:be:9a:
                    7a:e7:84:f1:4f:3a:20:b6:08:17:c5:fe:8e:fa:c1:
                    2a:25:4f:7f:4d:39:fe:b1:04:fa:b6:f8:d6:0e:b5:
                    1b:dc:92:40:d1:42:ae:4b:8a:58:71:7f:e6:0a:0f:
                    db:ee:6b:c8:f9:36:36:a1:40:0b:f8:1b:00:43:83:
                    c1:f7:c9:59:dd:1d:56:18:dd:92:81:b6:c4:0e:11:
                    18:65:33:f3:6e:b2:4e:7a:14:76:24:cf:9a:5e:cb:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F3:36:B1:D9:22:8C:FC:84:3D:6F:A4:28:94:B5:C2:CC:21:BC:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff889415-5542-3f69-a4b4-86f38f99d2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:38:15:75:f4:25:40:31:fe:7a:e1:78:69:59:b7:51:bc:
         45:d3:2c:17:b8:f5:89:b1:c7:dd:89:ca:04:d0:dd:c8:f6:a8:
         30:7d:3c:59:67:e8:2e:e1:15:06:71:a8:57:90:e4:48:7d:85:
         5c:13:23:27:63:ce:52:a8:b9:39:70:a6:d9:08:64:b5:6d:25:
         30:2f:00:26:c5:9f:ab:90:9b:39:04:6a:41:c7:8a:d9:e3:67:
         e7:ac:0e:b1:56:dc:a5:b6:6c:91:24:b2:01:f4:22:26:e3:63:
         43:d3:83:eb:e2:1c:96:f2:6d:6c:d3:5e:e5:59:46:04:28:5d:
         a9:36:ae:d5:27:57:35:7c:cb:29:74:f8:4e:8c:64:fb:6a:7d:
         e2:41:4a:dd:20:58:51:9a:c7:24:6f:17:23:ef:83:db:93:fc:
         82:dc:fc:cf:d7:ce:ff:8c:d5:bd:2e:ff:79:a2:b2:59:62:0f:
         15:12:3d:cd:5d:20:cf:8c:ae:3f:52:ad:7f:83:a3:5e:53:9d:
         62:e7:79:8c:44:5c:86:fc:18:78:14:a7:2c:5d:8d:97:f0:84:
         5d:7b:d5:ef:1c:09:08:04:75:3b:70:cb:95:b5:1c:53:21:ea:
         66:ba:f7:9a:8b:ee:6c:95:0e:18:f1:db:c7:7a:8e:09:40:bd:
         73:73:d0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:13 2024 by rpki-client on console-fra.rpki-client.org