Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8572ed03-b59e-3862-bcea-9cecfe20793a.roa
File:                     8572ed03-b59e-3862-bcea-9cecfe20793a.roa (raw, json)
Hash identifier:          57iRSoqtCGdRc2GbJ7g+3aWqobTct1OH5OrelpsltiQ=
Subject key identifier:   F7:0D:A3:7F:B4:66:E8:3F:65:AB:56:DD:90:72:B9:79:5A:C3:F8:B8
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173108BC3A5
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8572ed03-b59e-3862-bcea-9cecfe20793a.roa
Signing time:             Thu 02 Jul 2020 17:21:01 +0000
ROA not before:           Thu 02 Jul 2020 04:00:00 +0000
ROA not after:            Sun 14 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        68.218.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:10:8b:c3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  2 04:00:00 2020 GMT
            Not After : Apr 14 04:00:00 2030 GMT
        Subject: CN=f53044a8-baaa-466c-b8e3-30b34818dbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:11:83:61:3a:30:60:81:fc:82:ae:11:2e:
                    e3:0b:48:38:7a:d4:5b:c3:c0:13:60:d3:b3:e5:87:
                    c2:65:95:c7:5f:46:90:63:77:10:7a:f4:1a:a7:36:
                    96:ca:6f:8b:2f:01:ac:cc:bd:84:ae:28:0b:3d:0e:
                    5b:64:a8:74:95:42:98:69:51:4b:22:88:3b:53:61:
                    9f:9a:e1:3a:55:d8:f8:40:78:7c:d6:5c:71:6c:0f:
                    d9:cf:a5:32:f3:9f:11:af:83:12:a6:82:e1:df:f1:
                    66:d0:4c:03:68:3b:22:32:64:75:9a:8a:90:60:93:
                    e2:82:f1:52:57:c5:be:a0:6b:82:74:e8:75:7f:17:
                    38:0d:fb:37:88:ad:42:01:f6:74:87:3f:d5:ae:65:
                    ed:08:10:84:bb:74:83:02:49:d7:57:dd:b9:7d:6b:
                    f7:f6:35:92:4f:c9:1d:36:8e:a6:59:29:96:d1:50:
                    2a:5a:4f:6b:99:b6:9f:d6:a5:02:6f:ab:fa:6f:5b:
                    47:3c:93:54:58:9a:43:b1:6f:74:bd:9f:7f:d7:f7:
                    05:c0:6b:a6:f3:7d:20:7c:df:fd:2b:63:df:c7:ee:
                    95:d2:b6:7d:16:ad:46:aa:59:0e:d7:4e:c3:ef:b6:
                    ef:7a:c4:68:08:0d:11:28:fa:34:14:4b:4d:2b:be:
                    68:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0D:A3:7F:B4:66:E8:3F:65:AB:56:DD:90:72:B9:79:5A:C3:F8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8572ed03-b59e-3862-bcea-9cecfe20793a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.218.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:13:ef:2b:05:fe:25:b1:23:76:5d:53:50:70:82:bf:80:f8:
         be:6c:1e:9d:93:5c:68:f9:8d:af:03:a3:74:ab:42:6b:7e:dc:
         07:7c:e6:30:b0:0e:2c:8d:7a:a7:65:82:72:b7:46:4c:09:75:
         c9:47:1d:4e:e1:9c:9b:bf:c4:7a:99:41:b2:aa:43:4d:2e:63:
         5d:d9:2a:90:3d:48:c0:a8:08:80:41:14:cf:1e:7f:b1:02:4e:
         b0:e3:8d:9a:c0:f8:5e:f3:95:6e:51:e0:08:7c:0c:9d:9e:26:
         49:40:c3:46:65:38:5e:c5:19:f3:7b:05:4e:ec:d2:3b:f1:6e:
         b1:c5:51:5c:e1:08:4a:7f:9c:41:a0:58:1f:a1:5b:62:fb:ac:
         60:9e:77:d0:49:02:c3:5d:fb:2d:05:83:7e:eb:0c:da:08:78:
         37:a7:02:c7:b1:d4:cb:96:fa:94:de:7f:7d:72:67:6f:ec:e9:
         fc:3b:aa:78:18:83:72:5a:4c:d9:ee:49:eb:ad:13:dc:68:3d:
         bf:be:06:9b:78:2f:39:91:4e:6d:c0:28:a9:7f:e9:73:65:83:
         01:7c:01:87:f4:86:c6:91:4e:8d:e1:47:0f:6e:38:8d:bb:76:
         21:07:1c:e9:b3:8c:a1:8e:10:ba:bd:2f:94:52:85:09:52:a3:
         54:8d:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:23:12 2024 by rpki-client on console-fra.rpki-client.org