Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa
File:                     0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa (raw, json)
Hash identifier:          yd6zxyaYhzF4SXUqNakNhQQihb9NPqQ8+NAvdH4Jpkc=
Subject key identifier:   A4:5A:50:83:C2:AA:79:21:88:D2:E7:25:F1:86:42:16:AB:29:D3:91
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845C8ACD8A7C18B46C1541DFA00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa
Signing time:             Mon 06 May 2024 14:56:01 +0000
ROA not before:           Mon 06 May 2024 14:56:01 +0000
ROA not after:            Sun 04 Aug 2024 14:56:01 +0000
asID:                     8069
IP address blocks:        20.33.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:ac:d8:a7:c1:8b:46:c1:54:1d:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May  6 14:56:01 2024 GMT
            Not After : Aug  4 14:56:01 2024 GMT
        Subject: CN=a6f19ddf-19ef-401e-bebe-59079165eba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:80:3d:10:51:a5:cf:a0:8b:6d:f8:d8:19:
                    84:cb:49:4c:5e:54:63:4c:a9:d4:b9:46:88:a7:e2:
                    ab:d4:7e:03:04:53:ab:f4:1e:dd:5b:8a:80:e7:73:
                    01:6d:56:c2:85:36:9e:c6:48:0c:28:71:b9:22:96:
                    3e:8f:54:b7:38:89:95:83:88:c2:3f:4a:0f:65:10:
                    4d:37:01:9a:68:bf:16:3c:92:79:d9:0c:4c:fb:f0:
                    41:42:f7:58:8b:5a:db:b7:e1:4e:6a:ac:64:d6:7d:
                    85:9e:d8:7b:18:39:40:0f:74:21:be:51:b2:92:d0:
                    e4:a0:51:51:0b:59:c7:3e:e3:cc:15:0a:d9:e0:80:
                    cb:c2:a9:2a:ad:5c:59:e8:d2:a3:42:a5:12:1f:02:
                    c1:0b:90:45:d9:b6:1c:21:af:4d:7b:53:6b:bc:5c:
                    fe:6b:85:5f:17:fd:09:5c:5f:27:5d:78:50:c6:b5:
                    a5:5f:8b:5c:9e:de:a7:0f:c3:af:a5:84:44:5f:29:
                    3a:e1:b2:54:45:7d:a3:bd:7f:37:7d:74:4b:21:6f:
                    6c:6a:91:f0:b9:c3:21:29:1a:54:6e:97:49:04:27:
                    62:32:c7:d9:c6:58:96:89:d4:99:98:a1:43:37:0e:
                    7b:ce:fb:f1:f8:3b:05:66:ac:5e:38:98:c7:56:a2:
                    e6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5A:50:83:C2:AA:79:21:88:D2:E7:25:F1:86:42:16:AB:29:D3:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:af:31:04:41:01:72:59:d1:92:21:b9:2e:f0:1d:fe:f0:e1:
         5f:83:0e:53:95:05:d6:32:6c:5d:af:a7:ad:8e:93:9f:a8:47:
         fc:8a:92:6c:c1:7c:c1:ce:2c:48:60:1b:44:c4:0a:0a:9e:01:
         eb:ac:0c:3a:16:23:47:45:49:bb:36:f4:2c:d0:f8:62:9b:b9:
         d6:47:92:75:54:6d:c9:73:05:e1:88:57:73:d4:57:55:bc:03:
         27:9f:0f:9b:db:73:a3:61:c5:a4:64:e7:6f:53:bb:04:83:6f:
         6f:6a:d0:03:bf:93:12:50:b3:be:f9:72:93:24:9b:03:3a:a6:
         b8:1e:fe:05:45:b3:cc:cf:73:0d:e8:90:89:b1:c7:61:24:2d:
         71:e7:f3:a9:8c:88:9d:5e:bf:a3:96:89:65:76:87:95:f4:78:
         46:bb:0d:32:2a:ac:b9:e7:a6:b2:97:3d:78:58:76:17:16:72:
         79:c7:f8:2a:c2:08:95:e3:42:b8:b0:0c:51:5d:36:55:3e:47:
         2f:e7:a7:94:2c:5a:ac:83:bb:de:23:99:a4:ab:dd:2d:9f:06:
         80:40:5c:40:27:39:05:96:a1:87:15:08:15:de:19:10:9c:fe:
         da:cb:53:6c:b1:1c:a6:b3:cd:43:eb:1b:08:62:3b:6b:75:9b:
         bf:d8:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:32 2024 by rpki-client on console-fra.rpki-client.org