Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e08baf6-b922-395b-a118-eb68e7a9f0ae.roa
File:                     9e08baf6-b922-395b-a118-eb68e7a9f0ae.roa (raw, json)
Hash identifier:          Fz9XiR4BIKVTfu6dO8AnV8XGlLhFaFSEBaXDoSBpEMI=
Subject key identifier:   6B:21:6D:0C:79:47:A1:71:C1:DE:65:6F:89:93:AB:C4:B7:0B:F4:89
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FE99F8
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e08baf6-b922-395b-a118-eb68e7a9f0ae.roa
Signing time:             Sun 21 Jun 2020 17:48:06 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Sun 24 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:fe:99:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Mar 24 04:00:00 2030 GMT
        Subject: CN=4bdd1b72-51f2-4667-b542-b35abdb6d141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:00:6c:5f:50:43:15:47:7a:be:bc:e2:de:
                    4c:8a:5d:c9:2e:23:1b:00:0b:e7:c6:24:20:48:50:
                    b3:14:c9:a3:d4:a0:76:3d:17:5b:bb:9e:20:92:d9:
                    8c:bf:7a:95:7b:eb:fc:06:02:a2:54:c9:07:5d:1f:
                    05:c1:77:7f:c8:b3:72:41:00:e3:85:28:97:bb:6d:
                    d3:74:0e:58:ef:de:87:e1:68:18:0e:10:6a:06:d2:
                    a0:c6:40:c4:77:ba:83:84:42:d6:0a:63:b2:21:55:
                    c1:10:d1:1c:ba:7c:86:b3:dc:82:24:9b:e5:c9:06:
                    3e:58:3a:bc:96:fb:44:16:58:01:f0:68:71:cc:4c:
                    96:4c:5f:f5:68:d3:14:14:f6:f4:5f:56:22:f5:c6:
                    36:6b:82:0f:f0:8a:c2:23:67:bf:5e:aa:0d:49:a6:
                    6c:a0:ed:f0:21:e0:ef:37:48:5b:d4:ea:89:28:97:
                    e2:50:2b:82:f4:83:0a:c1:94:bf:ca:4a:f9:67:8c:
                    42:d9:e8:70:f5:1b:7c:51:ed:a9:9b:0a:a4:a9:40:
                    a2:53:15:e9:a0:f5:0a:ff:01:aa:7e:b4:dd:4b:b4:
                    e8:71:f9:4b:c0:2b:5d:97:bc:81:2c:bf:fb:36:23:
                    8c:7d:85:4c:7e:19:36:9f:16:a6:98:c4:4f:92:af:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:21:6D:0C:79:47:A1:71:C1:DE:65:6F:89:93:AB:C4:B7:0B:F4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e08baf6-b922-395b-a118-eb68e7a9f0ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c6:82:ba:73:d1:41:2c:3c:c7:77:34:6c:54:82:e4:b4:ac:
         77:ec:28:7d:12:e0:69:52:d3:a4:dc:8c:cc:74:96:cc:e9:6c:
         09:52:a6:2d:57:83:00:19:85:af:93:59:b4:89:f6:f1:ed:99:
         9d:fd:f7:4a:1e:fb:0e:b1:38:b8:05:82:eb:29:ac:d4:07:35:
         ae:22:91:68:a7:b0:36:ed:e5:44:24:6e:99:f7:75:4f:75:6b:
         24:d5:e2:fc:7a:45:ac:01:64:29:9d:36:1d:0b:a0:bd:35:fd:
         3c:53:7c:e7:0d:d2:c2:b6:1b:41:5d:42:ce:24:82:96:2f:3d:
         80:ec:e9:73:13:89:7d:a9:a5:4b:d1:34:c5:43:01:e3:f4:b5:
         36:fb:15:14:67:cb:c2:5a:46:30:60:e6:ee:74:47:6c:fa:fd:
         6b:5f:a1:24:bd:de:c9:e9:33:34:6f:96:64:2b:6c:06:b8:de:
         a4:81:05:80:c4:17:62:e8:e0:c5:d8:86:dc:a2:dd:a9:8e:22:
         18:f6:0f:b0:40:47:fa:15:33:9e:b3:be:ed:cf:05:89:52:25:
         09:53:6c:9b:20:56:ef:1b:69:ef:07:ed:5b:10:85:a0:a1:6f:
         65:03:51:75:d6:90:5b:8e:a6:f2:ff:ce:95:d1:4d:99:77:31:
         f9:bb:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:24 2024 by rpki-client on console-ams.rpki-client.org