Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d26dfed-4061-3adb-8ba2-10b222e608c8.roa
File:                     5d26dfed-4061-3adb-8ba2-10b222e608c8.roa (raw, json)
Hash identifier:          8yp4unyh6goTMTNd0IqWiAKDiECpvBsoIpOxNGXCIrg=
Subject key identifier:   DD:ED:DF:BA:DA:25:01:19:C1:88:9B:DB:B1:7F:37:3C:EB:04:3E:4E
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173108C397C
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d26dfed-4061-3adb-8ba2-10b222e608c8.roa
Signing time:             Thu 02 Jul 2020 17:21:32 +0000
ROA not before:           Thu 02 Jul 2020 04:00:00 +0000
ROA not after:            Sun 24 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        108.140.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:10:8c:39:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  2 04:00:00 2020 GMT
            Not After : Mar 24 04:00:00 2030 GMT
        Subject: CN=39434bcc-39c3-46bc-b92a-8940634d3ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:e5:71:5a:3a:e1:62:7d:b9:14:0d:73:c3:
                    30:54:04:8b:d4:ce:c1:46:cb:61:c4:c5:fa:6f:db:
                    e1:26:d6:8a:fb:f5:bb:e8:05:3d:74:80:83:17:d7:
                    99:43:d2:49:64:77:27:54:d6:df:9c:20:1e:11:ce:
                    24:22:53:3f:8e:23:66:07:e4:f4:cc:a0:d6:d7:4e:
                    36:e2:91:16:7d:fc:05:d8:5c:bd:89:6c:2b:bb:60:
                    56:53:f5:0f:e1:4b:eb:f3:9e:f3:c3:e1:7a:88:f7:
                    57:18:2a:22:96:db:cc:79:ab:16:8f:f8:ec:85:7a:
                    df:1f:d0:5a:0d:5f:03:be:4e:a4:be:85:38:7f:c8:
                    45:87:67:d4:e5:c7:43:34:ae:f4:16:7e:7f:e8:10:
                    a2:6a:f2:33:a4:b5:97:5c:10:9b:0e:bc:11:9d:3b:
                    68:19:da:68:7e:75:66:88:4a:ac:78:1b:72:8a:4f:
                    b5:7b:c7:54:29:5f:83:48:05:a8:ed:ef:bd:2a:b3:
                    36:32:78:ee:2e:a1:5e:c7:82:70:74:a4:f5:e5:55:
                    26:bf:76:e5:e6:25:db:66:c6:40:4e:ff:13:6b:68:
                    a1:87:a7:a5:f1:0d:da:26:69:fd:74:63:48:8d:2f:
                    2b:64:0e:52:cd:54:eb:86:6b:89:ef:56:2c:f9:48:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:ED:DF:BA:DA:25:01:19:C1:88:9B:DB:B1:7F:37:3C:EB:04:3E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d26dfed-4061-3adb-8ba2-10b222e608c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.140.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:87:75:cb:85:d3:86:a3:81:20:f2:ae:0a:0e:84:67:af:48:
         2e:29:49:c4:4a:1c:0a:39:24:19:63:85:75:86:61:c7:a1:e1:
         8e:d8:e8:9b:2f:00:15:a1:33:fc:d3:8c:ee:61:3d:3e:3a:65:
         4a:35:61:0d:b1:58:52:e9:90:1e:48:fd:1a:37:fb:2d:49:f6:
         78:53:97:1d:a6:a4:22:04:d5:bd:b5:3b:70:0d:d4:99:0d:7b:
         c4:b6:8c:e3:e0:f8:44:6f:b2:db:fc:6f:96:8c:ae:f3:ff:be:
         b5:83:c4:09:34:08:f1:04:e6:36:44:61:9b:3a:3b:e0:d4:ab:
         fd:ce:55:61:2e:09:15:61:d8:2b:d0:cd:0c:54:e7:6c:99:6f:
         68:e2:e3:23:58:89:aa:4f:92:95:c7:50:1b:15:fb:7b:c7:a8:
         d1:5b:58:fc:44:99:82:e3:c2:92:69:00:f5:e2:98:83:bb:e6:
         2b:7b:76:e7:e7:35:4d:b6:f2:1a:0d:b0:38:1b:0f:d5:a4:96:
         c7:73:e0:91:29:7d:a4:8c:43:ad:5b:26:6b:7a:53:02:d2:25:
         6c:d0:69:85:0d:32:a8:a9:5a:11:92:96:3b:42:a2:fc:7f:7d:
         57:1a:65:b3:4a:5e:27:3f:86:11:dd:9a:c5:4e:0d:89:c8:63:
         bb:c1:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org