Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fadd57c1-2de2-3590-9d26-3b928e550f22.roa
File:                     fadd57c1-2de2-3590-9d26-3b928e550f22.roa (raw, json)
Hash identifier:          OUgEf1B+PZxKdhrgVSKAJV7mlSNzknWBEjxfyiDUahI=
Subject key identifier:   B5:54:A4:8E:B3:C8:AC:31:FB:5C:CC:7D:9F:8B:06:6F:CC:5E:6F:5A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FE6395
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fadd57c1-2de2-3590-9d26-3b928e550f22.roa
Signing time:             Sun 21 Jun 2020 17:47:52 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Tue 12 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:fe:63:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Mar 12 04:00:00 2030 GMT
        Subject: CN=e9978c58-917b-4f7d-aad6-785351ac3470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:ac:c2:96:32:20:56:2b:a5:24:86:6b:df:
                    98:92:53:82:1e:53:b3:9d:6c:0b:9f:f0:25:0d:fd:
                    15:46:29:1c:62:35:d4:75:18:f1:80:3c:de:4c:1d:
                    44:2a:ef:72:e6:91:d2:ca:97:a0:df:f0:38:a2:e9:
                    02:14:91:9e:e0:94:bd:a4:9f:91:ac:1c:2a:1d:0f:
                    e2:d7:01:3c:0c:e3:0d:ea:18:91:17:76:03:e9:af:
                    4a:93:37:00:68:89:78:bd:2c:d0:38:47:1c:ec:9b:
                    a4:5e:51:5f:4e:14:73:f2:9c:86:30:8a:8d:d7:f8:
                    73:d6:9b:9e:1b:a1:3e:45:c3:33:88:ae:78:fc:27:
                    f7:fe:4a:e6:b4:cd:27:81:4c:b6:83:5b:22:8b:f7:
                    b2:f8:e9:f4:3d:79:0b:b9:b7:ff:38:95:4a:82:91:
                    3a:c3:f4:27:08:c8:04:13:13:e8:bd:3f:5e:19:fb:
                    ff:54:cf:16:cd:f1:b6:d4:c0:63:47:7c:ff:3d:75:
                    df:9e:f5:d3:1c:4b:58:6f:c9:7a:55:6e:ec:9d:ce:
                    60:b3:54:f9:95:cd:c2:cc:9e:60:77:d9:bb:2c:21:
                    74:5f:cb:8b:b0:58:60:2e:d8:c8:24:45:9a:f0:73:
                    c8:b8:0a:8e:92:ab:83:97:17:c6:bc:8c:b1:2a:04:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:54:A4:8E:B3:C8:AC:31:FB:5C:CC:7D:9F:8B:06:6F:CC:5E:6F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fadd57c1-2de2-3590-9d26-3b928e550f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:db:e2:75:79:46:63:41:72:15:a0:a9:8a:95:08:88:3a:
         89:b7:9d:0e:5a:12:a1:36:7a:91:c2:2e:fe:0c:79:ff:af:4f:
         81:82:17:3e:1c:86:b1:ef:69:86:c6:2f:31:27:81:17:84:3a:
         ab:28:e5:b2:04:d9:0f:47:c9:11:df:1a:72:74:f0:0b:ee:0a:
         3f:7d:5d:86:8f:e4:7c:b3:5d:9e:ce:79:a1:90:4c:28:da:e5:
         01:9d:6b:9f:f4:eb:ff:cb:7b:6e:92:f9:c6:f9:3c:fc:12:bc:
         af:82:ab:4f:3b:36:06:f2:1f:35:d6:39:33:6f:24:35:10:33:
         62:57:1b:f1:77:ee:8c:98:ec:4c:5d:96:a3:fa:77:d9:5b:73:
         a1:fd:47:c6:24:34:20:db:7a:75:77:dd:74:b5:8b:e7:86:6f:
         ae:7a:f5:b3:88:3f:c8:72:9f:93:74:0f:b4:65:ec:99:b2:d1:
         ad:39:17:cb:e9:94:a3:3c:72:2e:a1:e3:34:68:01:33:66:ad:
         31:4c:37:bb:ce:c5:a1:62:9b:86:dd:6a:b1:e4:0b:a7:1a:14:
         a3:4f:01:93:97:0b:1f:59:59:52:bb:2e:10:a5:02:0a:d7:3b:
         c0:17:af:66:38:eb:d6:46:8b:ba:1e:c0:4b:c4:b6:0b:a6:4d:
         6d:f2:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:52 2024 by rpki-client on console-fra.rpki-client.org