Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ebbbb4a-9c96-331f-b46f-8f62014fece7.roa
File:                     1ebbbb4a-9c96-331f-b46f-8f62014fece7.roa (raw, json)
Hash identifier:          8OwLM6gVYmYbeJ4G1+RT36v6jciGXShPsBoatPXV8uE=
Subject key identifier:   63:65:4D:D1:37:E3:2A:33:68:B7:D0:DF:3E:A7:65:B7:ED:20:6D:B5
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845CF6E467EFCB5C520CB474600
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ebbbb4a-9c96-331f-b46f-8f62014fece7.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     8069
IP address blocks:        20.157.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:46:7e:fc:b5:c5:20:cb:47:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=0b1d92da-66fc-42c2-94ce-cec897d95173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:c7:ee:81:ba:83:40:f5:65:c2:80:7c:23:
                    ff:93:fe:7d:ba:4e:18:f7:f2:e1:e9:ef:48:63:aa:
                    75:9d:31:cb:4a:77:4a:e6:78:a0:a1:a7:7e:7d:0a:
                    97:c4:4c:c8:35:c2:f4:83:72:fc:a2:a5:e9:73:8f:
                    e6:b4:1d:2a:74:7c:0d:dc:0c:e7:11:12:48:61:91:
                    72:5c:6e:62:59:15:78:13:4f:ea:e3:85:00:6b:98:
                    ad:2f:eb:b3:b6:d7:e7:22:de:a4:b3:bf:67:57:9b:
                    84:8d:9f:c2:63:5f:68:d2:84:20:56:f2:b3:fc:0b:
                    80:03:9c:c6:18:5c:8c:f9:ae:e2:73:32:25:bf:dd:
                    44:6f:a8:79:ee:d8:72:3b:18:05:99:f2:79:e7:c4:
                    8a:26:81:99:63:67:47:b2:83:42:f1:93:16:54:d5:
                    2c:a0:f9:ba:92:b6:b6:0e:27:09:20:13:15:85:93:
                    f8:56:69:2b:15:72:af:da:51:1f:87:9e:54:f6:4b:
                    c8:4d:d3:0d:bf:50:8b:24:3f:6c:5a:79:f5:49:da:
                    03:11:53:16:73:c9:22:64:ea:24:13:86:81:b0:52:
                    94:5d:85:a6:d9:99:9f:bd:0c:71:bf:dc:e6:da:f1:
                    df:96:13:24:96:79:2e:0f:76:e7:dd:74:cd:b5:ae:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:65:4D:D1:37:E3:2A:33:68:B7:D0:DF:3E:A7:65:B7:ED:20:6D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ebbbb4a-9c96-331f-b46f-8f62014fece7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d4:86:88:c2:44:2e:c8:a9:1a:cf:55:e8:42:91:91:53:df:
         b4:05:6a:27:d2:35:da:f6:ad:2e:20:e1:40:4c:1c:44:8b:09:
         c2:1a:8d:36:bb:97:5b:06:02:33:d2:50:b2:4c:00:26:69:67:
         01:a5:7f:f8:77:cd:7b:62:c0:d1:2e:ce:cc:de:d6:7d:da:9e:
         8f:cc:16:ee:85:90:e2:4d:61:a5:00:59:00:bf:f5:26:21:09:
         c7:c4:bf:85:cb:d3:d7:87:31:56:d9:fd:09:71:fa:f1:04:52:
         5c:6b:5d:61:6d:11:8e:83:ea:e3:a8:9d:30:4f:0f:bf:9e:ad:
         36:fd:bb:53:d7:ea:49:4f:5e:0a:1f:9a:ea:2f:90:32:f8:43:
         6b:b8:80:77:cc:04:3a:ca:f2:74:98:fd:46:5c:84:c2:0f:27:
         9a:9c:b1:2e:6d:c8:ab:24:32:3a:f9:49:06:60:c8:55:98:b4:
         16:99:ad:22:c3:fe:4e:60:0e:2c:db:aa:7f:00:a6:69:3e:b9:
         53:1f:63:af:77:b1:aa:f5:8f:cf:3c:9b:4b:80:43:b5:bb:ae:
         96:10:28:81:73:91:74:8b:8c:e5:f1:dc:c3:6e:04:f2:3b:f7:
         68:98:f0:99:10:8d:40:8c:d8:c1:19:b3:e1:0b:23:b7:dd:ff:
         3b:cd:35:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:09 2024 by rpki-client on console-ams.rpki-client.org