Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3885a00c-4d47-3ee0-ad44-df507b631e51.roa
File:                     3885a00c-4d47-3ee0-ad44-df507b631e51.roa (raw, json)
Hash identifier:          HVlhXm2mxCLepg5Viethcyn2Ko4Ppweh3MqJ8agu+U4=
Subject key identifier:   CA:15:52:21:EA:3F:25:AE:DF:09:41:2F:87:27:80:8C:F9:80:BF:FD
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D3E4805F
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3885a00c-4d47-3ee0-ad44-df507b631e51.roa
Signing time:             Sat 20 Jun 2020 22:41:07 +0000
ROA not before:           Sat 20 Jun 2020 04:00:00 +0000
ROA not after:            Sun 24 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d3:e4:80:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 20 04:00:00 2020 GMT
            Not After : Mar 24 04:00:00 2030 GMT
        Subject: CN=2513f29a-2522-41ba-9aa6-e12b95bdb425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:c1:ce:87:b1:6b:86:b1:79:de:71:bf:97:
                    6d:83:05:fa:f3:4b:67:19:e5:05:54:0f:b8:a9:27:
                    61:90:34:22:75:98:16:b1:fd:8e:82:71:a7:15:ed:
                    14:a3:ab:cc:23:89:7b:49:b7:a7:85:e7:2d:8f:62:
                    b8:c1:c2:79:37:65:d8:21:6a:dc:27:59:8a:87:72:
                    cc:29:c3:08:51:e1:98:2e:15:a9:1b:30:20:e5:09:
                    f0:a4:03:1d:b2:ea:3f:56:2c:00:85:86:9f:58:ab:
                    cd:b3:47:93:18:f9:f6:5a:68:cb:9f:ae:88:90:f5:
                    ea:9e:0e:34:6d:55:05:83:69:db:60:28:1e:29:f4:
                    59:c5:35:68:1c:9a:c6:b5:d7:dd:72:d5:1e:3e:96:
                    f5:65:b2:d2:c3:96:a7:8b:1b:26:b7:93:90:f9:7b:
                    5f:c9:f3:c0:14:b7:c4:ed:9a:8a:cb:b1:ed:d0:e9:
                    e2:e4:ea:94:d9:05:98:be:0f:62:66:61:f7:45:4e:
                    3e:d4:57:87:2a:f5:09:4d:3e:02:74:f9:70:e8:ae:
                    2a:87:09:e2:44:a6:71:37:bd:13:fb:a1:95:a6:cf:
                    4a:6d:f8:8b:94:23:64:e9:82:a2:f6:4e:af:db:6e:
                    60:f2:45:0b:a5:c0:2c:84:61:e5:16:33:8c:fd:91:
                    71:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:15:52:21:EA:3F:25:AE:DF:09:41:2F:87:27:80:8C:F9:80:BF:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3885a00c-4d47-3ee0-ad44-df507b631e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:38:0d:a6:09:b6:a6:72:db:ae:e7:79:c7:a1:1c:3e:fc:f7:
         f0:48:a7:13:ee:2a:de:99:69:1a:da:fb:fe:e1:e0:a2:80:82:
         fb:54:38:6d:65:92:d4:71:8a:1a:a2:1b:fb:f2:ae:d6:ee:9e:
         12:9d:c9:04:69:78:8e:39:41:00:be:55:fe:c8:b8:c9:76:43:
         46:ab:a1:fc:56:e6:82:2b:fe:6f:54:b0:2f:98:62:11:14:7e:
         22:d2:e2:99:50:c2:ee:07:1e:18:4a:3e:42:72:e8:41:36:82:
         4b:5b:46:b1:2e:31:80:c3:05:a8:9f:67:dd:49:07:9d:23:fd:
         22:65:4d:c9:8f:6a:24:8f:95:5e:59:d0:74:78:24:61:ab:e5:
         f8:da:d4:f1:01:b9:4f:1c:65:c5:35:83:78:8a:7c:10:89:58:
         ae:64:db:7b:5b:6d:78:12:36:ea:cc:c6:ff:4b:f8:2b:95:07:
         84:b7:8d:69:22:cc:9e:80:55:0b:60:ad:01:7f:ae:16:c0:69:
         da:34:ef:f7:a1:6f:1d:3a:1b:4d:98:ba:53:d8:25:16:37:c1:
         ec:e2:7d:d7:12:a1:a4:57:00:46:13:3a:6a:f6:28:f5:2b:5e:
         b5:d4:6d:dd:b9:0d:43:d0:93:f5:f3:29:13:51:cb:40:86:ed:
         8e:37:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:32 2024 by rpki-client on console-fra.rpki-client.org