Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e523ec2-0932-3118-99ae-cc090cce5eac.roa
File:                     8e523ec2-0932-3118-99ae-cc090cce5eac.roa (raw, json)
Hash identifier:          S6vXzVVWKcgb6TdGQCr21Hve0U5+orHZun8+FV+y3VI=
Subject key identifier:   AD:37:52:61:C1:5A:ED:9F:0D:29:DB:5C:B7:D3:61:1C:B0:62:48:14
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FEEACA
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e523ec2-0932-3118-99ae-cc090cce5eac.roa
Signing time:             Sun 21 Jun 2020 17:48:27 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Fri 15 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:fe:ea:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Mar 15 04:00:00 2030 GMT
        Subject: CN=fad15c5b-ea26-46fd-ae95-5a5ea59ed58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:ff:26:28:ad:54:52:04:31:84:2a:2c:71:2c:
                    68:ec:85:eb:5e:f9:6d:5e:0e:4d:5c:df:d7:c6:72:
                    ec:a5:66:79:e7:24:67:12:80:27:e0:e2:11:64:5c:
                    9a:2b:06:b0:65:9f:f8:0d:37:93:3f:31:2f:fc:c9:
                    41:5e:9f:4a:ea:df:cf:e5:a7:65:6d:74:8c:c0:54:
                    3c:77:5f:78:ac:f7:be:61:fe:17:09:0e:21:24:23:
                    b3:59:b8:96:cc:c4:93:a0:91:cd:80:95:fa:91:34:
                    fb:a5:19:c3:2e:dd:f4:ab:60:d5:b5:25:6e:84:13:
                    32:f7:5b:09:ba:2c:9c:8a:01:cf:41:b1:5f:39:06:
                    ea:64:e1:e9:7e:a2:bd:d7:eb:25:68:95:1a:3e:ba:
                    fd:78:8e:ca:5d:87:58:e4:d1:a3:01:7b:0c:b9:eb:
                    94:88:4c:d8:a8:f8:8e:59:2d:a1:3d:a9:e4:49:1c:
                    c5:12:eb:35:5a:f5:4c:bb:94:5b:9a:7e:6d:25:7e:
                    20:94:e5:dc:dd:46:cb:c0:1a:fd:51:03:bb:27:c6:
                    a8:30:b1:fb:76:c0:16:66:a0:5e:6a:7e:a2:f0:da:
                    04:f9:4e:ba:98:d2:dd:bf:4d:02:3a:de:29:5a:56:
                    17:be:75:96:80:ac:cf:02:4f:1c:1b:79:a7:19:23:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:37:52:61:C1:5A:ED:9F:0D:29:DB:5C:B7:D3:61:1C:B0:62:48:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e523ec2-0932-3118-99ae-cc090cce5eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7e:9f:cd:9c:a1:25:1d:b0:a6:f1:6b:71:32:8f:bb:79:46:
         06:51:9e:0a:cc:05:f2:1a:34:90:69:fd:f4:9b:04:ae:11:29:
         b6:27:10:d1:4c:6d:09:60:06:aa:f5:ea:18:34:dd:80:55:fe:
         32:35:67:aa:e1:ea:0f:2f:f4:fc:58:a2:46:24:2e:0a:39:b1:
         d5:9d:0f:ac:16:3d:fb:1b:3d:27:84:88:78:67:56:2b:3a:f7:
         80:4e:6d:ec:06:aa:74:42:4b:bb:27:7b:bd:3a:a6:63:6d:d2:
         1a:57:76:88:97:db:c8:c0:fa:9f:52:8a:f5:43:5c:0a:d0:cc:
         47:3d:ea:23:01:1a:56:75:20:65:4b:13:21:22:92:21:b5:6b:
         7f:92:f4:1b:dc:19:b6:69:2f:47:19:6a:72:53:e3:97:1f:f5:
         e3:55:40:8a:95:7a:8e:fd:fd:51:00:aa:40:69:c8:44:87:13:
         09:06:8e:ce:08:74:f5:51:f0:44:6c:95:9c:c3:88:ab:ae:32:
         ee:51:29:94:7d:61:13:3d:e7:2b:d5:d7:4b:4b:47:ef:2c:58:
         2d:d0:0d:70:5d:5b:3b:d2:e3:9d:99:25:53:11:e9:d8:5c:96:
         6b:74:79:0d:13:dd:a1:8d:cd:1d:58:a5:2e:81:d6:07:bb:7c:
         08:67:36:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:12 2024 by rpki-client on console-fra.rpki-client.org