Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d8bb990d-52eb-3c01-8871-7bfe44c7edae.roa
File:                     d8bb990d-52eb-3c01-8871-7bfe44c7edae.roa (raw, json)
Hash identifier:          S+Wyo8H00CghNu2v0xFzCR1L5WOiGPAUQFRcB9ctK1Q=
Subject key identifier:   AE:03:7F:E6:DB:FD:EE:C0:C5:CB:71:3C:9F:72:9A:AD:AE:C0:29:31
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172DCB2ECEE
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d8bb990d-52eb-3c01-8871-7bfe44c7edae.roa
Signing time:             Mon 22 Jun 2020 15:43:33 +0000
ROA not before:           Mon 22 Jun 2020 04:00:00 +0000
ROA not after:            Sat 16 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        204.14.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:dc:b2:ec:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 22 04:00:00 2020 GMT
            Not After : Mar 16 04:00:00 2030 GMT
        Subject: CN=c2b611dc-afb6-48e2-b26b-5d620f4074bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:b6:4c:00:0e:2a:d4:12:8c:98:34:12:e8:
                    56:cc:78:65:bb:9e:86:90:ed:40:51:7b:e7:33:a4:
                    6b:0e:2d:f7:4f:e2:c4:f4:cd:a7:90:a5:f5:e3:e1:
                    7a:a2:a2:98:34:c0:2f:6d:48:c2:0e:d3:21:5b:b4:
                    49:41:ec:3f:bd:7c:85:bb:31:fe:53:4e:3f:58:71:
                    fe:79:b5:d2:b0:bf:35:67:cd:c3:f6:c8:a0:94:f5:
                    8d:2c:0a:47:b4:11:d5:4b:96:d1:d5:b5:79:9b:09:
                    53:7d:a2:e0:42:e2:a7:d8:dc:4f:2a:f9:43:8b:09:
                    50:a9:b8:cc:ac:a4:f5:39:7a:31:ab:fa:e8:bc:ad:
                    02:4f:ce:f0:4b:5f:5f:92:85:71:1f:f4:ed:02:a2:
                    f7:62:df:85:f4:a5:a0:6c:80:ae:26:2b:5a:91:b7:
                    7a:97:7a:0c:ec:10:05:ab:e8:d4:71:61:13:33:9a:
                    db:d0:bb:3e:28:2d:36:96:3b:0a:33:dc:3f:aa:fc:
                    aa:a7:f9:3d:2f:80:33:6c:b5:c0:f9:98:da:a8:d4:
                    f6:a9:8a:45:0b:42:5d:0b:02:04:b9:75:54:52:9d:
                    37:41:fe:69:16:fc:b7:a8:f8:20:7c:7f:51:82:ef:
                    d5:9e:3b:c6:bf:dc:56:54:54:5a:2a:45:aa:75:b2:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:03:7F:E6:DB:FD:EE:C0:C5:CB:71:3C:9F:72:9A:AD:AE:C0:29:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d8bb990d-52eb-3c01-8871-7bfe44c7edae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3f:ce:2f:94:b9:62:95:cc:f9:fe:ac:f2:48:a1:fc:22:37:
         6e:cf:64:82:86:b3:b2:eb:70:92:9b:ce:4e:d9:3b:13:cc:81:
         12:c3:af:d1:93:2a:2f:18:43:95:2d:cf:70:ba:1e:a8:80:ba:
         d3:5e:a3:25:31:6c:a2:0e:82:70:4d:38:3e:03:50:29:5a:ed:
         26:27:dc:01:c0:3e:fc:51:57:1f:7e:96:d0:37:23:ca:a2:34:
         ba:97:80:37:f4:73:46:4b:51:7a:f1:4d:8d:24:6e:76:30:b5:
         70:33:c7:0f:74:23:9f:d2:25:03:12:b8:96:11:78:e6:62:0f:
         9c:72:dd:99:a3:9a:0a:67:d1:75:be:57:36:13:82:d2:06:b5:
         57:61:0c:ea:b9:ba:5d:23:32:fe:f5:4b:2d:9e:25:9c:d1:d9:
         5d:73:63:8f:2e:b9:a2:a8:41:2f:2f:56:97:bc:36:61:e8:2b:
         b8:75:70:5f:57:d1:85:3c:4d:a1:11:a9:0d:4f:6e:0c:75:90:
         ff:c2:3b:38:54:0f:b9:c3:e0:58:7c:41:7a:34:ff:88:0d:40:
         37:ab:55:c8:e9:2e:43:79:be:20:fd:56:51:83:4e:4e:94:ae:
         ef:b2:8b:91:74:98:8e:63:69:c3:66:7d:cd:f6:94:e4:65:27:
         a6:44:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:11 2024 by rpki-client on console-ams.rpki-client.org