Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ba97b940-5913-3193-a242-679124962b92.roa
File:                     ba97b940-5913-3193-a242-679124962b92.roa (raw, json)
Hash identifier:          bA0NRtDw8eld9sD5kQHImzIWmOKv7rCgkyCnK6LRQ7I=
Subject key identifier:   5F:0B:2F:79:C2:F7:E8:CA:E6:32:E4:4E:1F:08:1A:D0:32:33:9C:15
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FE9F4B
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ba97b940-5913-3193-a242-679124962b92.roa
Signing time:             Sun 21 Jun 2020 17:48:07 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Wed 10 Apr 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:fe:9f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Apr 10 04:00:00 2030 GMT
        Subject: CN=da28f650-9399-4a21-ab53-17a179c301e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b0:75:a4:04:8f:47:d0:96:fb:7d:89:a8:08:
                    5b:7d:86:5c:7f:5e:2d:97:e2:93:97:c7:b2:09:82:
                    52:0d:18:0a:fd:91:c1:36:75:eb:e2:38:a0:ae:26:
                    a2:69:1e:40:9c:14:69:29:4f:09:37:1a:f3:a0:4f:
                    6e:d3:59:bc:66:5b:cd:7c:53:81:16:27:5f:18:8e:
                    b7:e5:38:87:0c:a4:3c:2e:ac:6a:29:34:eb:42:b5:
                    9c:4a:62:7b:18:38:b3:60:9e:4b:a9:24:96:08:cd:
                    ba:99:79:3d:24:24:3d:d4:fb:1a:42:e6:bc:42:87:
                    51:f1:a8:ba:e7:d3:b4:8d:e2:f4:56:af:a1:90:fb:
                    21:18:00:a5:7f:6a:5f:7b:22:17:a3:74:f2:06:2e:
                    85:b2:e4:07:73:6c:5d:ac:6c:37:00:ba:28:5b:70:
                    84:52:e4:dd:03:9a:a7:ad:2a:37:04:fe:81:b0:e2:
                    54:24:3c:63:48:67:48:05:7f:3f:6b:da:4f:fd:65:
                    5e:13:6c:a2:4c:9c:fe:6b:63:76:a7:1f:56:1c:53:
                    89:ae:6a:4b:13:cb:71:02:b8:2a:ad:53:af:63:70:
                    68:05:17:64:4c:e7:c3:33:e4:d3:d2:4a:58:9f:73:
                    19:b1:3e:b9:8c:ac:da:6d:34:86:0f:3c:85:51:63:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0B:2F:79:C2:F7:E8:CA:E6:32:E4:4E:1F:08:1A:D0:32:33:9C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ba97b940-5913-3193-a242-679124962b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ba:29:7e:76:d4:b6:8d:bc:50:d0:93:5f:f6:32:10:68:8b:
         f3:b8:c7:01:c2:db:ad:d4:98:bc:e6:d5:38:79:ab:1c:0f:86:
         90:e3:c2:58:8e:24:be:8f:43:f3:f5:81:6e:22:57:33:44:3d:
         11:ac:12:c3:ca:de:f8:da:32:c7:ea:c4:c7:e4:9f:11:a6:17:
         6d:1d:c0:04:6a:74:3c:e8:ec:af:f5:9f:bd:77:55:df:0c:f5:
         13:9c:a4:61:07:03:d7:94:66:ed:84:dc:e9:d3:2e:7a:ac:64:
         3b:14:42:3c:4f:f6:87:b5:a0:cc:dd:ec:c1:66:bf:85:75:f9:
         86:e9:dd:56:f5:af:8c:44:96:0b:6d:d6:22:c1:46:d3:2c:f0:
         44:ef:fb:89:8c:56:87:e1:5b:1a:07:29:ae:02:fa:fd:9a:85:
         53:ba:22:a4:2b:a8:b5:26:93:e9:c2:c9:5a:47:5d:5e:0d:2a:
         8e:2b:1e:f5:80:8c:4b:ad:ad:1d:92:3e:71:f5:a9:e8:9f:f3:
         63:a0:97:b9:dc:8b:71:d6:16:b4:4f:cc:0d:d4:4a:46:8a:52:
         1b:8d:20:34:e3:ae:f8:30:5f:5e:31:a2:0c:6a:5f:c4:0d:02:
         d0:f6:47:c6:32:10:fa:eb:fe:62:f1:14:6b:67:81:2a:5a:38:
         7b:3e:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:12 2024 by rpki-client on console-fra.rpki-client.org