Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68a86fce-be9b-3283-b46e-a22a78eb377f.roa
File:                     68a86fce-be9b-3283-b46e-a22a78eb377f.roa (raw, json)
Hash identifier:          kLbOxcKpds7d1r4CIlZoTf7aGQLwzMi/wojQbanw4DY=
Subject key identifier:   C7:2B:9B:80:01:AB:1C:10:C2:72:D3:4E:92:C6:E8:13:71:77:85:C8
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D3E48D6A
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68a86fce-be9b-3283-b46e-a22a78eb377f.roa
Signing time:             Sat 20 Jun 2020 22:41:10 +0000
ROA not before:           Sat 20 Jun 2020 04:00:00 +0000
ROA not after:            Fri 12 Apr 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d3:e4:8d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 20 04:00:00 2020 GMT
            Not After : Apr 12 04:00:00 2030 GMT
        Subject: CN=f2e4903e-07b8-4a21-8341-fa769246545b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:bb:7c:c4:01:82:74:82:33:57:88:10:37:
                    89:b2:ec:48:45:3a:4c:91:64:a8:4e:59:c6:da:b9:
                    f7:d3:f1:46:5f:b9:36:8a:49:e1:fc:a7:15:25:b0:
                    ec:69:7d:3d:7f:f5:d2:20:73:dc:a8:12:cc:51:a8:
                    86:2f:0e:d8:9b:1e:3a:fd:65:bb:bf:21:59:0e:c1:
                    38:6f:f3:32:a1:27:d9:30:e0:c3:5f:9b:e1:83:8b:
                    42:ff:27:7b:b2:a8:6d:e7:16:5d:3b:67:dd:ba:1d:
                    2a:36:e4:41:22:3d:1a:22:1e:d9:fe:27:85:7a:05:
                    53:81:bb:cf:2a:15:d3:87:d0:a1:f5:5d:73:80:e8:
                    32:29:d3:f6:b9:5a:e3:e4:b8:db:89:44:0f:0e:fb:
                    c4:ff:26:a0:ae:f7:0c:bf:37:72:58:29:e0:74:55:
                    9e:5d:f7:eb:cc:d5:b1:81:5e:27:4b:d5:56:2a:61:
                    77:c3:e5:11:44:c5:61:6f:8d:6d:aa:51:fa:a7:32:
                    7a:eb:02:e1:02:31:6b:2b:84:28:01:2a:fb:77:63:
                    b5:d7:cd:0a:33:82:26:b5:7d:17:f6:84:61:a8:ec:
                    d7:c2:89:3c:c6:51:46:ef:7c:e8:05:98:cf:59:3c:
                    d7:30:40:bc:6f:95:8a:4f:9b:a9:b2:f4:8f:b8:27:
                    90:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2B:9B:80:01:AB:1C:10:C2:72:D3:4E:92:C6:E8:13:71:77:85:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68a86fce-be9b-3283-b46e-a22a78eb377f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:08:3f:51:22:d5:af:a7:1d:75:96:bf:3e:ca:5a:79:5b:d0:
         e4:d4:23:6e:37:29:ac:60:9b:ed:54:f3:b6:1c:be:79:fe:87:
         e3:93:1e:86:91:18:ad:8a:5e:a8:6d:65:18:c6:70:12:03:27:
         2c:0b:03:7b:c0:4c:ee:52:88:2c:ae:29:24:59:62:71:0a:ce:
         da:c7:dc:5b:50:44:9a:bf:9f:df:0b:39:51:cf:1b:01:16:e9:
         a5:32:c1:96:ef:6e:d6:65:fc:02:fe:8e:3f:71:45:80:46:b6:
         a2:f4:f5:ae:3c:0b:6a:c9:54:0e:6b:97:6d:07:44:b9:5a:3e:
         60:1c:84:b9:64:81:a5:68:a1:67:26:b0:e8:b8:ae:6b:aa:96:
         b6:1a:47:75:42:f6:ea:64:91:86:a8:ec:a5:84:c9:58:79:4c:
         ad:c0:3c:f4:83:8d:56:ef:93:a5:3e:6a:83:d5:a9:02:d1:a5:
         2f:c3:40:06:ca:39:be:bc:39:ca:f1:d8:a3:92:4e:6a:13:5d:
         0a:10:85:af:22:cc:bf:6b:81:13:61:9d:86:c7:69:99:f1:a3:
         5e:f2:3b:7b:00:19:84:9b:18:2f:6a:a6:fb:5e:eb:9d:35:e3:
         71:84:78:72:6c:94:f5:60:b9:b4:4d:9f:63:92:d5:fd:e7:9e:
         9b:a8:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org