Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13500c20-123c-30ee-9d2a-8b93a7047990.roa
File:                     13500c20-123c-30ee-9d2a-8b93a7047990.roa (raw, json)
Hash identifier:          UkykVnp3wZq+G8irQXosmyk411i11GUNLt/9JyISha4=
Subject key identifier:   C6:AF:1E:16:2E:1C:3F:26:27:78:F5:BC:6B:48:11:15:1D:C9:07:0F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FE2A46
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13500c20-123c-30ee-9d2a-8b93a7047990.roa
Signing time:             Sun 21 Jun 2020 17:47:37 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Sun 03 Mar 2030 05:00:00 +0000
asID:                     8068
IP address blocks:        13.107.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:fe:2a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Mar  3 05:00:00 2030 GMT
        Subject: CN=5ddd93ef-53f8-4567-8d2b-0e83d51f7aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:cf:dd:c5:ac:cf:74:32:99:0a:ae:e8:e0:
                    3a:d9:e0:ef:57:23:bb:b7:a5:60:aa:8f:77:5b:72:
                    3d:1a:7c:4a:7a:94:05:73:ac:97:c6:6b:5d:2b:6e:
                    e0:58:e1:a2:d4:1f:c7:ca:bb:3c:42:0d:e6:22:7d:
                    0c:eb:46:ed:63:54:8d:32:4e:68:98:a2:1a:ed:53:
                    d1:5d:18:29:23:d9:de:02:a6:b3:29:3f:73:a5:b1:
                    4b:08:98:b1:34:23:bc:d0:b5:9c:ba:79:0d:a9:ba:
                    b1:56:e4:67:7a:66:54:5f:5e:41:31:8b:5c:1a:fc:
                    64:34:14:d1:df:8a:b5:1a:7e:6f:ba:c9:5e:ad:a7:
                    d8:b5:cb:68:e3:e5:0e:d8:b9:fe:41:5b:dd:94:10:
                    0c:48:1e:ef:87:3b:d7:30:b3:5a:9e:ed:50:91:d6:
                    ad:d8:5b:6e:d6:1e:3a:07:18:ef:a5:58:55:87:62:
                    a1:34:ef:e8:8d:91:db:67:34:3e:8e:8e:65:69:92:
                    55:b4:bc:49:78:b8:b6:85:89:17:17:9c:85:7e:b3:
                    96:d6:39:77:1a:b2:d2:4f:a5:68:40:66:93:83:74:
                    43:ae:e8:09:7e:69:0c:db:87:9e:ec:62:e5:6b:af:
                    57:ec:4d:8f:4d:ff:05:82:88:d7:70:4d:7f:5e:73:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AF:1E:16:2E:1C:3F:26:27:78:F5:BC:6B:48:11:15:1D:C9:07:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13500c20-123c-30ee-9d2a-8b93a7047990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:29:42:47:ce:12:37:d6:e7:06:a1:48:64:e7:3c:e9:88:56:
         6a:63:32:bc:17:f8:94:67:a8:d1:51:9d:a9:0a:7f:19:25:0e:
         5b:3a:9b:7b:f0:95:e8:b9:4b:09:d2:e6:01:13:71:0f:d1:19:
         35:2a:42:40:60:03:63:85:8b:22:03:1e:3b:dc:d5:22:1f:f7:
         53:a9:29:85:c7:95:d0:79:b2:2a:21:59:fa:5f:74:af:06:0a:
         da:b5:bb:d5:08:c1:98:28:fc:ca:48:68:6f:9d:68:3e:f1:bc:
         a9:ad:f4:37:1c:b2:6b:69:0b:be:ba:14:9b:5f:1d:22:4f:be:
         f1:26:2d:e6:50:02:7c:c0:3b:ae:8b:21:ad:d2:d7:85:44:49:
         73:94:c7:b0:34:d6:df:8a:bb:4d:04:0c:30:e4:0e:2e:51:85:
         a5:a8:bb:ff:5a:55:1d:39:90:c8:e8:52:61:f5:1c:d2:ac:a3:
         06:84:59:19:78:0b:68:39:04:7a:29:e8:10:6d:b0:ee:77:3d:
         70:9c:38:33:4b:c1:08:5e:29:64:e8:85:01:77:3d:8c:04:79:
         9e:54:a6:2d:88:af:24:82:ff:c8:24:33:8f:a5:59:e5:61:58:
         f6:ba:c4:eb:3d:6d:18:a3:78:f8:72:a4:da:ff:46:69:2e:bd:
         3b:03:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:05 2024 by rpki-client on console-ams.rpki-client.org