Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/afe7951f-3eee-3510-b3e7-864b6506bda2.roa
File:                     afe7951f-3eee-3510-b3e7-864b6506bda2.roa (raw, json)
Hash identifier:          mSQF3i/KyOxtNOEepKi2bLbz+kkIsUF6haAiFNwOzx4=
Subject key identifier:   C7:60:D3:E5:CF:BD:0F:1E:68:C8:7D:40:F4:F2:46:42:27:16:3F:76
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1734E32DE4F
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/afe7951f-3eee-3510-b3e7-864b6506bda2.roa
Signing time:             Tue 14 Jul 2020 16:40:23 +0000
ROA not before:           Tue 14 Jul 2020 04:00:00 +0000
ROA not after:            Wed 08 May 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        131.253.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:32:de:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Jul 14 04:00:00 2020 GMT
            Not After : May  8 04:00:00 2030 GMT
        Subject: CN=3d7a03c5-44b4-465e-ace0-8686278c4dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:52:6a:48:d6:65:2f:8b:bc:c3:7e:41:0c:6f:
                    b4:3f:b0:61:3e:6c:c8:92:2f:69:bb:52:bd:bc:63:
                    35:90:7b:bf:ea:28:76:a1:0a:a8:8e:67:64:7c:48:
                    d8:78:e8:ce:94:19:cc:3e:57:65:07:7a:f7:94:cf:
                    33:66:ac:b0:95:a4:c5:6e:80:a5:d2:31:e9:9a:86:
                    4e:a3:70:64:e4:eb:3a:c0:01:d4:1c:88:85:be:78:
                    b9:9a:5c:96:b6:7a:ce:5c:09:80:49:70:68:3f:9a:
                    bf:c7:7b:01:23:25:85:be:1c:d2:9b:e5:bd:64:8f:
                    88:a5:c1:76:15:09:24:e8:f2:e9:24:0a:bd:ca:ce:
                    c5:89:e4:c5:aa:0d:89:f3:2d:c8:5e:ae:fd:9a:54:
                    ef:fd:b2:86:2c:0b:dd:2b:80:fe:91:0b:b9:2b:d3:
                    37:73:ed:98:f5:72:c6:1c:dc:6f:17:2e:6e:0e:7d:
                    5e:7d:0f:86:8b:92:f2:aa:5e:6d:7f:b7:09:62:67:
                    79:7f:3d:a6:27:9a:07:6c:e0:d7:69:e7:ce:0a:f2:
                    da:36:f0:7f:b1:d8:18:29:3f:ab:90:f1:b7:b0:c6:
                    19:46:ac:b5:d6:6c:9f:c5:60:0c:fa:ec:2e:81:b7:
                    e9:2c:ea:00:43:23:b8:56:c8:e8:bf:e0:16:6e:9d:
                    03:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:60:D3:E5:CF:BD:0F:1E:68:C8:7D:40:F4:F2:46:42:27:16:3F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/afe7951f-3eee-3510-b3e7-864b6506bda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.253.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:b5:ad:76:b0:dc:bc:12:16:65:21:8c:2b:b5:5f:07:1e:
         68:f6:7d:45:05:13:2f:35:38:10:28:f9:7f:46:d7:10:02:fa:
         fe:29:03:36:1d:c4:84:f6:74:e1:25:bf:ac:21:3f:30:38:3a:
         c3:0f:0c:dc:48:15:66:62:1a:19:86:aa:c5:21:9e:fc:72:a3:
         9b:a0:57:e4:77:d0:43:3b:a2:6a:3b:21:a2:6f:96:95:5e:b5:
         ac:79:24:ce:dd:a1:ce:2a:18:2b:73:3b:32:a5:ed:84:82:ea:
         83:5a:dd:44:a1:c7:ea:cb:bd:0b:b2:fa:57:3b:ff:53:d4:07:
         7e:4d:e2:da:2e:7b:ee:2e:73:bb:9a:4e:ae:41:d9:5c:25:ee:
         60:a5:86:c2:d6:b5:5e:81:f6:a6:ac:70:8c:b2:de:6c:e2:bb:
         68:3f:cc:91:8d:89:67:5e:d7:b5:92:ce:de:c7:b3:0d:c5:91:
         96:4a:17:57:27:92:e2:59:7e:16:54:1a:e1:e0:56:00:fb:63:
         63:16:11:44:05:bb:2c:6b:a7:06:69:83:be:7e:9b:bf:92:91:
         d5:64:72:73:a4:ff:56:6c:cb:d8:53:77:01:17:26:34:29:d6:
         bc:a8:48:7c:e9:81:dc:5f:7a:5c:e8:5e:be:d9:f2:c5:f5:fd:
         e9:9b:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:53 2024 by rpki-client on console-fra.rpki-client.org