Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0836944-5726-364b-9064-3a3b2f35d5cb.roa
File:                     d0836944-5726-364b-9064-3a3b2f35d5cb.roa (raw, json)
Hash identifier:          QjGicyXE8qmdWwIBHZ13pFE7UI9TLoHmztRPymijrYY=
Subject key identifier:   F1:0A:A3:B9:E7:0D:01:BA:27:71:3C:22:2E:72:89:40:1C:15:A4:12
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FE3BA3
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0836944-5726-364b-9064-3a3b2f35d5cb.roa
Signing time:             Sun 21 Jun 2020 17:47:42 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Tue 05 Mar 2030 05:00:00 +0000
asID:                     8068
IP address blocks:        13.107.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:fe:3b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Mar  5 05:00:00 2030 GMT
        Subject: CN=9d57fa9b-5ace-4213-8b8b-616b72a24fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:a5:95:9f:a0:de:e2:a3:ed:f1:02:11:96:
                    78:eb:99:f0:a6:b0:22:05:e4:b7:5c:77:eb:af:1c:
                    b3:e1:71:4d:fc:c0:26:c2:bb:03:57:7c:74:32:59:
                    0d:27:c4:93:b0:76:22:6e:56:34:50:50:51:b5:de:
                    f7:cd:f9:7b:b4:a2:ff:f0:ed:bd:19:27:84:fb:59:
                    49:26:9d:22:20:21:13:9f:fc:7d:dd:45:d9:53:9d:
                    79:b5:bd:a9:26:d2:ef:fa:24:79:7a:45:ca:62:b9:
                    20:6c:c9:15:5e:b1:08:3f:d6:51:6a:85:83:71:81:
                    19:1b:ea:64:28:ec:87:9a:84:3b:3d:77:50:e1:57:
                    43:f0:b4:33:86:cc:82:37:c0:a0:d4:2e:05:90:28:
                    26:32:3d:b5:0f:00:74:b6:40:03:e0:59:94:1a:56:
                    f9:99:33:bf:3a:fa:f9:ad:cf:e7:02:fe:ea:38:95:
                    c0:39:41:fb:69:73:d7:76:b9:bc:92:75:2f:ab:72:
                    0a:3e:ad:c3:0a:e3:d4:f5:c3:ca:81:b1:3f:af:59:
                    8d:73:90:0c:3e:82:4a:4b:03:f9:eb:2a:5d:08:56:
                    a0:a2:9a:d2:3d:1e:dd:12:e0:81:cf:54:d9:49:79:
                    c9:36:6a:fa:59:96:47:d6:bb:46:f2:8e:be:ef:ac:
                    3e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0A:A3:B9:E7:0D:01:BA:27:71:3C:22:2E:72:89:40:1C:15:A4:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0836944-5726-364b-9064-3a3b2f35d5cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:3d:a3:21:a0:ea:ce:c7:c1:28:6f:c2:c2:5d:05:27:33:6d:
         5e:af:99:f9:7d:73:c2:ad:40:99:7b:0b:7a:67:ca:46:b4:f9:
         0e:f2:0f:c7:10:1f:f0:a5:14:0b:b2:14:16:6c:4a:36:42:4b:
         fa:bf:f0:c4:bf:3a:1f:2f:47:4b:a1:84:e9:10:50:88:7b:8d:
         26:32:09:fa:6c:79:d1:e2:2e:02:3a:53:24:c7:18:ec:80:0e:
         ee:94:c7:f2:7a:e2:4c:56:dc:46:3e:a9:16:31:c6:8a:52:70:
         1a:4a:3a:c6:ce:57:58:a8:d7:a6:9f:46:70:19:a8:b5:0c:ba:
         9f:ca:89:b1:be:7e:a3:84:ce:5c:3c:04:0f:2d:ad:55:da:0d:
         42:08:ff:75:13:b6:cb:4a:21:1e:d8:e3:93:6d:a9:83:ad:19:
         53:d8:71:82:5c:0c:e7:05:21:b4:97:08:9a:32:af:e4:b8:c9:
         24:0d:1c:9f:17:32:5c:2a:0c:00:d2:1d:79:bf:e6:8f:8c:af:
         61:ee:a7:41:a0:23:10:d1:3e:cc:4c:a3:ea:0f:8c:f7:ee:77:
         4e:9a:7e:27:75:a3:8d:d9:31:11:fd:8e:52:e1:67:50:50:41:
         4d:55:10:d6:6a:73:65:58:c8:c5:e7:56:90:cf:0b:20:67:7e:
         2a:2b:5b:43
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bctf+O6MwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA2MjEwNDAwMDBaFw0zMDAzMDUwNTAwMDBaMC8xLTArBgNVBAMTJDlk
NTdmYTliLTVhY2UtNDIxMy04YjhiLTYxNmI3MmEyNGZiMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMbupZWfoN7io+3xAhGWeOuZ8KawIgXkt1x3668c
s+FxTfzAJsK7A1d8dDJZDSfEk7B2Im5WNFBQUbXe9835e7Si//DtvRknhPtZSSad
IiAhE5/8fd1F2VOdebW9qSbS7/okeXpFymK5IGzJFV6xCD/WUWqFg3GBGRvqZCjs
h5qEOz13UOFXQ/C0M4bMgjfAoNQuBZAoJjI9tQ8AdLZAA+BZlBpW+Zkzvzr6+a3P
5wL+6jiVwDlB+2lz13a5vJJ1L6tyCj6twwrj1PXDyoGxP69ZjXOQDD6CSksD+esq
XQhWoKKa0j0e3RLggc9U2Ul5yTZq+lmWR9a7RvKOvu+sPnkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTxCqO55w0BuidxPCIucolAHBWkEjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2QwODM2OTQ0LTU3MjYtMzY0
Yi05MDY0LTNhM2IyZjM1ZDVjYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA1rNjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAJz2jIaDqzsfBKG/Cwl0FJzNtXq+Z+X1zwq1AmXsLemfKRrT5DvIPxxAf8KUU
C7IUFmxKNkJL+r/wxL86Hy9HS6GE6RBQiHuNJjIJ+mx50eIuAjpTJMcY7IAO7pTH
8nriTFbcRj6pFjHGilJwGko6xs5XWKjXpp9GcBmotQy6n8qJsb5+o4TOXDwEDy2t
VdoNQgj/dRO2y0ohHtjjk22pg60ZU9hxglwM5wUhtJcImjKv5LjJJA0cnxcyXCoM
ANIdeb/mj4yvYe6nQaAjENE+zEyj6g+M9+53Tpp+J3WjjdkxEf2OUuFnUFBBTVUQ
1mpzZVjIxedWkM8LIGd+KitbQw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:07 2024 by rpki-client on console-ams.rpki-client.org