Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8faf29f1-8543-33e4-b466-d3469b6f4397.roa
File:                     8faf29f1-8543-33e4-b466-d3469b6f4397.roa (raw, json)
Hash identifier:          WzWOCH8tDBWtEIUni5Gfre1hL813w9hMK78gUm/XBlA=
Subject key identifier:   F8:FF:C1:3D:2B:EF:6C:1B:0B:8A:1D:D8:E4:7A:01:6B:36:CA:82:53
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D2CD68D1
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8faf29f1-8543-33e4-b466-d3469b6f4397.roa
Signing time:             Sat 20 Jun 2020 17:36:16 +0000
ROA not before:           Sat 20 Jun 2020 04:00:00 +0000
ROA not after:            Thu 07 Mar 2030 05:00:00 +0000
asID:                     8068
IP address blocks:        65.54.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d2:cd:68:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 20 04:00:00 2020 GMT
            Not After : Mar  7 05:00:00 2030 GMT
        Subject: CN=17924364-8db3-4994-bf7d-1021c9ce0a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:ef:a9:26:f0:b2:79:21:f8:14:88:43:1f:
                    2a:31:c2:19:5f:72:75:97:35:a0:d4:24:2a:bc:a0:
                    86:db:7c:c8:d9:b3:95:f5:31:8e:4a:fb:ef:5a:81:
                    db:d1:71:e4:5b:22:bf:0c:8b:f2:9c:85:48:43:9f:
                    19:c9:51:1f:96:8f:b1:ce:f4:1d:0d:02:32:16:77:
                    ef:db:7f:02:cb:37:9c:a9:64:aa:5c:91:aa:29:73:
                    70:a7:8c:41:6f:a0:1d:04:95:df:63:43:1d:9f:4e:
                    c9:aa:d9:3f:48:1a:e6:e6:ca:91:8a:07:71:b1:d1:
                    1b:11:ef:d8:b7:9f:41:cd:f2:a0:a8:75:df:d2:39:
                    01:59:4c:1e:c7:e4:21:6b:85:1b:33:2a:13:6b:83:
                    e0:93:03:a1:5e:14:44:95:de:08:51:1f:00:fa:6b:
                    13:77:91:fa:dc:34:55:45:b3:10:43:2c:1c:33:5a:
                    01:e9:a1:61:c5:21:e4:b5:b4:03:68:a5:4e:6b:52:
                    56:ad:57:ff:69:4e:0c:6c:96:19:d3:d7:60:8b:d1:
                    d2:21:65:90:d7:ae:5f:f5:07:46:15:34:76:2f:a1:
                    89:3e:44:8e:a6:9e:2b:c5:22:c4:af:8f:d7:2c:23:
                    da:d0:1e:dc:8e:af:48:0c:c6:eb:a7:18:16:d9:71:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FF:C1:3D:2B:EF:6C:1B:0B:8A:1D:D8:E4:7A:01:6B:36:CA:82:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8faf29f1-8543-33e4-b466-d3469b6f4397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.54.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:0a:02:ea:c5:cf:c1:70:c2:26:55:5f:68:a0:95:7c:db:
         ab:34:6b:8e:e1:8c:cc:bf:78:28:54:31:d5:e9:52:b9:90:82:
         cd:24:d4:d8:e4:d9:f4:c6:60:4d:66:62:fc:ca:4f:19:0e:b3:
         b5:f5:92:7e:34:f8:99:5c:d3:fb:de:a6:fa:9c:2a:ff:d7:7b:
         a7:54:7c:c9:b8:7e:95:19:90:7b:34:1f:a0:16:31:ba:66:1a:
         42:8a:cf:1e:41:11:17:2c:04:4e:cd:be:37:01:46:bf:58:35:
         e4:f4:cb:b2:97:be:5c:c0:fc:94:3e:2f:7f:9e:6a:b0:60:6e:
         d8:e7:ed:23:48:0f:89:8b:6f:85:08:b5:37:fd:94:2f:94:47:
         07:ca:64:19:48:98:ff:01:9c:0c:0f:4f:98:29:c3:44:9a:8d:
         c7:86:37:cc:4b:31:df:87:50:ee:2a:8f:92:30:b4:bb:69:d3:
         1a:b1:3a:7f:d6:43:8f:db:ac:99:a4:48:43:e4:8a:12:40:cb:
         40:c1:7d:b9:31:b6:84:d0:2b:d2:93:67:6d:3b:58:9f:85:58:
         fe:23:df:9e:33:4d:20:f9:7f:a0:e9:72:8a:c1:62:d3:58:b7:
         62:18:2d:df:63:bf:58:05:6d:4f:d5:6a:31:c9:b2:b0:59:82:
         fd:f0:4d:18
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BctLNaNEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA2MjAwNDAwMDBaFw0zMDAzMDcwNTAwMDBaMC8xLTArBgNVBAMTJDE3
OTI0MzY0LThkYjMtNDk5NC1iZjdkLTEwMjFjOWNlMGE5YjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALby76km8LJ5IfgUiEMfKjHCGV9ydZc1oNQkKryg
htt8yNmzlfUxjkr771qB29Fx5FsivwyL8pyFSEOfGclRH5aPsc70HQ0CMhZ379t/
Ass3nKlkqlyRqilzcKeMQW+gHQSV32NDHZ9OyarZP0ga5ubKkYoHcbHRGxHv2Lef
Qc3yoKh139I5AVlMHsfkIWuFGzMqE2uD4JMDoV4URJXeCFEfAPprE3eR+tw0VUWz
EEMsHDNaAemhYcUh5LW0A2ilTmtSVq1X/2lODGyWGdPXYIvR0iFlkNeuX/UHRhU0
di+hiT5EjqaeK8UixK+P1ywj2tAe3I6vSAzG66cYFtlx+NECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBT4/8E9K+9sGwuKHdjkegFrNsqCUzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzhmYWYyOWYxLTg1NDMtMzNl
NC1iNDY2LWQzNDY5YjZmNDM5Ny5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEE22jBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAI/cKAurFz8FwwiZVX2iglXzbqzRrjuGMzL94KFQx1elSuZCCzSTU2OTZ9MZg
TWZi/MpPGQ6ztfWSfjT4mVzT+96m+pwq/9d7p1R8ybh+lRmQezQfoBYxumYaQorP
HkERFywETs2+NwFGv1g15PTLspe+XMD8lD4vf55qsGBu2OftI0gPiYtvhQi1N/2U
L5RHB8pkGUiY/wGcDA9PmCnDRJqNx4Y3zEsx34dQ7iqPkjC0u2nTGrE6f9ZDj9us
maRIQ+SKEkDLQMF9uTG2hNAr0pNnbTtYn4VY/iPfnjNNIPl/oOlyisFi01i3Yhgt
32O/WAVtT9VqMcmysFmC/fBNGA==
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:24 2024 by rpki-client on console-ams.rpki-client.org