Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/cd1de1f0-bfee-34ef-8928-7c7400e0794b.roa
File:                     cd1de1f0-bfee-34ef-8928-7c7400e0794b.roa (raw, json)
Hash identifier:          28GvY+n9+Jhzuy7QG5IJKMLOjZIgG2P68bljaQ3TqLg=
Subject key identifier:   F8:3B:DF:FB:3D:CE:6F:AD:2B:0B:6D:29:AE:4D:D3:9B:19:92:A7:27
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1734E32B08F
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/cd1de1f0-bfee-34ef-8928-7c7400e0794b.roa
Signing time:             Tue 14 Jul 2020 16:40:11 +0000
ROA not before:           Tue 14 Jul 2020 04:00:00 +0000
ROA not after:            Thu 23 May 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        131.253.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:32:b0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Jul 14 04:00:00 2020 GMT
            Not After : May 23 04:00:00 2030 GMT
        Subject: CN=958bad6a-a826-49d4-9470-c3263243f482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:36:32:1d:de:cb:02:0f:ad:d4:e0:4d:57:
                    22:57:de:ea:4a:68:ba:0f:8a:b5:cc:7b:c9:89:7c:
                    76:a3:4b:0e:8f:b5:25:d4:f1:45:73:26:33:b9:b5:
                    24:52:29:b5:50:ce:82:b1:4c:49:24:64:84:00:1e:
                    60:a8:ca:22:ef:6f:ff:8e:dc:0d:ad:6c:7b:00:ec:
                    0e:32:ec:f9:1f:b8:17:06:ae:93:bf:e2:8d:34:6d:
                    b9:be:35:bc:c2:15:be:9d:8e:b0:f4:20:f3:d4:da:
                    a5:85:bb:2b:eb:c4:ef:3b:a8:46:4c:75:52:bd:5b:
                    d9:7b:09:d2:2a:c2:a2:e6:21:a9:99:58:08:9e:f6:
                    28:5e:a7:30:ad:21:cd:c9:69:d2:da:f9:97:6d:09:
                    25:6b:39:1d:fc:13:69:d2:c0:95:a5:80:29:6b:89:
                    1a:37:7d:8e:d5:d2:1f:ad:2f:e8:38:56:d3:8e:86:
                    7c:ae:14:45:3b:06:0a:40:a1:ab:46:bd:2e:e9:82:
                    02:19:a8:34:6c:71:63:46:f6:22:2b:cd:db:c3:19:
                    f2:f8:1c:27:8c:e9:c8:43:cc:19:94:b1:5b:8d:d4:
                    df:83:2f:2a:fc:8d:34:c1:8c:c7:db:7a:fd:90:4b:
                    58:da:07:b8:75:1c:03:bc:57:8f:0d:a4:19:e7:90:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3B:DF:FB:3D:CE:6F:AD:2B:0B:6D:29:AE:4D:D3:9B:19:92:A7:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/cd1de1f0-bfee-34ef-8928-7c7400e0794b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.253.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:87:5f:fb:33:26:45:3d:af:e1:5f:78:5c:ff:e0:0d:c5:28:
         85:94:de:7d:c8:72:b1:6d:d1:71:37:3b:57:88:30:c2:ba:35:
         ad:d7:e5:41:c3:51:cf:07:e3:6d:4b:90:ee:c9:69:ea:c7:73:
         73:d9:32:cc:49:72:03:ac:b2:ba:42:5f:2c:17:12:47:d7:ca:
         72:3b:53:b7:dd:0f:a5:76:dc:01:7c:c9:65:ac:5e:e2:f4:cb:
         c6:b4:cb:53:55:93:8b:de:84:3c:e1:65:d0:40:28:12:90:c0:
         2c:40:95:36:73:1e:bf:7d:85:77:a8:f1:fb:07:b1:84:b1:1f:
         42:7c:1e:39:1e:a5:9d:b9:57:13:2d:5b:ce:00:f3:96:00:68:
         65:92:b2:a3:7c:7b:ce:16:e0:4c:b9:a4:70:aa:8c:e9:81:f0:
         98:03:12:67:26:b6:ab:2e:ff:1c:ad:ea:ce:38:43:b3:29:07:
         fb:c4:c5:a2:dc:37:25:28:98:90:eb:8f:38:10:75:d6:51:11:
         42:bb:a0:46:9e:d4:51:e7:17:bd:36:37:fe:49:18:0e:07:a8:
         1d:6e:95:1f:c1:d6:50:1f:ff:5d:d5:af:f9:b6:08:d9:a4:c2:
         1c:b7:7d:f5:61:23:a0:cb:bf:e7:58:5f:37:0e:7a:5c:93:11:
         3d:18:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:29 2024 by rpki-client on console-ams.rpki-client.org