Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/e76f8ce0-d779-397b-a1e8-b00badae865f.roa
File:                     e76f8ce0-d779-397b-a1e8-b00badae865f.roa (raw, json)
Hash identifier:          Py5Q8+JRdTajhqACyOUi7DgQyuMYTXEtV2sWP4MNWiA=
Subject key identifier:   51:B2:4D:83:92:81:FF:B0:F9:83:9F:A8:98:AD:C2:1F:8F:FB:07:18
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1734E2E3E68
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/e76f8ce0-d779-397b-a1e8-b00badae865f.roa
Signing time:             Tue 14 Jul 2020 16:35:20 +0000
ROA not before:           Tue 14 Jul 2020 04:00:00 +0000
ROA not after:            Mon 13 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        131.253.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:2e:3e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Jul 14 04:00:00 2020 GMT
            Not After : May 13 04:00:00 2030 GMT
        Subject: CN=27464f1f-0614-4c78-a8e3-bb892c02699d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:9b:67:84:24:f1:30:7d:e1:c6:cc:9b:5d:
                    59:00:01:8c:38:1b:d9:30:d8:66:21:29:d3:77:b1:
                    68:b2:f9:58:b3:6b:a4:73:08:ba:eb:f1:7d:c7:f6:
                    34:da:75:64:96:2e:97:c4:f6:85:ba:97:3b:dc:e4:
                    a5:c3:37:ef:9c:7b:22:21:cc:01:38:bb:ba:8d:8e:
                    41:90:b2:56:e1:af:e9:45:26:4b:a8:14:39:7f:04:
                    d0:81:b7:d1:85:f1:72:cf:ed:a7:68:2d:d6:2a:8c:
                    d0:f5:b8:40:9e:da:83:58:92:8e:72:24:fc:5f:7c:
                    ce:6b:76:91:37:13:f5:e8:82:9c:30:fe:0f:bb:77:
                    56:c0:0b:a1:81:0d:25:69:5a:67:45:75:94:54:5f:
                    47:a2:9e:6d:b5:64:63:70:23:38:aa:c8:e8:a2:42:
                    ac:8b:e9:9a:d2:37:17:39:3c:54:27:5b:a7:fc:ec:
                    f4:07:7d:79:c7:c5:49:38:ab:e3:e9:0e:63:ef:d7:
                    29:6f:96:ba:ae:77:a5:be:d8:7e:f5:5a:cd:44:19:
                    3d:ac:6e:d1:2a:90:c3:76:8d:87:fb:76:57:b8:96:
                    c5:0b:ce:f8:f5:df:84:10:1a:f9:ea:ce:6b:06:06:
                    35:ad:ac:f6:12:18:d9:34:48:e5:8e:b5:93:f3:2f:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B2:4D:83:92:81:FF:B0:F9:83:9F:A8:98:AD:C2:1F:8F:FB:07:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/e76f8ce0-d779-397b-a1e8-b00badae865f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.253.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:34:cd:a2:a5:31:0f:e5:85:3c:4a:a3:07:33:41:30:d7:60:
         8d:2b:66:6a:28:38:e7:e9:94:77:83:7c:49:97:d9:20:d1:df:
         75:cd:61:d9:a6:49:30:d2:cc:0f:77:e8:1e:fa:8b:f5:c4:fe:
         b6:43:c4:3d:42:08:32:50:39:75:b3:9c:1e:b4:94:15:5f:19:
         de:dc:3b:8b:c8:9f:ce:89:c7:ad:4d:0a:80:76:0e:98:be:00:
         8f:3b:37:23:13:cc:04:e2:3a:d0:8d:21:c6:45:0b:64:96:fa:
         be:22:78:7d:f5:cd:c1:fc:b9:b4:ad:4b:44:1c:67:5e:3d:3c:
         ae:ad:32:f0:81:bb:50:2f:7f:db:5c:18:23:dc:b8:7c:58:c4:
         20:f9:2b:66:4a:56:eb:03:8e:e9:81:eb:16:44:42:a2:1d:8f:
         ae:56:78:f1:5c:73:60:12:b0:5a:60:f5:26:a6:cd:3f:53:46:
         6d:5e:b8:78:64:52:9b:a4:1b:dd:7a:80:85:1e:4c:40:19:f1:
         01:f9:fd:ad:2e:e0:6b:0c:62:0f:73:2c:22:88:1c:51:20:f3:
         41:03:c4:c5:0d:99:fd:e9:68:1e:c2:03:e6:f0:c6:79:63:d8:
         03:a7:17:0f:0a:f9:ca:0d:ec:8c:87:6e:0c:1b:11:6c:97:ab:
         df:04:f0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:53 2024 by rpki-client on console-fra.rpki-client.org