Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0af7c0f-c0a2-3b17-b569-a64bc64d659b.roa
File:                     c0af7c0f-c0a2-3b17-b569-a64bc64d659b.roa (raw, json)
Hash identifier:          yKYcYdGeBL5z4hdp9W2rWMp1HtIgD/FcKeXcKhM1R+s=
Subject key identifier:   9D:EC:9C:72:1F:02:83:A8:09:E8:7E:D2:B4:1A:A6:7E:8B:84:25:B1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285839379F5A717CDC36D26A33DFC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0af7c0f-c0a2-3b17-b569-a64bc64d659b.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        68.191.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:9f:5a:71:7c:dc:36:d2:6a:33:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=34ad39e3-c997-4869-acd5-22785a32847f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:26:f9:83:cc:3c:fe:48:fc:96:a4:64:4e:
                    0d:42:9a:28:4e:c9:61:a4:a9:3c:6a:4a:b5:33:a3:
                    46:f6:f0:99:92:41:1b:3d:21:b8:aa:e1:a8:ab:c6:
                    d4:74:a3:e4:88:67:61:ad:90:bd:9e:d9:51:d7:47:
                    75:3f:00:ab:94:0a:e6:73:69:5f:52:1e:94:75:d7:
                    29:69:5c:6e:13:ca:16:c8:b3:c2:67:f5:b7:a3:17:
                    a0:44:80:0c:02:ba:af:f8:68:60:9d:f1:45:d9:11:
                    f6:d1:3d:eb:02:9e:a7:2c:f9:7c:50:89:91:22:7f:
                    19:65:65:cd:fb:55:c9:d2:84:79:2b:b2:6b:52:3b:
                    3e:7a:a7:f6:3c:68:e6:e4:f4:2b:bb:42:ec:72:8b:
                    6f:9f:f4:6f:f5:f5:c7:b6:dc:79:d9:0f:34:d6:b8:
                    44:f7:09:99:6a:4d:96:82:b0:f4:75:58:e1:1f:bd:
                    ec:2a:f5:a9:59:cd:67:4e:ca:50:e3:c9:98:83:6b:
                    db:9d:ad:4a:b5:8e:05:db:2a:d0:10:03:e8:1f:35:
                    89:2a:90:30:c3:6c:d8:f6:fd:e4:d9:51:d9:70:47:
                    dc:e1:78:83:1f:91:0e:cd:fd:d3:c1:bd:ba:6a:60:
                    30:25:e9:b9:e9:f3:bb:30:40:4c:cf:5c:f4:a3:38:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:9C:72:1F:02:83:A8:09:E8:7E:D2:B4:1A:A6:7E:8B:84:25:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0af7c0f-c0a2-3b17-b569-a64bc64d659b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.191.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:70:cf:3d:b6:c3:0a:20:3e:36:bb:ef:4a:87:d4:c3:eb:88:
         a6:9f:5a:25:4e:30:52:3a:64:de:db:cf:82:ef:8e:4e:2d:26:
         f8:98:18:35:63:f3:dd:0e:ca:7b:89:83:2c:78:11:c1:f0:98:
         03:5d:86:b5:db:c4:13:dc:a5:d2:b1:7e:48:54:61:26:3f:08:
         d4:84:9e:85:46:92:fe:8a:1e:94:36:20:06:a6:5c:48:1e:56:
         bd:fa:08:b9:3a:b0:49:d7:37:ca:0f:39:40:02:fa:26:cc:59:
         53:71:e9:12:94:db:74:c7:bc:b5:64:c9:44:f2:6c:ad:6a:6b:
         ec:c2:e7:85:d1:62:49:da:d2:a4:f6:9d:39:e5:51:90:cd:69:
         e8:9f:5e:5f:54:04:63:75:34:57:cc:ff:34:31:62:de:ef:9c:
         ad:06:07:60:e2:06:67:d9:fd:20:7f:38:3f:9c:ae:2d:37:49:
         e0:f1:2d:95:9b:ac:5d:9f:fa:96:3f:c1:56:52:d6:96:fc:61:
         ae:34:d5:fe:ea:b8:e2:18:76:1d:fd:d5:71:c3:27:ed:5f:19:
         da:b9:4e:ce:8c:09:00:66:66:4b:49:88:f1:a2:f7:17:6d:9f:
         ee:9e:cf:83:44:1d:b4:cf:57:99:68:b0:54:51:2d:80:f3:fa:
         27:41:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:19 2024 by rpki-client on console-fra.rpki-client.org