Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/746f8991-e465-3b41-808f-e5b1d0de37bf.roa
File:                     746f8991-e465-3b41-808f-e5b1d0de37bf.roa (raw, json)
Hash identifier:          ib2V4XiEWY23F0QtJmAN6OrP4/JOnNF6evz5yTW4A3Y=
Subject key identifier:   89:3F:C6:18:48:C3:75:D0:B0:EE:E1:A4:EA:C4:DB:EA:D6:5A:86:E4
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FED98B
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/746f8991-e465-3b41-808f-e5b1d0de37bf.roa
Signing time:             Sun 21 Jun 2020 17:48:22 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Wed 13 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:fe:d9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Mar 13 04:00:00 2030 GMT
        Subject: CN=9f756d0a-c765-46d4-870a-e72e6f3d4594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:ab:73:0b:dc:11:b1:0f:97:5c:a0:d3:d9:
                    8b:31:8d:63:b8:2b:5f:3b:7b:3b:17:c5:55:85:0e:
                    54:d3:6f:ab:05:f0:43:ac:fe:82:39:91:97:b7:7b:
                    7b:74:73:cf:ea:50:78:d7:d7:b7:c6:1b:91:70:57:
                    4a:88:8a:d0:c7:e1:bc:32:bc:8b:df:0c:f2:dc:96:
                    51:0a:f6:48:1d:8a:b8:7f:b2:fb:b2:6d:d9:49:ec:
                    53:70:6c:54:fe:1b:fa:f1:7e:c8:92:71:e2:6d:e9:
                    d5:90:cf:1f:3d:7f:9c:b1:e4:07:9b:f8:54:6e:d8:
                    46:2a:5b:74:55:15:73:86:36:33:dc:3c:95:39:10:
                    87:2c:e5:34:b2:df:36:28:57:4e:4c:54:86:aa:26:
                    bb:50:04:88:af:1f:65:9d:7e:89:c9:7b:13:b4:e9:
                    7d:18:07:59:a6:d7:01:2b:87:dd:25:ec:e7:65:2c:
                    12:76:9b:44:27:a4:f1:28:22:09:07:40:6d:d1:94:
                    f8:d9:fc:4b:06:4d:b9:1c:19:e8:36:92:3a:58:46:
                    65:0c:0b:31:3f:01:bc:22:ef:60:7d:0d:eb:2a:68:
                    a1:d6:9f:e0:99:36:1a:33:ff:07:ed:d8:c6:e7:f1:
                    74:92:99:d6:dc:35:66:a2:b3:52:cd:e9:7e:55:6a:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3F:C6:18:48:C3:75:D0:B0:EE:E1:A4:EA:C4:DB:EA:D6:5A:86:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/746f8991-e465-3b41-808f-e5b1d0de37bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a7:dd:78:6d:b7:98:63:55:cc:ce:fb:fd:97:c0:ae:83:8b:
         e5:9e:e7:99:97:07:78:bc:34:4a:4e:b2:63:0a:74:a8:20:d5:
         f5:74:ec:57:c2:68:f5:32:db:18:eb:ed:24:6a:a1:cb:9a:8b:
         5d:69:0b:72:17:90:38:61:46:d2:fb:4a:6d:99:73:8d:94:09:
         77:a9:49:ac:0b:ab:14:d9:52:29:7d:ea:5a:03:40:7b:06:13:
         a8:c6:46:70:7c:a1:50:1e:e3:68:13:8b:01:a2:ca:29:f3:aa:
         37:0a:b2:c6:32:af:f7:b6:0c:3d:ae:36:83:4f:53:0e:71:c2:
         d5:26:1d:09:a0:00:ab:9d:ea:ce:38:cb:e0:07:73:9d:1f:06:
         5c:0e:b5:09:71:f0:5f:c6:06:fc:88:00:14:4e:c2:8e:6d:99:
         02:50:b5:0a:04:20:5a:4f:33:2d:c0:df:a8:8c:55:a5:57:76:
         7f:8e:43:de:f0:1d:26:a8:57:e4:a4:5e:36:e4:42:65:0a:1d:
         08:c7:3a:01:cd:90:93:14:bc:14:5f:9b:f8:a2:59:13:5a:42:
         3e:f2:19:d7:8d:39:3c:9a:68:a7:02:de:57:e5:43:67:85:75:
         f7:08:56:8c:f7:26:6b:ba:89:6b:7a:c5:6e:cc:9c:a7:e0:1c:
         23:24:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:10 2024 by rpki-client on console-ams.rpki-client.org