Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01322300-81da-31b2-bdf2-b28ab6be6832.roa
File:                     01322300-81da-31b2-bdf2-b28ab6be6832.roa (raw, json)
Hash identifier:          itwN0Tr/ZUX8uQ6qqBb66nDbELSHw1MGKHgtPvDrwR4=
Subject key identifier:   49:AE:B1:24:D1:A2:28:CD:25:EF:45:D7:43:A5:66:48:F4:49:DB:33
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AB508733
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01322300-81da-31b2-bdf2-b28ab6be6832.roa
Signing time:             Sat 13 Jun 2020 01:34:40 +0000
ROA not before:           Fri 12 Jun 2020 04:00:00 +0000
ROA not after:            Fri 22 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:ab:50:87:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 12 04:00:00 2020 GMT
            Not After : Mar 22 04:00:00 2030 GMT
        Subject: CN=c3e3b3d9-5cd6-4017-90f3-e77afd7bb004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d8:ed:a5:d5:b3:fa:f1:dd:4b:46:61:b5:88:
                    d7:06:63:4f:1c:5e:7b:f1:1b:f5:64:bc:60:be:4b:
                    d0:28:24:e4:13:7a:f6:91:b1:85:03:45:26:4f:01:
                    ed:87:3f:dd:1f:55:ec:12:24:22:4a:ac:0f:b6:98:
                    2d:6b:66:5d:9e:7c:b0:0c:2f:01:e8:a7:50:88:0b:
                    9b:e5:00:6f:9d:30:34:1a:53:8d:87:54:16:fa:00:
                    9a:4e:eb:86:bc:db:aa:71:9c:c9:45:2c:77:e4:fa:
                    b5:f9:27:f3:fa:86:5c:80:f3:a9:9d:d1:d5:6f:54:
                    04:43:fd:6c:fd:83:22:2e:93:9a:98:51:aa:7d:4e:
                    bd:02:d5:ce:cf:5d:57:0e:c5:50:f0:b5:68:44:58:
                    14:51:27:f3:cf:ba:24:2a:e7:7d:fa:dc:9c:94:7d:
                    0e:6c:5b:32:f2:fc:0f:e1:1b:ce:32:f0:31:40:b2:
                    d4:00:27:d1:d6:b5:3e:df:9f:1f:09:1d:a6:a8:0b:
                    29:4d:07:ce:17:81:42:10:17:e3:46:fc:3d:44:25:
                    eb:32:1a:97:cb:9d:fa:0a:2a:9a:1c:d5:c3:a0:86:
                    08:5f:72:55:f3:8e:36:c9:b4:dc:46:1d:df:bb:61:
                    8e:8a:cc:cf:d8:e7:bd:e8:57:24:d6:76:76:d6:a6:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AE:B1:24:D1:A2:28:CD:25:EF:45:D7:43:A5:66:48:F4:49:DB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01322300-81da-31b2-bdf2-b28ab6be6832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a5:f0:48:63:87:3b:64:98:2a:55:7f:b3:7e:fe:31:e6:f7:
         76:8c:66:f3:2b:10:e0:05:1a:99:13:1c:42:17:20:f6:a3:46:
         b6:dd:2a:ae:76:7d:b6:e5:4c:e1:57:94:a1:5c:22:31:ae:7b:
         73:61:7e:15:6d:ee:04:0e:da:69:ae:93:55:86:06:d6:80:ce:
         11:c2:6c:2e:21:ed:c5:89:6c:d2:30:78:16:98:75:d1:46:21:
         e7:16:ed:e0:e9:bd:37:4c:12:40:9e:a7:8e:58:56:7d:68:89:
         e2:0b:63:34:16:4f:77:d1:1e:09:50:a3:e5:fe:68:a9:c4:42:
         cf:a8:8f:4f:e0:1b:f5:1c:6e:88:fa:3c:e4:16:35:ef:ad:c9:
         98:57:78:73:60:09:c0:73:35:68:57:c3:3b:1e:e6:37:10:08:
         9a:74:d5:3d:b3:92:88:37:1f:c2:a9:f5:32:6d:fa:69:7b:ba:
         b4:2b:93:5b:55:fd:c6:76:e4:6c:ad:69:c8:4d:65:5f:7a:26:
         9d:98:51:24:39:85:1a:7e:7c:82:df:ed:90:61:12:39:21:f4:
         7f:a7:0d:ae:27:ac:c0:ee:22:23:da:0a:fa:4a:3d:27:43:b5:
         63:93:06:15:00:a9:1d:dc:06:0a:a4:e4:6a:8d:80:aa:28:84:
         f5:37:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:45:32 2024 by rpki-client on console-fra.rpki-client.org