Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a39f88e5-67a7-3a2f-8da0-fd2af69b3332.roa
File:                     a39f88e5-67a7-3a2f-8da0-fd2af69b3332.roa (raw, json)
Hash identifier:          2jB9Xbt6jT2Iv4PVVZHLixqZIopdbDF+jNktcU+s2B8=
Subject key identifier:   1E:6D:D6:61:88:3A:FE:BA:25:5B:D9:AF:F1:2D:A8:37:56:2A:CE:FA
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FF426A
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a39f88e5-67a7-3a2f-8da0-fd2af69b3332.roa
Signing time:             Sun 21 Jun 2020 17:48:49 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Fri 05 Apr 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:ff:42:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Apr  5 04:00:00 2030 GMT
        Subject: CN=39a90901-4cb1-40e4-a41d-d4e643c33d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:e9:d4:0e:af:64:6d:22:d4:9c:76:46:8c:
                    5e:2f:be:23:67:db:dd:5f:35:02:89:9c:40:ed:d0:
                    27:ad:6f:c5:28:d0:70:1b:f7:47:e9:ce:b2:4c:2c:
                    33:fb:7e:77:32:42:0b:83:15:c5:03:95:ee:26:f2:
                    9d:a4:98:e8:30:00:cb:a0:1d:d8:91:c1:d9:55:b8:
                    28:cc:b7:ed:84:51:ec:37:36:12:d1:c0:0a:c4:9c:
                    0c:ee:fe:4d:d9:08:b6:e7:00:42:76:53:04:54:c7:
                    4c:ed:0c:04:96:71:be:42:1c:ad:7f:d7:c2:47:92:
                    3c:b6:5a:49:28:55:25:ba:9c:93:4d:a0:2f:fd:66:
                    03:97:e6:83:df:28:85:8c:3a:5b:fe:7c:b7:66:c8:
                    e7:f1:4a:af:28:0d:07:10:7c:10:0a:a6:6e:a7:ec:
                    3c:aa:ac:43:c2:9a:02:f4:08:94:79:ff:36:2a:21:
                    87:3c:33:2b:8e:b8:db:e0:17:61:a2:cd:c7:4a:1a:
                    4c:11:f5:54:99:36:b1:d0:91:01:2d:da:8f:b3:8a:
                    63:d4:22:21:e5:34:1f:ad:47:3e:6e:a3:fe:b8:8f:
                    11:70:6c:f5:d3:47:84:57:10:63:53:05:5c:94:db:
                    fb:c2:64:6d:2c:3f:74:9f:84:98:75:f8:7e:28:af:
                    ff:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6D:D6:61:88:3A:FE:BA:25:5B:D9:AF:F1:2D:A8:37:56:2A:CE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a39f88e5-67a7-3a2f-8da0-fd2af69b3332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:9f:f6:91:ad:c9:d2:54:ce:40:30:85:36:8f:2b:fe:9a:cc:
         2f:9d:08:c4:e3:ea:21:b6:65:ff:35:7e:17:29:c6:a2:98:d5:
         34:ab:5a:8e:21:ce:a7:92:c1:1a:7c:4d:88:72:6f:b5:fb:9e:
         08:ae:20:ed:95:c7:a4:f3:16:ec:9f:2d:b4:c5:b9:b8:7c:1f:
         77:36:10:44:ba:b0:ba:c7:39:2f:bf:7b:1d:ed:bc:7e:5f:70:
         f0:23:8b:4f:d2:57:a6:52:f9:2c:28:b7:58:13:ac:8d:b0:15:
         f6:77:60:75:78:bd:2f:32:c9:b9:0b:54:bc:ac:84:ca:93:81:
         26:ed:a7:49:57:56:aa:9b:dc:af:40:20:77:81:b2:41:e7:fa:
         a1:a5:f8:eb:08:30:0d:ea:f7:ec:90:83:79:db:7a:41:4f:36:
         c0:03:31:1f:14:29:23:05:d9:3e:ae:24:aa:f5:c9:8e:44:23:
         50:35:2c:6a:5c:18:39:2f:82:83:e2:7a:dc:76:41:cd:d1:7f:
         f1:f3:ff:e5:dc:79:71:c5:c7:9f:da:6d:e7:81:e3:4e:a6:20:
         dc:f2:9c:d9:d1:3a:3e:22:b0:ac:7b:5f:2c:68:f8:40:22:52:
         aa:51:c3:1f:c9:f5:99:76:d9:29:bf:66:43:f9:2d:90:7b:c8:
         a8:07:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org