Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5afeeebb-ee02-3a90-bfc0-18b0ccb6a2ea.roa
File:                     5afeeebb-ee02-3a90-bfc0-18b0ccb6a2ea.roa (raw, json)
Hash identifier:          6hcfmQzvEbykpjkbKj/VH4hBMu6jQtYbEZsfS0x7fU0=
Subject key identifier:   F0:6E:8C:D8:A6:71:78:C8:FE:13:EB:AF:34:62:00:2C:3A:9B:5C:1C
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172DCB310EA
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5afeeebb-ee02-3a90-bfc0-18b0ccb6a2ea.roa
Signing time:             Mon 22 Jun 2020 15:43:42 +0000
ROA not before:           Mon 22 Jun 2020 04:00:00 +0000
ROA not after:            Sat 13 Apr 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        52.113.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:dc:b3:10:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 22 04:00:00 2020 GMT
            Not After : Apr 13 04:00:00 2030 GMT
        Subject: CN=4bd4cd64-f185-42d8-8969-7555035569ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:87:33:cc:13:7a:53:48:76:21:a5:54:61:b9:
                    74:f9:cb:db:bf:da:8c:39:1f:f2:75:13:db:4a:5f:
                    74:2c:bf:58:89:4d:9c:71:60:3c:0f:44:92:50:9b:
                    cc:da:1a:fe:e4:ae:5d:d5:b3:15:9a:e1:f9:a9:d3:
                    9d:a4:e6:98:37:2d:a3:97:eb:32:65:bb:b2:38:ca:
                    19:44:a2:73:03:0a:55:b6:da:f8:3f:6c:92:3c:31:
                    bf:3a:47:d5:7e:82:12:5c:d2:3e:ad:b0:7a:f0:0a:
                    9d:f8:d1:df:6e:82:42:1b:52:cf:09:66:53:c8:21:
                    7d:f3:34:64:b0:b6:2b:75:cd:f7:39:32:d3:82:bc:
                    49:b2:98:d9:16:cd:aa:2f:31:7b:fa:ad:33:8c:bf:
                    78:85:e2:21:31:9b:dd:67:d4:a8:f2:a6:6a:c8:ab:
                    06:aa:c9:3e:cf:8f:0c:0a:d1:5b:c3:8f:ae:ec:3f:
                    a2:4c:2c:bf:00:da:f7:c1:9f:bd:e5:09:8c:6e:b4:
                    01:0d:66:18:70:46:f0:51:d2:64:41:97:25:2f:fb:
                    c5:64:7c:c1:20:fe:fc:0b:66:cf:a8:8e:83:49:68:
                    2e:67:ca:22:5d:fd:99:7c:a2:25:7b:24:b9:98:82:
                    d1:f7:78:09:01:6f:1b:58:d2:ff:89:0c:48:c4:3c:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6E:8C:D8:A6:71:78:C8:FE:13:EB:AF:34:62:00:2C:3A:9B:5C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5afeeebb-ee02-3a90-bfc0-18b0ccb6a2ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.113.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:51:2c:e6:3a:1e:e0:6b:87:b8:5f:20:74:a7:0b:37:48:fa:
         9d:91:1b:d4:fb:fd:d1:a9:bb:b8:be:12:0d:96:9c:5d:22:5e:
         26:0e:c9:e6:f2:19:29:3e:db:df:43:f9:75:74:b9:18:2a:cd:
         6a:14:6b:b7:c7:33:f8:a9:d1:0b:51:19:dc:b8:eb:68:6c:d7:
         94:8b:e7:d6:d7:08:fb:46:14:de:b4:67:d8:7a:69:4e:07:31:
         d6:c1:bc:19:cc:07:21:49:50:4b:b4:62:86:b0:3a:c0:1f:21:
         ae:da:ea:05:7f:a4:81:b0:35:61:82:35:62:29:ac:a2:18:96:
         57:60:a2:38:ca:04:aa:c4:91:f1:34:ff:ad:82:40:76:f6:34:
         fa:24:75:a5:f8:8c:4a:8c:84:27:4c:b3:54:b8:03:f1:31:6e:
         f5:d4:32:32:f0:4e:0a:28:d9:ff:a7:c1:70:e6:dc:17:8c:4c:
         74:e9:78:33:fc:94:3f:7a:25:4b:58:1b:51:87:17:b4:73:29:
         c9:fa:47:30:9f:76:fd:e3:d0:f4:b1:53:64:d5:17:47:93:55:
         0b:14:33:d2:6b:5f:83:8c:9b:69:0f:0e:dc:87:ee:34:ce:4c:
         9a:11:62:65:86:67:1d:22:99:12:97:52:91:0a:f3:1f:61:91:
         f9:f5:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org