Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e1c6c9c-3e15-3f3e-bf77-fb1d76fbd71c.roa
File:                     9e1c6c9c-3e15-3f3e-bf77-fb1d76fbd71c.roa (raw, json)
Hash identifier:          DzzGMOhIZrLByty3A/Lva2Bbf2mLQml32xoxr61c4T0=
Subject key identifier:   93:21:0A:49:D0:67:55:8D:60:6E:DA:93:2C:76:12:5B:83:93:62:EE
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D2CD58FD
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e1c6c9c-3e15-3f3e-bf77-fb1d76fbd71c.roa
Signing time:             Sat 20 Jun 2020 17:36:12 +0000
ROA not before:           Sat 20 Jun 2020 04:00:00 +0000
ROA not after:            Wed 13 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        65.54.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d2:cd:58:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 20 04:00:00 2020 GMT
            Not After : Mar 13 04:00:00 2030 GMT
        Subject: CN=3bbde1ed-6d41-441b-8d03-dc75a39d780d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:20:71:64:30:4a:dc:8d:4f:98:78:3e:5b:
                    ab:70:f7:df:8c:ae:81:9d:ef:7e:f2:41:b4:80:ca:
                    61:2e:73:01:a0:8a:8d:62:33:c9:3a:19:40:fa:14:
                    a0:11:0e:87:92:44:f2:8b:a0:7c:9b:38:7e:3a:b0:
                    e9:11:41:7b:a3:8d:12:df:18:a6:42:1b:4c:aa:97:
                    3d:67:d8:55:d2:93:9d:9e:4d:70:18:80:d3:85:b9:
                    5e:7b:96:6b:f0:43:92:09:2d:52:5e:ec:5f:4e:cb:
                    9f:4f:62:64:64:b3:43:e3:ad:e5:29:07:19:4d:79:
                    ba:55:e4:2f:70:59:45:6f:fd:58:e3:66:50:bb:e3:
                    d8:ec:65:02:16:5b:97:61:03:ce:10:c6:56:b6:50:
                    4b:fc:db:e8:f4:da:fb:77:27:d0:51:ed:33:11:10:
                    52:be:90:45:eb:30:b1:32:ab:d6:9d:e2:ce:1f:33:
                    85:52:df:a4:28:3b:fc:63:97:6e:c9:8e:37:cf:8c:
                    86:25:15:7b:d7:b3:84:9a:d5:c5:95:e8:03:a4:64:
                    f8:d7:5c:84:2b:82:ad:ae:56:16:26:cb:ad:03:a9:
                    ff:1b:00:4f:71:97:09:7d:88:7d:bc:07:8b:8c:f5:
                    36:a2:6f:c3:50:b6:d1:bc:c6:f8:71:9b:a3:f0:30:
                    b8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:21:0A:49:D0:67:55:8D:60:6E:DA:93:2C:76:12:5B:83:93:62:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e1c6c9c-3e15-3f3e-bf77-fb1d76fbd71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.54.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:b2:c8:c1:34:32:47:b4:a5:4f:5b:c5:0a:ef:9c:9b:b9:
         85:e7:a7:52:dc:3e:b0:22:4e:ae:1d:98:f4:ec:64:66:70:2c:
         18:8e:3f:a3:06:3c:ec:d4:51:0a:7f:af:33:f9:22:f5:d0:e9:
         0e:0d:d2:1e:17:38:42:01:ba:b2:7f:98:9e:7a:aa:51:36:a1:
         d9:60:fc:6b:3e:57:9a:87:77:da:6f:f0:38:f1:f8:c6:a5:62:
         ca:27:e7:c5:76:d8:ff:3e:8c:e1:2b:ed:6c:e0:7f:e2:77:b4:
         de:1f:70:b5:8a:7a:3e:b9:25:7f:98:b0:7b:ad:1a:c2:7a:bf:
         9e:7d:39:ac:ee:c2:e3:f3:b8:4e:56:0a:d6:19:82:7d:8f:96:
         c1:33:21:04:71:ac:86:25:75:79:c6:fb:74:0b:dc:ed:62:46:
         a3:69:86:73:8e:e5:4d:b6:76:f9:02:fc:3e:7c:1a:20:f7:72:
         3c:e7:a3:03:f8:6e:e5:4d:d0:50:01:5b:0f:22:4c:c8:ff:80:
         b3:13:5d:aa:cd:8c:9a:cb:d1:22:52:b0:51:46:dc:52:45:d8:
         38:6d:c8:0a:62:4f:da:3a:82:e5:d7:69:57:30:db:ee:c1:87:
         51:ac:62:e4:1d:3e:54:38:70:b9:22:a2:aa:e7:4a:d4:03:70:
         e3:93:f4:2e
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BctLNWP0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA2MjAwNDAwMDBaFw0zMDAzMTMwNDAwMDBaMC8xLTArBgNVBAMTJDNi
YmRlMWVkLTZkNDEtNDQxYi04ZDAzLWRjNzVhMzlkNzgwZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM0mIHFkMErcjU+YeD5bq3D334yugZ3vfvJBtIDK
YS5zAaCKjWIzyToZQPoUoBEOh5JE8ougfJs4fjqw6RFBe6ONEt8YpkIbTKqXPWfY
VdKTnZ5NcBiA04W5XnuWa/BDkgktUl7sX07Ln09iZGSzQ+Ot5SkHGU15ulXkL3BZ
RW/9WONmULvj2OxlAhZbl2EDzhDGVrZQS/zb6PTa+3cn0FHtMxEQUr6QReswsTKr
1p3izh8zhVLfpCg7/GOXbsmON8+MhiUVe9ezhJrVxZXoA6Rk+NdchCuCra5WFibL
rQOp/xsAT3GXCX2IfbwHi4z1NqJvw1C20bzG+HGbo/AwuIcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSTIQpJ0GdVjWBu2pMsdhJbg5Ni7jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzllMWM2YzljLTNlMTUtM2Yz
ZS1iZjc3LWZiMWQ3NmZiZDcxYy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEE21zBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAjFmyyME0Mke0pU9bxQrvnJu5heenUtw+sCJOrh2Y9OxkZnAsGI4/owY87NRR
Cn+vM/ki9dDpDg3SHhc4QgG6sn+YnnqqUTah2WD8az5Xmod32m/wOPH4xqViyifn
xXbY/z6M4SvtbOB/4ne03h9wtYp6Prklf5iwe60awnq/nn05rO7C4/O4TlYK1hmC
fY+WwTMhBHGshiV1ecb7dAvc7WJGo2mGc47lTbZ2+QL8PnwaIPdyPOejA/hu5U3Q
UAFbDyJMyP+AsxNdqs2MmsvRIlKwUUbcUkXYOG3ICmJP2jqC5ddpVzDb7sGHUaxi
5B0+VDhwuSKiqudK1ANw45P0Lg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:10 2024 by rpki-client on console-ams.rpki-client.org