Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/075e6095-708d-322b-ad93-8707fd68b819.roa
File:                     075e6095-708d-322b-ad93-8707fd68b819.roa (raw, json)
Hash identifier:          MkRewEpvLc9ykKKurrSak93c1L6u3rINQyeNZR8f3/8=
Subject key identifier:   91:3D:0B:6E:5C:1F:5B:C0:E1:97:A5:BA:F9:88:98:D1:8B:28:6A:98
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845ECBE9288B53B1BC499776880
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/075e6095-708d-322b-ad93-8707fd68b819.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     8069
IP address blocks:        20.33.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:92:88:b5:3b:1b:c4:99:77:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=048581e9-145c-4265-8b65-5c7650b82132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:19:75:1c:02:c3:47:f8:f3:03:26:35:54:
                    2c:53:7c:42:e2:4a:12:86:93:49:fb:ee:2d:40:f0:
                    5e:77:d8:5e:6b:ed:58:4b:a9:13:03:5a:85:55:fe:
                    f2:91:89:d9:2c:1a:fe:99:4b:4b:ef:0a:af:a3:cc:
                    2c:b7:bc:77:03:77:b8:c6:f1:b1:a2:59:08:9c:52:
                    e1:cc:da:93:90:6d:9e:0d:a0:24:2a:e5:ad:b4:89:
                    ce:06:23:e9:6c:45:0a:b4:c0:ab:4b:50:1c:c6:3f:
                    0e:02:24:5b:a3:3c:60:96:ba:09:4a:14:ab:f9:33:
                    35:7b:b6:dd:59:4e:90:69:52:56:a5:04:51:21:27:
                    81:33:6e:67:03:72:7e:48:9b:8d:bf:c8:bb:de:c8:
                    e3:7a:8f:b0:0f:25:0f:c9:4c:36:5d:c2:8b:41:d6:
                    ef:31:dc:65:30:e7:5d:03:85:e8:75:78:42:e7:42:
                    64:88:2d:25:d7:32:cd:79:a9:60:c2:b4:d4:66:6b:
                    21:ae:e1:7f:37:7c:63:44:9f:dc:8a:8d:e7:23:27:
                    e5:7d:cf:88:c7:4c:02:5d:66:90:84:d6:d3:eb:5b:
                    13:1b:2d:9b:1e:81:01:02:43:b5:ce:0f:ff:18:b4:
                    29:6d:a6:d9:1a:28:e9:84:08:b7:39:fd:a7:b7:0b:
                    99:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3D:0B:6E:5C:1F:5B:C0:E1:97:A5:BA:F9:88:98:D1:8B:28:6A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/075e6095-708d-322b-ad93-8707fd68b819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:be:c5:64:57:81:cf:90:92:dc:b8:d4:47:6d:35:b9:8f:6e:
         22:e2:9f:6f:dd:d0:83:31:3d:7c:48:a6:cc:f8:16:b0:96:48:
         41:0b:f3:b6:c4:06:36:7a:56:2d:2b:0e:c2:27:9c:09:da:99:
         12:d1:55:53:0c:49:4d:d0:83:d2:8e:83:c7:f9:7e:bb:ca:70:
         3f:ed:ae:cc:a2:af:3d:be:bf:be:df:a7:21:2a:27:ee:47:e8:
         f8:70:95:4e:1e:32:30:23:77:d6:26:5e:f6:43:5c:57:1a:2b:
         e4:3f:ce:1c:23:a2:1a:0f:9b:c2:2b:f6:00:78:19:33:6e:80:
         38:e5:96:da:96:bf:a5:52:bf:a4:bd:88:c7:62:70:72:b2:01:
         63:35:ad:f2:10:3d:24:35:ae:8c:c0:ec:7d:bb:9a:f7:32:b7:
         75:15:63:b0:b8:07:53:a8:2b:7e:60:d0:a2:ff:8a:47:10:9a:
         45:fa:6f:18:bf:c0:e1:70:d7:c8:91:dd:d0:1b:f6:d3:08:e1:
         17:fd:b4:89:50:27:5a:54:6a:ad:a3:ac:5f:fd:43:71:f6:37:
         e5:95:1f:ca:04:e1:bc:1b:ed:9c:2d:66:85:e1:63:b8:1e:6f:
         d7:da:f8:06:d2:d2:23:95:c6:1f:75:3c:f9:0d:72:5b:c5:d3:
         08:ed:86:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:09 2024 by rpki-client on console-ams.rpki-client.org