Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea162157-11ac-30ba-b103-99c277926c40.roa
File:                     ea162157-11ac-30ba-b103-99c277926c40.roa (raw, json)
Hash identifier:          9Ym3k8wv670+w6CnMXQiHIDdt+OFHdbjBBY91mD+geA=
Subject key identifier:   30:ED:07:19:F7:8E:5F:F9:42:C0:51:8B:1C:4B:9E:F9:59:43:88:41
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732FC3679E
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea162157-11ac-30ba-b103-99c277926c40.roa
Signing time:             Wed 08 Jul 2020 18:50:02 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Fri 12 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        104.40.0.0/13 maxlen: 13

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:c3:67:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Apr 12 04:00:00 2030 GMT
        Subject: CN=25a527fb-71f8-45da-8d69-45d5f8a45dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:6f:be:9a:85:24:30:58:02:85:94:22:1d:
                    f4:12:ff:ed:66:d5:ce:f1:5c:78:5f:ab:6a:cb:dd:
                    4e:0f:f4:55:dd:2b:19:4a:f7:6e:15:1b:cf:aa:ba:
                    07:bf:e1:e1:06:09:5a:e6:23:63:cc:d4:03:0c:97:
                    9b:84:d1:1a:79:48:68:cb:f0:a7:c4:3b:95:7d:be:
                    00:17:df:86:99:9f:80:7e:4f:60:f7:63:d6:09:4c:
                    87:44:5f:6c:49:54:c0:25:58:7d:7f:f2:3b:f9:f4:
                    63:ef:c3:3b:97:ec:1c:4f:85:df:b1:88:df:68:12:
                    2e:0a:6e:8a:e1:12:3c:69:2b:6d:ca:92:08:42:8e:
                    92:c6:01:14:31:a4:8b:f2:b2:28:78:1e:ef:5d:0c:
                    67:94:c8:26:ff:af:14:cd:09:c0:1b:fb:ea:46:4e:
                    ed:55:11:b2:cf:10:31:e2:e3:7b:f7:2b:00:34:a2:
                    a4:62:40:33:2e:34:8b:24:95:05:aa:8f:28:ff:23:
                    2b:83:dc:84:d2:99:f1:87:ad:b3:ac:e4:c2:ca:19:
                    c2:77:92:d0:88:68:fa:df:33:82:de:69:55:40:06:
                    0b:a7:43:11:ed:d7:f1:06:82:1a:49:08:fe:b3:f7:
                    54:00:0d:ab:d3:46:03:77:f1:60:c5:ac:47:58:65:
                    be:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:ED:07:19:F7:8E:5F:F9:42:C0:51:8B:1C:4B:9E:F9:59:43:88:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea162157-11ac-30ba-b103-99c277926c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.40.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:74:06:00:a9:fb:dc:fe:0b:fe:91:ee:e2:e1:3e:f7:46:ce:
         8a:fa:a6:49:c8:d8:4d:dd:ba:0e:c2:67:e2:40:1b:99:c4:fc:
         8d:1f:07:7b:97:cf:dc:0f:88:e1:ba:69:90:fc:9d:98:ff:89:
         67:5a:7c:f7:db:1c:c6:4e:f6:a0:4c:c7:15:49:69:cd:11:e2:
         1f:74:12:21:21:01:be:fa:4a:d4:a2:f4:47:b8:3d:c5:e8:66:
         67:40:10:03:fe:0f:de:51:a6:b3:1e:cf:6b:5b:9d:66:7c:3c:
         35:e5:87:ba:3e:6b:bc:bc:d7:e8:61:89:ea:7e:18:a5:b5:f7:
         68:9f:c6:c1:c4:ff:27:df:38:fb:c9:0f:50:49:96:56:af:1b:
         59:77:15:2b:97:8f:ed:06:b3:6f:5b:e4:39:66:09:c9:33:50:
         cc:8c:38:ff:71:e4:22:d7:ab:3d:28:ce:2b:de:32:37:97:1e:
         bb:28:be:53:0d:a5:3f:d9:e5:de:bd:ec:89:bc:98:a3:b3:d0:
         c6:3e:d8:6f:4f:e5:bc:8e:5b:5d:a8:c0:fb:01:a1:2a:84:69:
         2d:a4:e6:a4:90:e5:9f:45:78:aa:5c:1f:b9:50:88:cf:0f:fb:
         5f:7e:5d:74:f9:a1:d0:d2:b7:6b:d7:c8:74:b9:2f:3d:0b:fb:
         ed:e6:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:24 2024 by rpki-client on console-ams.rpki-client.org