Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9323417-dea1-3856-9c28-b8557b6d6748.roa
File:                     b9323417-dea1-3856-9c28-b8557b6d6748.roa (raw, json)
Hash identifier:          hpIPVu/ezyf3E0DSNKzivkghVGHNHKzdbVxcVD467cs=
Subject key identifier:   F6:0A:6A:D9:D4:B0:CA:20:D3:29:2B:E0:F2:54:B2:C8:A6:0B:BF:08
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732FC35AE6
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9323417-dea1-3856-9c28-b8557b6d6748.roa
Signing time:             Wed 08 Jul 2020 18:49:58 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Tue 09 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        104.208.0.0/13 maxlen: 13

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:c3:5a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Apr  9 04:00:00 2030 GMT
        Subject: CN=11e85b6e-06b3-4cbc-987d-59de212248d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:80:5d:4f:9a:ee:33:be:c0:a2:39:20:77:64:
                    0b:fe:8e:c1:c2:67:55:95:ff:75:8c:8a:75:9f:db:
                    84:a6:93:51:e2:3c:c8:ad:4e:4d:8b:65:be:6d:9f:
                    45:28:5e:da:ee:0f:ea:13:85:06:7f:ed:e0:f2:85:
                    6b:2d:32:e7:ff:81:c9:44:f5:f1:db:9b:56:5a:42:
                    a7:62:a4:4a:0e:fe:98:79:be:df:76:d3:92:dc:fe:
                    99:45:c2:41:63:4e:cd:3d:2d:65:3c:8a:ff:e4:80:
                    0b:42:07:29:83:e2:c7:e2:40:1f:96:f5:9a:d8:46:
                    cf:a5:15:26:ff:77:f2:d9:63:25:4f:5f:76:eb:88:
                    cc:3d:fc:ca:a3:af:46:03:9b:81:6c:fb:3d:de:ba:
                    39:cd:a7:09:ef:ce:44:41:8a:73:50:c5:ea:46:ca:
                    c8:af:d2:ec:8a:82:a1:63:12:a3:98:e1:58:88:a6:
                    a7:e8:87:41:9a:c8:31:ae:41:14:52:a4:9f:d7:87:
                    28:09:35:8d:93:47:e6:70:0e:8c:83:e5:95:94:22:
                    32:7a:77:62:a3:ca:36:a0:11:5e:fd:6a:ef:6e:95:
                    08:6c:0c:c7:fa:dc:10:13:7d:98:e1:e3:d4:31:4c:
                    ee:2d:3f:cd:47:d7:24:d1:7f:2c:7f:e7:af:9b:fe:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0A:6A:D9:D4:B0:CA:20:D3:29:2B:E0:F2:54:B2:C8:A6:0B:BF:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9323417-dea1-3856-9c28-b8557b6d6748.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.208.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:15:7d:61:ab:aa:52:a9:1c:65:48:77:39:42:e9:cf:c1:a7:
         ad:82:f2:dc:ba:69:1c:ce:12:b2:55:69:c8:f8:9b:de:fe:64:
         29:ef:8b:a4:77:20:f4:0b:1c:e3:fa:85:98:7e:67:80:87:a3:
         9e:76:d1:d3:1d:ce:e9:2e:f7:b3:6d:1e:bc:07:7b:ce:22:f4:
         ad:0c:d2:74:ad:aa:f5:42:f0:c0:46:52:51:f6:3d:1d:a4:c4:
         5b:2f:87:97:07:6c:6f:1c:e1:2f:5e:93:fb:cf:22:f8:49:a3:
         2a:bc:44:8e:79:e7:93:95:b3:e2:7a:c9:38:af:45:a9:26:87:
         6e:62:ab:da:3d:18:3d:0a:11:94:39:b9:03:e1:2c:ae:04:1e:
         31:1b:57:b2:e9:92:07:e6:13:8a:db:9c:3f:d6:52:71:cb:8b:
         ba:07:f4:6d:bc:2f:f8:67:11:aa:31:9e:0a:09:2b:71:41:69:
         2e:54:0a:4d:5e:1b:3e:e9:fd:03:26:bf:21:22:1c:d4:86:d7:
         58:e0:77:a4:99:58:1e:07:69:34:da:ec:88:77:d0:72:22:87:
         58:f5:60:09:17:ec:26:cb:53:5c:ed:49:63:4a:25:0a:93:26:
         b5:af:8c:4e:ff:bf:99:a3:a3:97:12:b8:e8:45:de:2e:ce:e6:
         27:1e:cb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:12 2024 by rpki-client on console-fra.rpki-client.org