Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b4b439b-ccc5-39ac-a348-aa37613ea2f5.roa
File:                     1b4b439b-ccc5-39ac-a348-aa37613ea2f5.roa (raw, json)
Hash identifier:          //4Ch7LfU88kggTAE3LJYLolP7te3KHLRIDP+RPQ0pA=
Subject key identifier:   42:1A:05:58:55:D5:FD:CF:56:5B:C5:1C:DB:9E:E9:BB:3A:B3:50:43
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0EE6C7
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b4b439b-ccc5-39ac-a348-aa37613ea2f5.roa
Signing time:             Sat 13 Jun 2020 19:01:28 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Tue 09 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.39.58.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0e:e6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Apr  9 04:00:00 2030 GMT
        Subject: CN=2d659ee1-c4bf-4f1f-971a-144222497c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:bd:78:b3:c8:d5:21:2a:3d:79:d8:cc:47:
                    6a:5c:24:e1:87:5b:60:cb:fc:7d:b0:75:6f:e7:73:
                    d6:8d:e9:e8:cd:19:17:ed:72:a9:20:5f:e6:86:fd:
                    95:e0:7e:b1:c4:34:68:4a:27:02:2b:12:b8:2d:3a:
                    0f:1c:9f:30:d9:72:6c:54:0d:73:22:d7:18:a7:d8:
                    a8:68:e3:76:c3:98:cb:26:82:0b:2a:21:39:93:ca:
                    fe:37:f7:32:92:be:8c:fd:ae:70:82:77:b8:3e:9f:
                    c9:a7:3b:11:1b:d7:6e:ec:f4:7a:4c:4d:ba:dc:d3:
                    42:54:09:ce:e5:fd:32:18:1f:1b:c7:be:8b:44:65:
                    6c:ae:7f:1e:60:0c:63:ec:d0:90:34:37:7b:9d:66:
                    2b:de:74:0b:e9:ea:f0:2f:11:8d:92:16:0d:50:78:
                    cd:58:f3:56:42:ea:5f:b8:ec:d6:e2:ac:a0:89:86:
                    c6:86:7b:2c:d4:8b:6d:bf:53:4b:71:3e:a2:45:bb:
                    29:4b:13:ed:bf:a0:f2:76:ba:14:e7:f2:f7:a0:ff:
                    8a:65:84:6c:bd:fc:6d:51:6f:2f:bc:a3:e4:66:1c:
                    9b:c0:95:e5:ba:06:ee:5e:4f:e9:49:cf:9d:55:6b:
                    3b:32:fa:35:51:10:e4:40:07:69:21:62:bd:a8:18:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1A:05:58:55:D5:FD:CF:56:5B:C5:1C:DB:9E:E9:BB:3A:B3:50:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b4b439b-ccc5-39ac-a348-aa37613ea2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.39.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:be:63:ff:9a:16:70:4e:ef:08:2f:97:19:50:97:b0:2a:33:
         41:29:16:c7:af:be:5b:4e:b9:86:0e:3e:94:6b:50:46:9e:fe:
         38:c0:4d:3c:4e:0b:ca:89:6e:21:a6:70:6d:2a:60:38:32:81:
         77:2a:55:3c:8e:80:1e:9f:b5:2f:1e:16:81:56:1d:ec:f0:fe:
         10:78:0b:b7:60:a1:d2:41:07:23:fd:fd:6a:39:ec:94:58:a2:
         ce:e6:06:d8:33:3b:7b:af:12:50:35:17:c2:eb:95:a2:2b:2d:
         e6:3b:8f:a8:1d:71:da:0b:04:13:b5:ce:82:5d:67:76:ad:46:
         9e:3b:9f:71:72:45:64:59:1b:c6:1f:68:2a:c7:bc:3e:35:9b:
         2b:7a:1d:9f:1a:a2:0f:b7:55:30:4b:77:7c:f3:0f:7c:e4:6c:
         92:6b:d7:95:05:f7:33:30:a2:2d:31:5e:9f:1e:ee:aa:e4:42:
         f9:65:f5:47:c5:f5:aa:3f:a0:d4:3a:b8:2d:cb:72:27:42:1f:
         27:5b:be:bb:b0:bc:a0:59:db:9b:57:64:17:09:a1:45:82:6e:
         b2:14:49:0f:8d:93:9c:fa:14:82:31:a7:c0:69:c4:17:ff:32:
         15:0e:35:68:ad:12:82:5a:5d:4b:48:3d:62:39:ad:b3:d7:a1:
         b4:c5:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:32 2024 by rpki-client on console-fra.rpki-client.org