Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3564a947-fcbc-3665-a916-403e69c38dd0.roa
File:                     3564a947-fcbc-3665-a916-403e69c38dd0.roa (raw, json)
Hash identifier:          Xfv8vkYJQnaFSR8/mEY2P4GrvnuncxrZD2j65hMSfRY=
Subject key identifier:   8A:85:F9:8B:FF:0A:28:85:D0:25:58:E8:D5:7D:A2:DE:F1:8B:15:DA
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173108BF2DD
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3564a947-fcbc-3665-a916-403e69c38dd0.roa
Signing time:             Thu 02 Jul 2020 17:21:13 +0000
ROA not before:           Thu 02 Jul 2020 04:00:00 +0000
ROA not after:            Mon 04 Mar 2030 05:00:00 +0000
asID:                     8075
IP address blocks:        74.160.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:10:8b:f2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  2 04:00:00 2020 GMT
            Not After : Mar  4 05:00:00 2030 GMT
        Subject: CN=570c82d5-d682-4d00-8e4b-1870b2643a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:97:f5:e5:b1:62:ed:e5:5a:f7:5a:10:71:
                    b7:b7:86:c6:c3:bf:8a:95:dd:45:4c:38:63:5d:5a:
                    3b:33:d6:78:cc:67:40:d2:4c:25:32:16:e2:55:d7:
                    04:a0:35:1b:9f:48:28:76:0a:ce:6e:0b:3e:a7:37:
                    d0:b2:90:e2:00:67:94:16:0e:1c:c6:cd:f6:d3:ce:
                    e0:04:a3:98:c5:34:7c:7f:51:4f:0c:73:51:c2:e3:
                    3b:66:53:c2:e3:cd:89:24:e4:b3:bc:d4:ac:cd:0f:
                    9e:33:72:c9:2e:36:df:92:81:73:ba:8b:7e:32:a5:
                    6d:4f:12:87:d6:48:9b:50:4c:f5:40:d7:96:a6:f5:
                    a7:36:6a:d8:94:62:8c:26:fe:bb:7f:b6:35:29:ff:
                    3b:8c:e2:c9:3d:f0:be:b8:b7:97:39:fa:21:38:ac:
                    72:46:9a:ae:47:03:44:ca:95:0e:e2:c3:3b:8c:e9:
                    d7:84:b3:73:1a:70:ef:9d:b9:bc:56:7a:b6:d1:13:
                    97:1c:6c:a7:73:0d:9f:48:a3:8b:4b:18:9e:75:ae:
                    1b:79:34:96:aa:75:bc:f2:1a:d9:1a:a8:a7:08:8d:
                    2c:92:0f:23:a0:e7:c9:10:32:71:99:d3:d0:69:85:
                    9b:2e:1e:b1:e5:e7:b2:3e:03:75:e2:9a:04:11:0e:
                    7d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:85:F9:8B:FF:0A:28:85:D0:25:58:E8:D5:7D:A2:DE:F1:8B:15:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3564a947-fcbc-3665-a916-403e69c38dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.160.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:85:4f:01:8e:b0:df:bd:20:77:c9:89:d1:b5:48:b9:2f:d7:
         e9:9b:91:97:81:53:28:da:66:74:eb:85:c0:f8:02:c5:55:87:
         2c:6e:20:2c:cd:c5:ee:5a:43:8b:85:b4:e6:c0:5e:4c:3b:70:
         1a:4b:78:0d:e6:63:08:9d:c7:b8:fa:e7:44:bf:ac:02:8a:d1:
         54:48:fc:e6:d4:86:3b:79:57:72:d1:75:7c:a7:e1:39:61:70:
         fe:64:4b:56:71:84:20:c6:18:33:20:74:47:22:c6:3c:c8:17:
         50:25:1c:02:df:47:9e:21:e2:f4:a1:a6:5d:2c:9a:56:6a:52:
         de:a3:41:dc:bd:67:40:8b:fc:5b:17:9d:f3:31:25:c7:3c:21:
         b6:6b:24:d1:bd:5f:ff:9f:95:c6:18:94:d9:e7:20:17:d7:50:
         0e:27:d3:bd:63:60:95:47:d9:04:c4:a1:c4:b3:f4:28:d6:08:
         b3:af:df:bb:ca:88:b3:b4:8e:7c:0d:17:db:89:3c:a1:5b:0b:
         65:79:a2:0e:92:a2:9b:19:79:55:d9:b3:72:7e:3d:ce:46:dd:
         7f:71:ec:9c:e5:61:92:32:21:4f:2a:00:d6:68:f7:ab:a1:dc:
         50:7d:50:75:c2:52:f3:8a:25:02:bb:3d:ec:96:72:65:ca:3d:
         4b:35:ce:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:49 2024 by rpki-client on console-fra.rpki-client.org