Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b59a9a6e-3377-39b4-8f29-dbdc3f5a2f1a.roa
File:                     b59a9a6e-3377-39b4-8f29-dbdc3f5a2f1a.roa (raw, json)
Hash identifier:          nPiq7A7aWalNT/ZGvos19lBYgfg5L+tbPQpMg9TKB74=
Subject key identifier:   BC:1D:E6:B7:03:EE:C5:FD:FD:F8:98:B7:F7:D7:2A:4C:F8:FE:5E:DD
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FF4E80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b59a9a6e-3377-39b4-8f29-dbdc3f5a2f1a.roa
Signing time:             Sun 21 Jun 2020 17:48:52 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Thu 04 Apr 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:ff:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Apr  4 04:00:00 2030 GMT
        Subject: CN=eb089f20-c833-4e96-ae5d-0299e7a80d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:bb:34:cf:25:5c:7e:f5:26:95:d2:ca:c3:
                    09:dd:3a:03:e2:eb:62:68:8f:07:60:2b:6f:2e:b1:
                    30:a7:8d:a3:05:af:b9:c0:e8:20:f3:e5:f1:91:cd:
                    e2:89:6f:d5:5c:d4:1d:a7:19:89:60:7d:17:74:fd:
                    b9:90:a3:38:9f:71:3a:1d:43:b0:dc:0f:d1:4b:7d:
                    75:d9:1d:6b:a5:a5:98:8a:92:63:7b:cb:52:b0:fd:
                    1f:0f:c6:d2:ea:d4:91:b6:77:5f:6c:f8:a5:e9:7c:
                    f3:27:73:7b:3d:de:18:ee:39:c1:76:92:51:a8:8d:
                    45:1c:0b:b0:11:72:66:28:9c:f3:a6:0e:0b:0d:6e:
                    8d:5f:ea:6f:05:36:5a:f1:0e:8d:f7:3b:fa:df:98:
                    a7:4b:6d:0d:07:50:8a:1a:eb:50:e3:f0:ca:59:fd:
                    dc:dc:3e:ae:85:7a:e5:9b:4c:3a:00:23:f0:15:6a:
                    bd:4c:0f:00:fd:aa:31:9a:70:4e:ed:80:be:56:53:
                    09:90:0b:45:0d:00:7b:fc:b4:66:71:fb:b0:26:05:
                    b9:9e:d4:3f:29:c7:45:6f:70:bb:bd:b4:6f:22:c3:
                    fe:35:d6:54:22:9a:f1:03:ce:b4:2a:d8:18:7e:30:
                    8d:6b:1d:9b:f4:b4:1a:07:e8:4a:b4:f8:fe:57:5f:
                    4b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:E6:B7:03:EE:C5:FD:FD:F8:98:B7:F7:D7:2A:4C:F8:FE:5E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b59a9a6e-3377-39b4-8f29-dbdc3f5a2f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4f:d6:7f:16:15:dd:d2:1f:51:a6:df:2c:5d:a5:9b:82:aa:
         9c:c2:1d:74:ea:d8:30:d1:42:5b:a6:8c:14:73:74:bf:f0:92:
         1b:8d:9c:88:ea:43:e1:1a:f3:a2:64:ef:c1:b6:2c:6a:d6:0f:
         1c:7e:c8:d7:1e:07:e8:e1:ba:9c:27:7e:ec:82:76:2f:13:79:
         33:60:22:f8:42:64:bb:9d:01:92:97:78:55:40:92:4b:c9:ec:
         64:51:2e:98:e2:24:79:75:4a:35:b5:be:56:5e:06:51:33:30:
         10:78:bc:2f:f5:3d:22:71:f1:ab:5d:9d:65:e8:25:7e:f9:78:
         7c:3f:20:4b:23:96:19:16:f7:47:25:11:3b:7c:f7:4d:bd:72:
         a8:cf:ed:ab:2f:da:33:da:7b:42:38:51:f7:3d:17:f3:f0:fa:
         3b:71:51:ac:2a:31:a6:3c:f1:29:d4:26:22:f7:74:2d:d4:53:
         dc:d8:68:ab:ab:ee:d3:2f:7d:2e:72:ab:8e:96:d9:ec:bb:a8:
         5a:f8:8f:9e:48:b3:fd:ff:85:52:06:b2:d0:24:ac:a7:e9:22:
         33:95:ef:bd:c2:d9:79:70:2c:b2:bd:2f:72:3c:4d:03:40:12:
         9f:d6:af:b0:47:96:aa:5d:2f:d3:2a:e6:b7:75:71:a8:15:0b:
         60:c9:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:06 2024 by rpki-client on console-ams.rpki-client.org