Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344fb6de-d127-3e3a-9817-b12ede112584.roa
File:                     344fb6de-d127-3e3a-9817-b12ede112584.roa (raw, json)
Hash identifier:          V0/mVj4q0ZFHNSV+hPmHtO8IpSIknC6RR9meOg+Xqos=
Subject key identifier:   4E:92:01:9D:BB:28:6F:06:16:5C:D1:9D:35:A3:AE:71:A2:24:DE:81
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732CBD51FA
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344fb6de-d127-3e3a-9817-b12ede112584.roa
Signing time:             Wed 08 Jul 2020 04:44:31 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Thu 14 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        52.152.0.0/13 maxlen: 13

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2c:bd:51:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Mar 14 04:00:00 2030 GMT
        Subject: CN=d9f46894-5ba6-4d2f-ba13-d926147c2021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:44:56:b8:e0:8e:d4:14:e2:4b:5a:fa:ce:
                    df:a8:a9:b9:ab:29:82:5a:26:c1:33:0f:19:a9:ea:
                    02:ed:d9:59:37:f1:21:ab:0c:23:d7:03:9f:e6:a1:
                    a3:db:97:f0:b1:fb:a8:af:c6:03:68:ce:f5:27:0b:
                    53:05:03:9a:60:a3:cb:cb:b0:98:82:fc:9d:d8:9f:
                    0b:41:19:8a:9c:a2:72:82:5f:9b:a4:4b:64:bb:35:
                    69:7e:06:5e:2a:ea:9a:e3:e4:f2:73:04:06:0b:6f:
                    19:09:ec:d6:47:6e:bf:89:65:4b:bf:9d:c5:dc:1b:
                    6a:9d:2d:a0:12:39:35:f8:67:89:30:c8:e1:cb:b2:
                    24:77:97:c6:26:97:6e:65:b0:21:2c:04:18:c1:a9:
                    4d:b0:7c:4f:75:a0:49:8f:f7:a6:c6:25:fe:fa:5f:
                    0d:d8:28:0b:b5:fd:58:5e:73:51:d2:ab:25:22:b8:
                    a0:45:ce:9f:80:dc:5b:7e:26:74:70:4b:a3:f8:bc:
                    48:4e:aa:da:bb:93:26:05:bc:fc:1a:c1:1f:e7:b4:
                    7d:9c:69:26:78:fb:73:07:89:bb:26:58:3f:d6:32:
                    50:98:52:02:30:2b:70:13:25:1a:b2:c5:51:79:ad:
                    99:bf:4d:c6:58:c8:a1:1f:bd:76:fe:5f:ec:e2:59:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:92:01:9D:BB:28:6F:06:16:5C:D1:9D:35:A3:AE:71:A2:24:DE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344fb6de-d127-3e3a-9817-b12ede112584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.152.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:35:38:cc:8a:db:e7:45:83:f7:db:d7:2d:d6:22:32:09:3d:
         18:d0:68:b6:db:9f:3a:84:19:08:fc:06:a6:7d:0f:22:86:69:
         13:b7:51:ab:02:e1:a1:79:e0:e5:cb:01:bd:fe:95:d7:85:43:
         1d:5b:a9:ac:43:aa:ca:82:8c:91:52:4b:fe:db:81:22:01:d0:
         59:c6:22:05:dd:7d:a9:77:fb:37:8c:26:ae:af:2c:8e:eb:12:
         3d:18:c5:7c:61:5b:e9:92:ab:94:d6:2f:07:25:47:55:72:81:
         48:61:9c:7c:90:f3:e9:47:41:c1:6b:aa:69:13:87:da:33:be:
         96:30:bd:0c:31:e7:ba:b5:74:36:6b:c7:64:80:99:27:92:14:
         71:cc:1a:20:34:17:0f:79:45:69:af:0f:50:33:f6:e4:78:db:
         8f:f1:d4:1e:95:e4:4e:65:1c:e7:c4:03:ed:8f:bb:2d:2a:4a:
         d8:d8:a7:11:57:27:76:09:b6:b6:10:fb:22:b3:e5:87:43:2e:
         0e:a6:62:5d:66:fd:b8:02:d2:ed:4c:a8:fd:64:34:3a:78:35:
         be:05:7f:c1:04:1e:e0:7a:05:5c:4d:a0:b8:d2:ee:db:98:41:
         e1:01:45:8e:55:27:bc:48:4d:1c:e6:4b:e0:d4:2a:b0:ca:3c:
         0d:0e:ef:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org