Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/3dc81cc0-b765-326f-8ed7-7ae65edd39e3.roa
File:                     3dc81cc0-b765-326f-8ed7-7ae65edd39e3.roa (raw, json)
Hash identifier:          SixrB4GNRzIRnZ9QweMXhpRjCFgy+r1QwDKd2m9EY60=
Subject key identifier:   3D:79:86:9C:D0:B5:A9:03:3C:67:44:74:AD:BD:D1:9F:8D:B9:8B:03
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1734E35416F
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/3dc81cc0-b765-326f-8ed7-7ae65edd39e3.roa
Signing time:             Tue 14 Jul 2020 16:42:59 +0000
ROA not before:           Tue 14 Jul 2020 04:00:00 +0000
ROA not after:            Sun 09 Jun 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        134.170.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:35:41:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Jul 14 04:00:00 2020 GMT
            Not After : Jun  9 04:00:00 2030 GMT
        Subject: CN=0165f1d7-bde7-4a0f-9a3d-84f82304ce46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6b:d7:83:f3:d4:e0:32:05:4c:d2:b8:82:2e:
                    2f:1c:bf:e5:fb:9c:90:3c:15:4f:0f:d7:0f:e1:c6:
                    22:aa:5f:4d:c4:dc:73:71:f0:6f:2e:fd:19:7b:f6:
                    8c:1b:0d:96:42:75:cd:35:3a:0f:c6:8b:0b:2c:e4:
                    2c:75:c7:32:2e:6d:d1:a9:82:28:6b:26:a2:58:9d:
                    3e:92:d6:a3:f0:fe:19:dd:f8:26:6f:10:78:38:44:
                    68:51:ba:c0:0b:f4:2e:8f:c6:1d:d2:8c:54:e0:43:
                    cd:b7:d8:86:aa:df:56:56:76:ba:89:71:0a:b8:29:
                    5c:5b:06:2c:29:64:35:1f:e7:ea:6b:5a:d0:c0:31:
                    23:5b:6d:24:a4:07:51:87:b6:c6:60:12:52:21:ec:
                    f8:10:81:80:35:9c:36:75:08:a5:25:7e:7c:38:a4:
                    4b:be:e7:d6:e8:64:6d:c1:0f:85:ce:46:fd:9e:53:
                    e3:31:3b:57:5d:05:01:f8:15:c2:ef:7c:1a:ef:44:
                    37:7c:74:ce:32:b5:f0:40:09:5c:b5:05:9e:a5:07:
                    5a:e4:c4:fd:9f:50:a0:b1:68:d1:5d:e1:74:46:b1:
                    61:7a:bb:ae:4c:84:dd:37:0a:22:e8:6f:92:ea:a1:
                    86:39:ca:66:67:9c:bd:69:14:bb:02:1d:ca:0d:f0:
                    66:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:79:86:9C:D0:B5:A9:03:3C:67:44:74:AD:BD:D1:9F:8D:B9:8B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/3dc81cc0-b765-326f-8ed7-7ae65edd39e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:df:00:49:7f:63:82:5c:f2:36:9e:85:7a:88:bb:0b:4a:10:
         49:06:0f:c2:35:a5:eb:65:19:49:5b:5e:b4:f9:f0:ce:73:ef:
         c6:8c:91:ec:fd:52:bf:37:e4:dd:b0:16:5f:35:4e:7a:64:79:
         70:f3:c0:a9:cb:cd:b0:5b:2a:8a:bc:96:f9:20:db:8d:1d:26:
         9f:ef:42:a6:bf:c0:d6:6a:30:85:f3:12:ae:b5:a5:d3:98:3e:
         fd:2a:c6:03:25:2a:26:cc:6c:08:9c:c6:44:b1:ee:f3:8e:b9:
         ad:53:6c:3a:59:c8:8a:ce:51:69:7c:aa:bd:86:08:4c:f7:a3:
         25:28:97:ac:8e:0a:b7:11:0f:37:6c:de:ff:cd:fb:79:5b:20:
         bd:de:bd:e0:f2:44:77:f8:95:12:43:19:7e:81:23:33:19:a0:
         9a:2d:73:34:40:aa:3e:42:36:2a:3c:32:87:6f:2f:8d:da:e2:
         64:9e:de:84:09:4f:1e:42:37:58:3f:ec:d7:4b:05:0c:b7:71:
         50:44:b6:8b:9f:9c:4a:c1:82:05:3a:ad:f0:8f:98:f6:96:73:
         2c:bc:9c:41:63:1b:86:e8:da:57:1f:2f:62:34:14:23:37:60:
         a2:ff:e1:f8:ec:95:89:43:62:ea:d8:e7:e3:b8:42:5e:81:c1:
         71:0c:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:29 2024 by rpki-client on console-ams.rpki-client.org