Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/333255c1-380e-3b7e-8643-e24e870eff95.roa
File:                     333255c1-380e-3b7e-8643-e24e870eff95.roa (raw, json)
Hash identifier:          fKatvB3bQt3BtnTZai+CX+NxYp3tLOe7Mb50fUXfYMo=
Subject key identifier:   6A:07:E4:ED:3B:C8:09:60:28:79:8C:FD:CA:34:BE:06:8D:F3:A8:A6
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858395B418BEF1FCF89C5FB140F40
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/333255c1-380e-3b7e-8643-e24e870eff95.roa
Signing time:             Tue 23 Mar 2021 04:00:00 +0000
ROA not before:           Tue 23 Mar 2021 04:00:00 +0000
ROA not after:            Mon 15 Apr 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:5b:41:8b:ef:1f:cf:89:c5:fb:14:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Mar 23 04:00:00 2021 GMT
            Not After : Apr 15 04:00:00 2030 GMT
        Subject: CN=6cc77dab-29aa-4768-8555-4b8886639a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:71:fc:8d:27:25:5b:bd:f4:7e:60:5b:74:
                    e5:a9:84:8b:6d:df:09:d6:f4:57:d7:54:f8:c0:fc:
                    37:17:11:53:96:1a:71:14:6f:89:f5:06:79:3a:24:
                    80:3e:d0:4d:b8:86:bc:b0:03:8f:52:b0:09:6d:5a:
                    90:66:6a:e0:11:b3:e8:57:dd:87:23:3e:c9:7c:86:
                    fe:77:de:de:9e:08:a9:35:11:1b:bc:41:c0:60:88:
                    59:a2:5b:68:51:d8:41:c6:f6:39:b8:0c:1b:63:18:
                    fa:a3:e1:5a:96:6f:0b:8a:11:8a:3f:63:36:03:75:
                    2c:38:fa:5a:e3:82:fe:ad:b9:bd:6f:75:5d:2a:17:
                    d6:b2:7a:a3:cf:e0:42:7e:e2:05:25:53:07:ff:78:
                    f4:fe:b3:33:9d:8a:e4:bf:47:31:0a:04:03:54:22:
                    03:de:d5:89:fd:ad:74:36:45:cd:1a:b7:b1:fb:83:
                    23:ed:84:fd:03:6f:03:0f:20:23:ae:48:6c:15:4b:
                    f5:4c:e4:ee:63:3b:66:4d:01:0d:8e:10:e7:61:4d:
                    6c:74:3c:fb:b1:84:84:a9:91:f9:67:c7:03:74:77:
                    44:93:b3:ba:ac:c3:33:18:01:81:a1:f1:87:77:0e:
                    c2:5d:a6:15:d3:aa:2e:20:b8:eb:88:53:e2:e3:d7:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:07:E4:ED:3B:C8:09:60:28:79:8C:FD:CA:34:BE:06:8D:F3:A8:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/333255c1-380e-3b7e-8643-e24e870eff95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:02:01:e7:eb:9e:2c:39:8d:42:5f:9a:88:97:57:cb:bf:1c:
         c3:07:a7:c8:74:50:ad:23:99:dc:ec:26:06:f9:50:b2:af:0e:
         74:90:09:18:32:50:0e:82:52:fc:f9:7b:e5:eb:9b:b1:8e:be:
         e1:e3:0e:73:a6:2d:32:39:97:27:a4:21:61:8c:d6:48:14:be:
         4a:6e:a2:3e:97:27:c0:d3:dc:71:5d:26:07:2d:b0:58:15:0f:
         c8:ea:01:73:04:3c:3b:92:0c:79:d7:df:29:aa:a4:ae:fa:74:
         b7:a7:7a:82:65:55:a2:21:c5:ca:e1:d7:58:2a:8c:b8:5b:67:
         1c:9c:be:e0:a3:a4:48:16:30:56:82:36:f4:09:8a:bb:25:0a:
         e3:50:12:47:a6:c6:fc:fa:ff:0d:8a:b6:14:af:0a:5b:48:7f:
         3d:06:cb:4a:75:65:e3:65:d2:54:af:cc:1e:61:eb:17:92:51:
         ec:a5:8d:ac:15:b5:ef:96:6e:b5:92:bb:76:8d:ef:16:ae:77:
         06:c5:2b:22:60:42:fd:f6:c1:0f:59:e3:90:bf:af:97:30:16:
         d8:16:33:de:da:47:ff:92:b3:c8:c1:db:dc:88:cb:4f:31:11:
         b4:01:ba:7e:84:a6:bd:f2:b4:7c:eb:2d:00:20:34:92:5d:f3:
         e6:3c:73:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:49 2024 by rpki-client on console-fra.rpki-client.org