Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c975c52-8a6b-3dc3-9383-6c5f40f38522.roa
File:                     6c975c52-8a6b-3dc3-9383-6c5f40f38522.roa (raw, json)
Hash identifier:          3v0a3iSLMwdUufgIH1c/+U0nxHV45ZSobYWYr4s/rXc=
Subject key identifier:   53:9B:BE:F2:16:3E:10:49:A9:DE:08:57:CC:E4:3E:3C:59:B7:CD:57
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173108BBFE7
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c975c52-8a6b-3dc3-9383-6c5f40f38522.roa
Signing time:             Thu 02 Jul 2020 17:21:00 +0000
ROA not before:           Thu 02 Jul 2020 04:00:00 +0000
ROA not after:            Fri 22 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        68.210.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:10:8b:bf:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  2 04:00:00 2020 GMT
            Not After : Mar 22 04:00:00 2030 GMT
        Subject: CN=7d91e974-dc97-4765-aa27-a849a3f75b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:da:41:02:b2:e7:48:d4:d3:3d:35:0d:f7:
                    b3:bf:c4:7c:23:9b:67:f3:0f:43:fb:1c:2f:4f:f8:
                    56:44:6e:13:25:f7:1e:e1:f6:2a:5a:76:be:fe:94:
                    1b:84:73:d0:97:e1:78:c1:2e:f9:00:a2:cb:d7:19:
                    12:62:b9:3f:db:8b:b5:30:ea:31:7c:f1:88:5a:a7:
                    bc:0a:d4:d3:72:86:ef:2e:3c:ae:fc:70:d5:52:f6:
                    89:c8:df:e0:18:82:24:1f:15:4f:dd:65:6a:9c:7f:
                    f9:e9:8e:ad:15:b0:13:58:1b:ab:b2:75:d9:76:ae:
                    f1:18:97:fa:27:dd:20:bd:27:1e:3d:76:c4:3d:f3:
                    9f:09:1d:50:23:39:04:41:92:f4:9f:74:3e:62:57:
                    d0:b5:9e:a8:9f:77:13:ab:e5:14:22:a2:c7:38:5d:
                    e3:e9:6c:62:38:a8:3f:47:06:11:9b:80:2f:6b:2a:
                    88:08:4f:01:76:19:e8:70:45:f3:86:fe:5c:aa:6b:
                    e8:cc:c5:10:16:25:88:b8:99:75:fa:1c:ac:f4:8e:
                    57:dd:0b:95:c6:70:aa:af:98:c4:e5:ed:56:e8:c3:
                    13:f4:be:f5:df:bf:41:0b:88:0f:fb:75:82:90:92:
                    3d:53:62:65:24:d1:60:34:54:44:ec:23:df:55:48:
                    5b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9B:BE:F2:16:3E:10:49:A9:DE:08:57:CC:E4:3E:3C:59:B7:CD:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c975c52-8a6b-3dc3-9383-6c5f40f38522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.210.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:6c:e6:87:a2:7c:2f:c7:d9:a8:76:26:39:b2:ae:56:e4:83:
         81:ed:56:ad:27:32:bc:2d:26:20:2a:05:2a:90:37:1b:c0:6d:
         27:cd:f0:77:6c:64:a3:46:1a:16:3c:0c:0a:4b:ea:c8:84:07:
         05:db:fd:84:90:e1:fa:8f:9e:82:eb:3a:a8:bb:6e:e3:d3:7a:
         0e:bc:6e:b7:2f:cd:b8:39:e5:53:b1:80:eb:8e:20:b2:ce:ed:
         dc:7e:d4:08:5c:83:93:cc:df:07:a8:99:31:41:bb:9f:8d:7f:
         6a:6d:79:7a:83:60:a6:81:49:bc:c0:70:c7:fd:4b:49:5e:4b:
         42:b5:5e:ba:3f:7a:e0:aa:de:ee:79:6d:b6:13:91:34:f2:4a:
         04:f4:4a:80:b9:89:0f:75:67:d3:14:d3:a8:34:08:6e:0b:ef:
         a2:c8:15:68:e2:7b:73:66:4e:6c:51:83:f8:d9:e9:84:61:66:
         8c:d6:ca:00:72:a6:29:81:23:a6:88:5f:d0:b7:1b:a0:94:4a:
         60:b6:31:75:37:75:a9:e1:61:03:8c:91:8d:70:46:6f:e6:7e:
         37:98:e2:cb:d6:a9:98:d0:e8:46:93:32:d9:25:13:7d:68:1f:
         15:3d:ab:59:8c:1d:73:0d:3c:ae:c9:96:d2:76:29:77:dd:01:
         23:0f:d9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org