Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c71b52e5-607c-31f5-98bf-aa62f91493bb.roa
File:                     c71b52e5-607c-31f5-98bf-aa62f91493bb.roa (raw, json)
Hash identifier:          3hu4b+k3WvGmzkyrnrfantrEFh4QcYLZOC24go7Enl4=
Subject key identifier:   98:BB:44:B6:F9:05:51:66:6B:78:19:3A:79:D4:A2:E4:57:C2:77:E0
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173108BCBF7
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c71b52e5-607c-31f5-98bf-aa62f91493bb.roa
Signing time:             Thu 02 Jul 2020 17:21:03 +0000
ROA not before:           Thu 02 Jul 2020 04:00:00 +0000
ROA not after:            Wed 20 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        68.220.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:10:8b:cb:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  2 04:00:00 2020 GMT
            Not After : Mar 20 04:00:00 2030 GMT
        Subject: CN=f5c115af-6c36-46b4-aaeb-6954adea5bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:4a:77:7e:7b:10:55:c0:b5:8b:38:d7:40:
                    f2:5b:e6:ae:83:44:f2:f3:fa:4c:f2:84:46:10:82:
                    18:c7:7c:37:fc:2a:43:1b:dc:e7:87:2c:51:7e:63:
                    8d:ad:fa:74:b0:72:cd:cd:dc:25:4b:27:ed:89:13:
                    3c:e0:a4:96:85:4a:d1:c9:49:ef:4f:d9:c0:b1:d2:
                    db:9d:92:e6:44:d7:e0:31:a2:9d:d2:d1:b8:10:6e:
                    2d:10:22:3f:a1:c8:d9:9d:5c:45:7a:60:f1:e1:7d:
                    e7:b9:11:72:b1:c6:c5:41:21:c3:a5:e3:bb:ea:a2:
                    ad:69:a2:06:d6:ba:19:e5:e5:23:07:68:e9:3e:08:
                    36:5d:73:c5:ea:7a:a3:3b:f5:3b:d4:99:60:6c:cb:
                    3c:69:68:7c:bc:6d:86:e7:68:aa:f7:c4:26:ff:5f:
                    a3:d5:6c:ec:2f:cc:f2:bb:ca:15:ff:b5:3f:53:38:
                    37:c2:f6:a0:5e:9b:fa:cb:c6:c1:bf:e5:15:5a:67:
                    99:6b:44:39:f1:18:53:46:72:7a:54:2a:88:1f:2f:
                    20:60:80:86:dc:d8:1b:68:00:90:10:f3:83:59:04:
                    c3:b5:1c:6f:27:09:d8:ab:69:25:b3:08:f1:5c:f9:
                    67:00:8b:18:fd:58:06:af:3a:11:c0:a1:14:ba:15:
                    9f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:44:B6:F9:05:51:66:6B:78:19:3A:79:D4:A2:E4:57:C2:77:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c71b52e5-607c-31f5-98bf-aa62f91493bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.220.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:10:a3:d9:c0:67:be:f1:43:f0:af:46:dd:3c:fd:6c:65:9b:
         88:a8:16:e7:37:86:87:6b:e6:26:cd:61:50:4c:5b:8b:6f:a7:
         9c:9b:7a:04:ab:e4:0a:d3:7e:3a:39:0a:43:e4:74:68:6d:f6:
         94:78:f2:4a:2f:ed:d9:b5:8f:35:d2:06:23:0c:67:41:f1:2c:
         0f:74:cf:38:6c:8c:61:12:1e:5d:41:91:56:db:31:82:46:1b:
         d3:18:a0:30:14:8d:9b:d6:20:95:8a:10:63:0b:09:1f:9c:2b:
         f0:be:5c:fa:f3:d2:79:7e:dc:47:26:87:a1:10:d8:fc:60:3d:
         12:7c:de:69:71:b4:22:39:2f:3a:04:43:ec:0c:50:77:a1:f3:
         3a:50:cd:d8:e1:3c:a6:74:03:e6:34:91:2b:2c:42:35:f8:3a:
         00:ce:91:8a:d6:54:fe:5c:01:0a:6f:d4:85:b3:5f:11:d8:89:
         7e:5f:86:c4:11:34:f5:62:df:6d:08:5c:ea:ab:7d:ee:f0:d9:
         4c:54:bb:5f:e0:d6:54:c1:f4:5b:9e:1a:d8:0f:16:3c:6a:d8:
         d2:b2:9f:86:cc:20:1c:73:41:6d:6e:6e:89:3a:12:42:9a:7e:
         4d:d0:7a:d4:99:38:58:32:e3:b7:68:ee:49:74:8d:44:b8:7c:
         10:89:39:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:11 2024 by rpki-client on console-ams.rpki-client.org