Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb991cde-f0bf-3df3-9c3a-3e4bb410614f.roa
File:                     cb991cde-f0bf-3df3-9c3a-3e4bb410614f.roa (raw, json)
Hash identifier:          3XILwYR4iHEWvIlhFmvhsq9BEdEttY48mXc/yi6dSsk=
Subject key identifier:   DA:B8:A6:57:3B:AE:43:08:1E:C1:8F:CD:36:24:BE:D4:4A:20:92:5A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732CBD1757
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb991cde-f0bf-3df3-9c3a-3e4bb410614f.roa
Signing time:             Wed 08 Jul 2020 04:44:16 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Fri 08 Mar 2030 05:00:00 +0000
asID:                     8075
IP address blocks:        52.112.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2c:bd:17:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Mar  8 05:00:00 2030 GMT
        Subject: CN=d4004f1e-dc6f-4c13-be3e-abfffcce4e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ef:c5:d9:7a:58:79:29:b8:5d:db:b5:53:e0:
                    54:dc:24:cf:94:f6:f3:81:1f:98:56:bb:f2:88:d6:
                    b1:a1:fd:b9:52:f1:d7:26:0b:92:19:12:82:f8:10:
                    70:5a:53:b2:c8:00:cc:59:02:6a:18:19:1a:bf:eb:
                    17:9e:7e:b8:7b:62:eb:ab:ec:10:6f:d4:92:5f:97:
                    09:12:09:47:2f:7a:07:36:8c:b7:f2:77:5b:60:eb:
                    72:6b:58:84:74:e1:ba:77:62:22:84:4f:29:e5:7f:
                    49:75:82:5d:64:4a:76:6a:38:57:9e:b6:93:d7:42:
                    7a:2c:ba:a4:07:30:fb:33:a9:16:89:d4:a5:41:ce:
                    0b:59:f8:97:0c:89:bf:f1:f7:98:1c:5f:06:23:ac:
                    cc:a9:da:37:21:c0:ae:da:03:06:a8:8b:c6:b7:bf:
                    67:c7:00:f2:c1:5f:79:f1:c1:80:d7:ae:9b:28:78:
                    42:fe:32:5c:29:ff:60:64:23:83:2f:90:29:cd:ba:
                    14:7c:74:33:ae:b7:61:87:66:0f:47:9d:b2:e2:ee:
                    69:38:74:d2:06:c6:2a:db:2b:f7:a4:62:ac:a2:e7:
                    f8:44:bd:f4:e4:11:0f:b4:f3:ad:88:8a:f6:aa:1c:
                    ef:8e:c8:a0:3a:4e:0a:9b:ba:5c:4c:94:f4:04:e0:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B8:A6:57:3B:AE:43:08:1E:C1:8F:CD:36:24:BE:D4:4A:20:92:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb991cde-f0bf-3df3-9c3a-3e4bb410614f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.112.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:57:0f:88:a3:71:b0:5c:82:fb:70:c3:3e:d1:81:52:66:c4:
         f5:bc:9a:70:aa:87:56:27:1f:f7:ca:bb:4f:c4:9a:89:9c:c3:
         b6:15:a1:aa:af:70:1b:03:98:60:8c:a4:00:95:4f:e8:d7:56:
         ec:3e:0c:db:20:c0:5d:0f:29:48:94:1b:79:6b:2d:b9:2b:b0:
         be:c2:e1:12:15:61:d7:a2:93:b1:7b:47:83:f5:98:64:da:61:
         4f:16:1d:b1:62:be:18:fc:80:4e:a6:6c:af:e4:b1:a0:5c:2b:
         f0:73:17:d9:53:0e:f5:52:98:12:37:db:fe:f1:d3:8c:e2:1b:
         2e:0b:76:a7:be:2f:8e:16:41:7d:29:5d:af:b7:c9:83:9a:10:
         f4:d7:88:25:7e:1a:d0:bc:5d:4c:50:40:1f:53:38:34:12:aa:
         f2:55:2c:86:c9:d8:c3:34:2b:7a:a5:f7:b6:9f:10:0c:cc:6d:
         f4:4d:31:52:73:42:d9:6d:8a:49:2d:e8:ca:a8:a9:46:93:63:
         8a:35:93:41:b8:f9:28:64:00:d7:9c:93:27:17:31:37:35:38:
         64:2a:da:f8:f8:85:1f:5c:0a:29:eb:9f:c9:18:48:83:5c:86:
         0d:9d:db:2c:ef:ac:d5:80:b1:88:a5:68:80:49:7d:fc:4e:8f:
         61:d3:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:12 2024 by rpki-client on console-fra.rpki-client.org