Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3d7523fc-0b7a-3f1e-a36d-06bd7677a2d9.roa
File:                     3d7523fc-0b7a-3f1e-a36d-06bd7677a2d9.roa (raw, json)
Hash identifier:          tq2s8X3vugJPsCqld26xF5bDhtLpgWeROXU0zSgLLLQ=
Subject key identifier:   C3:BF:6E:93:51:56:C0:3E:D6:BC:DE:49:15:45:43:BD:CC:22:D1:D5
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FECDDB
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3d7523fc-0b7a-3f1e-a36d-06bd7677a2d9.roa
Signing time:             Sun 21 Jun 2020 17:48:19 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Sun 17 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:fe:cd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Mar 17 04:00:00 2030 GMT
        Subject: CN=ee977320-1d1d-44e8-82df-5b38842ec312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:6d:51:58:fa:82:ca:fe:4b:b6:c4:33:cd:
                    bc:da:26:38:ec:db:25:9a:c0:43:60:22:f8:99:d3:
                    f4:71:9a:53:2b:0f:44:93:dd:f5:f8:c3:cf:4e:6d:
                    44:34:8c:11:e2:75:12:a6:bc:68:e0:02:99:cf:37:
                    69:50:63:06:ed:ab:f5:43:31:c0:76:1b:93:a2:57:
                    a4:34:d6:4b:cf:5a:cc:11:e0:6d:98:40:cc:ad:3c:
                    06:b7:19:28:51:cf:d2:9b:ac:bc:5f:8c:1c:3b:51:
                    66:20:3c:fb:5e:cb:cf:f0:7f:eb:bc:3d:a8:d7:5a:
                    31:e6:ca:1d:79:ff:7d:6e:c9:22:54:65:05:85:4d:
                    2a:9c:b2:44:78:f2:2d:8b:83:06:21:09:92:f4:c3:
                    25:50:9b:08:67:c6:41:48:f6:d0:74:92:0b:11:1d:
                    be:c7:78:36:a8:64:be:67:03:df:3f:50:31:9d:eb:
                    1e:5f:e5:9b:5d:37:16:20:75:06:60:75:48:ee:47:
                    b7:f5:f1:96:06:c0:71:8f:22:8d:16:2c:fc:24:c4:
                    9a:35:8c:60:44:5f:42:23:24:cd:74:7b:ed:3b:be:
                    8c:21:3c:a5:67:78:56:15:3c:63:97:ef:f0:bd:a4:
                    1b:44:91:fd:1a:dd:82:7e:60:5b:82:53:c1:e0:ac:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BF:6E:93:51:56:C0:3E:D6:BC:DE:49:15:45:43:BD:CC:22:D1:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3d7523fc-0b7a-3f1e-a36d-06bd7677a2d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:39:05:b4:37:87:35:f9:2d:c2:98:30:00:90:50:93:40:7b:
         80:8c:f3:1b:92:d1:4a:42:76:b9:b7:0b:38:f5:04:3c:88:5f:
         b0:ea:a7:07:44:27:38:a5:3a:aa:7c:35:ca:86:7f:63:fe:77:
         fb:3e:6e:b2:4e:05:9a:04:af:e6:bf:f9:c0:7e:f0:ca:f0:73:
         f3:42:b4:2a:35:c8:d3:d3:28:b7:be:47:2b:21:6b:82:28:e2:
         9a:71:21:26:3c:b5:d0:ee:87:bd:a6:4f:bb:4c:1e:93:fa:a1:
         aa:f6:42:eb:70:ea:a9:db:91:56:72:89:61:a3:f3:92:ad:3d:
         4a:50:05:2c:58:38:78:15:74:29:d3:2c:48:b2:de:d3:bb:82:
         aa:20:33:b0:10:d2:b5:f7:60:7e:38:a3:3d:aa:72:99:3f:68:
         4c:92:e1:98:9d:d5:73:1e:f1:fa:83:4a:45:bf:0e:2e:4e:3e:
         ef:16:99:f1:a6:a9:5a:03:8b:bc:70:15:b5:5a:de:62:c8:78:
         56:b2:41:4b:c8:b3:04:5b:db:53:56:5c:88:d6:49:3d:db:25:
         1b:ee:6f:cd:19:1c:20:b5:65:4d:48:74:07:82:6e:b6:b8:6b:
         ff:81:cf:c0:43:ac:88:7d:28:41:de:f2:13:4f:88:52:cc:b5:
         63:1b:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:49 2024 by rpki-client on console-fra.rpki-client.org