Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5640063b-8b04-39c6-a332-34c9ed577447.roa
File:                     5640063b-8b04-39c6-a332-34c9ed577447.roa (raw, json)
Hash identifier:          fHsvb5Xy5CQIFX0TwijojNkLMgzKjzVXY2QfBbHQGpk=
Subject key identifier:   6B:A3:A6:87:DB:4E:A0:FE:14:A8:16:6C:EC:98:9E:29:57:74:BD:7F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FEB08A
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5640063b-8b04-39c6-a332-34c9ed577447.roa
Signing time:             Sun 21 Jun 2020 17:48:12 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Tue 19 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:fe:b0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Mar 19 04:00:00 2030 GMT
        Subject: CN=15dd1a9b-a062-4946-9b33-20e58397cce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f5:b8:1d:d1:19:10:b0:58:14:8b:94:fa:9a:
                    e0:1d:35:4e:53:05:ce:2f:bc:71:c2:b9:f8:50:7c:
                    e5:22:7f:2a:89:c4:b9:82:21:ec:24:39:0d:f5:cf:
                    46:b3:3e:4b:8d:78:81:1b:80:e1:24:c1:ef:72:64:
                    38:bb:76:2a:4d:d0:e2:00:b0:c1:19:cf:fa:35:e1:
                    c3:d5:2f:2b:63:63:ff:97:f6:b3:78:d7:a3:20:ba:
                    98:dc:9a:37:25:ae:6b:88:19:ae:e0:80:0f:ac:31:
                    98:30:f9:cd:2f:36:9e:5e:be:1e:b5:f8:fe:d5:d4:
                    78:0a:c5:34:24:c7:54:d0:02:ba:af:09:c2:4f:a2:
                    14:5e:25:f1:9b:85:71:83:2a:20:f6:06:ca:21:51:
                    52:83:5a:62:58:3a:c4:51:f1:f2:e5:da:97:d6:0c:
                    11:b3:32:d6:a4:61:23:3f:48:ac:ed:38:fc:d3:06:
                    49:dc:8a:d9:94:7d:af:2a:61:9c:54:da:6f:39:e5:
                    a2:32:bd:05:bc:77:d7:48:3f:2e:9d:c0:5c:e7:6b:
                    2f:e8:f3:0c:7e:09:6c:84:7c:a2:81:94:38:a2:1c:
                    ff:7a:0c:dc:0a:72:d5:d7:9a:af:ab:d3:f7:b2:b2:
                    50:bd:33:a3:ae:00:21:d2:ac:69:64:45:19:cf:d6:
                    0f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A3:A6:87:DB:4E:A0:FE:14:A8:16:6C:EC:98:9E:29:57:74:BD:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5640063b-8b04-39c6-a332-34c9ed577447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5b:c5:f1:cf:99:0b:38:9f:3b:28:f2:37:d4:83:2b:db:8d:
         4c:0a:cd:8a:43:00:59:f9:06:7e:8a:b4:b2:fe:9a:29:db:07:
         8e:d3:45:40:66:80:6d:78:2f:4d:60:2d:04:60:ad:cd:1b:29:
         93:06:32:ae:6d:c1:09:1d:ca:35:62:2b:70:b5:c3:a7:39:9a:
         f5:b8:b7:5b:14:3c:a0:79:3c:8b:44:ff:3d:83:90:d1:c2:88:
         29:e2:68:1a:99:01:8f:c0:3b:2c:b3:3f:2d:4c:e9:6d:c8:a5:
         0c:c5:a0:be:78:14:8a:7e:93:2e:35:54:7c:0c:aa:6e:07:82:
         b8:df:3c:8b:d7:e5:06:cb:d5:ee:a9:61:0e:44:81:33:b5:70:
         12:43:cd:fa:bd:7a:ed:47:e8:cc:6b:43:8c:ad:e8:85:f4:dd:
         ee:54:95:a2:81:c7:93:27:6a:b1:22:e4:24:c4:fe:ff:2c:9e:
         bc:7f:fe:6b:f1:af:46:1b:02:d0:a0:7f:c9:d9:de:7a:e8:c9:
         78:2d:18:27:09:4f:97:5a:73:3d:de:0f:42:cb:a7:7a:e9:10:
         61:e4:35:26:72:dc:36:6d:a1:9b:da:86:8a:d4:09:29:39:2f:
         38:44:d3:55:0f:2f:b9:15:33:18:07:e0:88:c5:29:3e:e3:d8:
         ef:85:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:10 2024 by rpki-client on console-ams.rpki-client.org