Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8f4f3b60-faae-3f95-b1c3-68921a689058.roa
File:                     8f4f3b60-faae-3f95-b1c3-68921a689058.roa (raw, json)
Hash identifier:          ERakmJLVSxb1iY5goU2XFU6X+RJFEva6JZ5GoICep5s=
Subject key identifier:   E1:04:0A:B1:F5:6D:F7:08:92:22:EE:C8:58:59:16:47:B4:D8:64:BD
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FE7BC1
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8f4f3b60-faae-3f95-b1c3-68921a689058.roa
Signing time:             Sun 21 Jun 2020 17:47:58 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Fri 05 Apr 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:fe:7b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Apr  5 04:00:00 2030 GMT
        Subject: CN=1a2ff1d9-31e4-4eff-a8b3-b80f129d599a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3d:6c:74:c1:b1:22:4f:46:72:10:90:bc:0e:
                    f4:7f:3e:8d:60:a9:11:2e:55:37:b1:f9:39:8f:d9:
                    fb:f4:9b:50:47:c8:45:99:d4:76:7c:c5:23:81:de:
                    8b:3d:11:0d:a5:01:72:b1:44:53:31:79:f2:c1:54:
                    49:f4:51:38:40:cf:91:34:e2:43:26:ea:1a:e4:07:
                    2d:f8:8b:d1:60:f1:a0:79:5f:a4:0b:22:2a:81:71:
                    fa:39:42:73:11:69:96:4e:3a:f4:a0:23:8a:b5:e7:
                    47:1c:18:57:99:1f:39:dd:31:00:88:07:81:56:7f:
                    c9:ef:b9:2b:0e:66:11:c9:a5:11:9d:3c:d5:98:80:
                    f8:b3:0b:9f:23:e9:3c:66:e2:d2:73:2f:29:1c:80:
                    d4:24:15:a3:f6:7b:45:84:26:09:ae:4d:81:c1:01:
                    22:a1:cb:07:09:52:e4:2d:b6:dd:6c:f7:63:d0:e8:
                    c1:05:1b:46:01:3d:2a:6e:38:0a:a6:b8:8d:9b:87:
                    e0:94:ae:b0:ad:ac:b5:f5:64:3c:4c:a1:31:91:74:
                    8c:e9:47:72:6f:16:e6:d6:5d:3f:f5:1e:3a:82:41:
                    2b:a1:1d:3c:b2:c5:88:6d:80:71:66:8b:e8:aa:e9:
                    d5:d1:f3:f3:61:a1:a9:93:dd:bd:3d:82:04:eb:a7:
                    dc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:04:0A:B1:F5:6D:F7:08:92:22:EE:C8:58:59:16:47:B4:D8:64:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8f4f3b60-faae-3f95-b1c3-68921a689058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6e:2a:71:a6:3d:63:11:3e:2d:50:cf:01:22:37:cc:a6:8e:
         8e:18:11:00:d8:b0:2f:3d:1b:e9:09:87:22:ef:7e:ea:be:c3:
         af:a3:5d:82:78:da:6c:5f:d3:21:39:9c:22:22:36:8e:ec:4d:
         c1:6e:5b:31:11:4f:de:04:63:96:2b:15:5e:61:c1:2f:9e:42:
         53:f1:24:db:50:ff:95:c1:f1:62:97:8f:67:95:d5:a0:e4:d0:
         c7:d6:c4:4e:6b:70:44:8e:32:21:53:5f:f2:da:23:31:6e:4c:
         d4:ac:6e:5e:68:f7:5b:72:b2:54:eb:58:32:1b:f3:91:88:45:
         a4:6e:de:48:4e:9f:78:b5:5f:b2:df:c2:0d:87:fe:22:e6:9a:
         8a:31:d7:41:a2:1e:60:7b:48:70:fb:ee:b6:d3:b2:c8:7a:dc:
         c3:0f:1b:40:dd:18:40:20:7f:e9:95:2c:58:32:ad:fb:df:fb:
         ad:07:be:cb:12:03:5d:a4:40:6b:87:3e:84:d7:b3:5e:8b:79:
         c7:eb:23:79:d7:f1:87:cd:d8:71:ad:65:7d:0b:b9:d0:fd:5d:
         1d:f1:73:2e:7d:f7:66:8f:9a:72:55:b9:5e:8c:f1:93:61:10:
         02:54:ec:22:74:8b:1c:10:ed:fe:a2:0d:0a:3f:87:c5:8e:04:
         94:17:ef:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:10 2024 by rpki-client on console-ams.rpki-client.org