Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ceebff7-78e3-3500-a17e-ca5812b142eb.roa
File:                     0ceebff7-78e3-3500-a17e-ca5812b142eb.roa (raw, json)
Hash identifier:          t3p00Em1J05Mp8vrQRuda0FxYp8N/fnkbk0MENAGZes=
Subject key identifier:   6F:F0:17:1D:8B:DD:F8:DD:FB:70:84:C9:2D:4C:3E:AB:D5:77:54:D4
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17329CBEB2F
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ceebff7-78e3-3500-a17e-ca5812b142eb.roa
Signing time:             Tue 07 Jul 2020 15:01:36 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Thu 04 Apr 2030 04:00:00 +0000
asID:                     8070
IP address blocks:        204.13.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:29:cb:eb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Apr  4 04:00:00 2030 GMT
        Subject: CN=e130992d-3801-424f-8c84-f0e33857cc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:28:3c:17:de:1a:40:15:3d:bf:0c:2a:1d:
                    10:b5:41:46:81:5b:67:7d:cc:7b:5e:83:78:b8:9b:
                    b4:64:df:60:9e:5e:ee:5a:3a:a4:84:ef:73:2d:92:
                    a0:14:3b:46:97:5e:64:59:48:19:10:a7:5c:e3:46:
                    4a:c2:44:19:58:f0:a8:69:6f:95:5a:de:d1:78:65:
                    e6:4a:a6:a3:ab:0f:8e:0d:6d:4d:ea:c7:82:75:74:
                    66:ee:19:b5:78:d1:7a:d0:6d:30:ac:02:49:4d:59:
                    5c:fb:32:5f:de:ef:f5:e2:0a:4a:bb:de:ae:7b:b1:
                    06:8c:53:62:5d:fe:c7:b4:3a:ea:b8:80:cd:79:8c:
                    65:4e:95:12:7e:dc:28:16:a2:c2:6c:e0:7b:b7:ec:
                    bd:b7:9f:23:43:da:ab:71:d2:18:e2:12:21:64:5a:
                    0f:26:51:21:22:df:a1:95:ab:5c:f9:a8:28:19:aa:
                    e5:d8:d2:cc:df:33:a7:6b:bc:e7:21:f7:89:f4:30:
                    59:dd:b4:45:14:22:7e:6b:b6:38:fa:15:72:a9:2b:
                    f3:fa:d4:f9:1f:4e:3e:d4:63:24:13:62:64:a6:5b:
                    f6:08:81:cd:f7:22:5e:ea:9c:7e:fc:3c:25:23:6c:
                    dc:f8:2d:48:f1:56:c0:3a:d7:e4:3e:3b:19:a1:4c:
                    c7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F0:17:1D:8B:DD:F8:DD:FB:70:84:C9:2D:4C:3E:AB:D5:77:54:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ceebff7-78e3-3500-a17e-ca5812b142eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:20:13:0c:8a:78:35:ff:39:04:d5:3e:18:5d:75:bf:bf:0a:
         6e:5f:38:be:22:cc:76:80:29:9b:c7:2e:8b:6e:b0:24:da:6c:
         51:5d:10:76:14:17:20:31:4c:b6:02:0f:41:ab:4d:f6:13:b2:
         e4:07:83:27:bc:a3:c1:26:d8:03:b1:3c:9f:fb:56:ab:1d:ed:
         ed:20:9a:1e:81:e0:51:6d:61:48:1c:7f:76:46:e5:7e:24:24:
         72:a8:f6:fd:d7:b7:e5:db:e0:84:33:2b:ee:2e:f9:28:92:16:
         b2:1c:b4:12:82:6c:04:fa:ca:bb:d0:e3:a9:e7:7f:9f:22:60:
         35:85:65:b0:59:23:07:38:d4:08:a6:56:86:10:44:66:be:2f:
         d4:bc:b7:13:3c:7f:63:5a:32:39:a3:4a:bf:d3:d3:09:7b:85:
         db:e4:1d:8c:4a:cb:8c:42:97:42:93:5b:9e:9c:12:8d:ae:42:
         f6:04:f8:9e:9a:03:e0:87:52:06:4e:b8:98:ac:b3:3b:73:21:
         64:83:cb:c5:47:05:17:cb:41:1c:6e:87:00:02:d2:f6:86:ef:
         90:a7:f7:c7:95:54:60:0d:07:bb:fb:49:c3:e5:69:60:50:a3:
         cd:4a:dc:8f:06:ca:ac:4d:44:51:d9:85:45:2d:48:16:1c:eb:
         6f:5d:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:32 2024 by rpki-client on console-fra.rpki-client.org