Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f459e60e-a9cc-3442-aedc-30067b625e05.roa
File:                     f459e60e-a9cc-3442-aedc-30067b625e05.roa (raw, json)
Hash identifier:          jx4bWY3oI4Yez8Ev3I+vsMGHT9VhJl5pqWWfkTqCUTA=
Subject key identifier:   FB:66:A1:45:5C:6D:03:37:C1:15:30:5B:B4:FC:A6:D9:68:4C:74:85
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D2CCDC6C
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f459e60e-a9cc-3442-aedc-30067b625e05.roa
Signing time:             Sat 20 Jun 2020 17:35:40 +0000
ROA not before:           Sat 20 Jun 2020 04:00:00 +0000
ROA not after:            Sat 30 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        65.54.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d2:cc:dc:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 20 04:00:00 2020 GMT
            Not After : Mar 30 04:00:00 2030 GMT
        Subject: CN=1c2f4ea8-f196-41ce-b94b-3c441f7e8bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:d2:5e:74:63:78:30:e1:07:e9:92:30:56:
                    b4:cb:7e:8f:4a:ce:a1:25:b7:1e:c4:8c:d3:bc:68:
                    62:ca:1a:b2:b2:a1:d5:62:d1:db:41:f7:e9:da:37:
                    e1:59:c9:d6:89:d8:fd:e0:60:73:fd:af:ce:59:57:
                    64:98:d2:ad:68:b1:93:7b:fa:ed:5a:97:c1:57:ee:
                    19:56:f4:02:45:6e:1d:f5:fd:6a:a6:89:00:3a:63:
                    63:28:49:ee:64:7f:46:72:bb:bc:ac:41:6b:f4:5d:
                    54:18:f8:dd:ea:c0:d2:7a:9f:0a:9e:c8:e1:20:9e:
                    ad:88:81:d7:be:97:6c:bb:ef:d5:09:55:ef:4a:3a:
                    80:e3:a6:03:16:f3:c7:3b:db:f6:f6:1a:6e:87:e2:
                    c0:c9:56:a2:07:bf:0e:54:08:e5:5f:68:95:63:1c:
                    84:36:e6:f2:39:c8:a9:54:48:6d:a5:66:5a:08:93:
                    61:e4:eb:e1:7c:7a:c5:63:5b:2e:aa:07:d8:5d:5e:
                    31:24:8c:bc:36:6f:d4:0f:a2:6e:cd:96:00:39:c0:
                    6b:b6:9b:bd:c2:cc:96:01:e7:8c:8f:dd:82:ed:7f:
                    ba:6c:41:5f:7d:e8:b4:7d:0d:23:8b:2c:ad:31:5b:
                    58:62:e5:79:c6:ac:c0:7f:b0:e9:49:19:40:d3:fa:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:66:A1:45:5C:6D:03:37:C1:15:30:5B:B4:FC:A6:D9:68:4C:74:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f459e60e-a9cc-3442-aedc-30067b625e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.54.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c1:0b:5d:e5:ae:09:46:6e:a4:6e:bf:44:95:98:f7:0f:b8:
         65:f2:e3:97:14:ff:50:e9:12:05:c6:4e:ab:32:bd:d8:2b:eb:
         46:7e:3c:2e:cc:a6:e2:17:86:e4:7a:78:17:b2:e3:2e:f8:41:
         68:c0:a1:f2:d9:42:7b:5e:0e:a2:c7:eb:89:b9:ad:63:02:44:
         aa:1e:75:23:aa:4f:62:82:4a:2f:37:af:47:bd:67:42:0b:e4:
         45:60:59:16:fc:15:ce:45:11:88:57:ef:e2:5e:50:e2:2b:ed:
         55:32:97:f8:92:ff:9c:0b:de:cb:dc:96:7e:67:2d:36:0e:60:
         71:1c:3c:8f:8f:0f:f0:74:fb:ad:43:7e:e7:3f:94:30:1b:41:
         4f:38:16:a7:a9:37:69:47:34:57:66:19:ee:d6:9d:ae:99:27:
         9d:3e:2c:02:93:b7:80:b3:4c:3e:d4:a7:19:90:93:61:9a:cb:
         95:95:63:a7:83:c0:11:5d:bd:c2:d4:7c:06:7e:c8:3d:f5:52:
         6a:55:24:d9:23:9c:4f:b6:a6:86:61:d3:1f:eb:d1:fd:9f:11:
         2a:6b:95:9a:c7:70:04:9f:3b:00:19:cf:30:eb:89:b0:30:13:
         e5:ea:3c:92:be:dd:04:e3:d4:bf:8a:16:7d:25:68:76:2b:9b:
         3a:d0:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:13 2024 by rpki-client on console-fra.rpki-client.org