Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae65cd1d-2e95-3391-87df-c9aacea43ada.roa
File:                     ae65cd1d-2e95-3391-87df-c9aacea43ada.roa (raw, json)
Hash identifier:          oZJyBtFZQofxRBF/IoscIHCM0xVc6SfwV7XvfDCpZ/U=
Subject key identifier:   13:02:03:7F:38:F4:C0:68:40:1F:C8:5E:0C:6B:0A:B3:DC:2E:94:E3
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732A0CAE1B
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae65cd1d-2e95-3391-87df-c9aacea43ada.roa
Signing time:             Tue 07 Jul 2020 16:12:20 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Wed 10 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        20.64.0.0/10 maxlen: 10

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:0c:ae:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Apr 10 04:00:00 2030 GMT
        Subject: CN=cd4f6e1a-43a7-4085-9391-737b975784b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:46:e4:8e:33:ed:e7:2e:3b:67:a9:fc:0b:
                    84:02:44:ad:fb:c7:96:f2:c0:2a:79:8a:47:82:e2:
                    1b:c7:4b:b0:e6:02:33:05:8e:6f:9d:9d:41:7f:42:
                    f2:ef:7c:b9:6a:57:a2:51:34:dd:8e:fa:10:43:3c:
                    6d:5c:69:19:69:50:39:32:89:44:eb:56:e5:0c:69:
                    98:26:89:9f:f9:43:0b:f6:8a:e6:ce:4d:a3:9d:84:
                    7b:44:fc:e3:8f:37:1e:fe:71:ac:af:0f:a6:3f:63:
                    f3:56:b2:8f:35:fd:8d:d8:78:a0:8f:75:26:95:e4:
                    f8:fd:52:f6:fe:af:a3:9f:a4:0b:92:ee:84:38:9c:
                    99:1e:0f:03:54:f7:d8:b7:74:34:c8:d7:e5:16:db:
                    61:d1:5b:94:5b:72:14:80:98:01:ba:aa:11:dd:99:
                    0c:65:19:96:7b:df:4d:f6:30:57:96:6f:97:2d:e7:
                    9c:e3:16:59:2c:ba:ac:4c:29:a8:9e:a9:6e:a2:94:
                    5c:36:83:ab:88:2a:01:e4:45:75:db:1e:3c:9c:90:
                    ab:01:99:d7:8b:1b:7f:c4:de:93:5d:b8:35:93:85:
                    19:dc:07:29:2c:fb:35:7f:72:f5:88:1a:31:05:be:
                    77:b8:fb:27:01:78:ee:01:ac:76:8a:5b:6e:bf:e2:
                    11:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:02:03:7F:38:F4:C0:68:40:1F:C8:5E:0C:6B:0A:B3:DC:2E:94:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae65cd1d-2e95-3391-87df-c9aacea43ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.64.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4d:16:50:f0:2c:83:cb:34:55:81:44:f1:9a:5d:9f:90:4f:
         eb:f4:17:4d:e2:93:bb:f2:dc:d2:b3:7d:e5:47:55:51:99:a0:
         43:8b:3a:2c:95:1c:a3:65:4c:68:17:49:0e:03:13:7e:c2:33:
         cf:92:79:99:84:ac:96:16:58:b3:a2:26:ae:33:41:5e:af:6a:
         d1:68:7c:b6:71:f3:72:94:c4:6d:e0:df:90:a7:c0:7d:dd:63:
         68:fb:cf:63:f4:0b:9c:a4:fc:a3:2e:25:6d:e6:f4:fb:27:49:
         32:91:34:93:93:ac:9b:e2:8e:e2:b0:f6:6a:69:ac:37:31:8d:
         f6:dd:71:96:e7:24:c1:ab:7e:57:30:b6:b0:21:f7:6a:a4:6f:
         4f:21:1e:e5:76:61:bd:b2:6a:cc:d8:d7:b2:3b:28:dc:36:9d:
         3b:f0:f1:fa:d9:14:26:7f:65:2e:ff:6f:30:e2:e1:ec:bb:24:
         05:d4:e0:1f:0c:8a:7d:a9:ae:02:01:b1:14:e4:a7:0c:4c:1d:
         d8:31:30:45:6d:c0:cc:66:d7:83:77:de:4c:70:df:a9:a9:2d:
         49:d2:4a:fb:ba:d1:27:89:c3:6d:e5:9e:52:5f:8d:40:2e:64:
         3f:42:3b:47:05:80:ad:53:1a:90:b6:bc:cb:2d:29:b8:b6:7b:
         b6:12:6e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:00:18 2024 by rpki-client on console-ams.rpki-client.org