Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20afb17b-4d80-3661-82c7-a917add967c3.roa
File:                     20afb17b-4d80-3661-82c7-a917add967c3.roa (raw, json)
Hash identifier:          dNUMzuf0rZVcEU4xtd0YEc84UJ5a7v1K+PjRGe5ypdQ=
Subject key identifier:   01:A9:A1:F2:92:33:99:7F:A5:A2:C1:98:60:4A:52:23:D1:F5:47:AE
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172DCB2C89D
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20afb17b-4d80-3661-82c7-a917add967c3.roa
Signing time:             Mon 22 Jun 2020 15:43:23 +0000
ROA not before:           Mon 22 Jun 2020 04:00:00 +0000
ROA not after:            Sat 13 Apr 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        150.171.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:dc:b2:c8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 22 04:00:00 2020 GMT
            Not After : Apr 13 04:00:00 2030 GMT
        Subject: CN=247b9993-383c-42cb-a689-9bea0b6a5387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:12:75:ea:61:dd:69:16:5c:00:2f:bd:45:
                    e9:e0:3b:c4:5f:dc:cb:e3:10:24:73:ed:b2:16:28:
                    33:46:13:ec:d8:5c:89:b2:5a:e6:53:05:11:ba:d1:
                    28:f2:02:a0:3d:c9:68:3f:f7:0a:15:d6:9b:a1:d5:
                    d3:03:91:80:41:7e:cc:f4:0b:5e:e4:a2:aa:a1:8d:
                    02:85:63:cc:6a:fb:df:91:2c:a9:7b:12:a9:2e:28:
                    ab:62:76:a2:f0:14:2c:63:52:b9:80:dc:b4:0c:6b:
                    90:60:cd:2a:97:44:31:cb:46:6a:5c:1a:cb:05:1a:
                    8a:d7:64:1f:e6:de:44:81:82:7c:c5:96:44:4c:31:
                    45:a5:b4:9b:76:1a:67:16:c4:fc:e2:35:48:1d:52:
                    24:c3:d8:ad:89:b0:7c:74:e7:b8:d3:a2:05:8d:13:
                    9a:54:43:2c:97:90:41:96:30:f2:ea:d5:91:5a:67:
                    76:66:92:86:6c:9f:db:66:b1:4d:90:69:e3:6c:7b:
                    61:73:2d:ac:c3:5b:3f:78:14:4a:c0:0d:37:38:58:
                    6e:34:5c:b9:55:43:9c:3a:6f:a3:40:8f:13:4d:2e:
                    2f:48:8a:ff:3d:6d:ef:7c:35:50:0b:72:96:f7:f1:
                    d1:7a:f3:76:27:57:ab:7b:3f:8a:b4:8e:cc:0d:d7:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A9:A1:F2:92:33:99:7F:A5:A2:C1:98:60:4A:52:23:D1:F5:47:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20afb17b-4d80-3661-82c7-a917add967c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.171.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ed:6b:fd:43:6a:78:2f:d8:76:66:f2:00:11:fa:88:92:91:
         31:d7:7d:dd:23:0d:fa:0c:eb:50:bc:4b:fa:2e:3c:97:1f:8d:
         7c:d8:49:63:67:2d:a7:f8:a3:c8:ee:9d:2a:5d:f8:c8:54:cb:
         14:18:6e:84:13:6c:91:0f:1e:99:fb:1d:5f:33:04:93:52:78:
         f0:65:00:2d:8c:f3:5c:8c:3b:e8:de:fd:ac:c0:c4:bc:f6:83:
         27:87:ce:c8:f6:0a:67:86:44:41:cc:6c:07:7f:c4:4d:19:a5:
         29:dc:92:8e:e2:a2:26:d9:38:c4:7e:21:fd:78:b5:84:c1:6e:
         e1:a9:fe:3a:31:de:4c:bd:c6:12:2f:21:53:fa:f1:c9:48:33:
         b2:a5:e1:5d:fb:5b:0d:84:01:47:7e:8c:54:49:d9:16:b5:1a:
         21:1d:a1:13:fb:8e:89:e3:c5:68:4f:5a:f4:cd:3a:08:03:4b:
         95:82:94:ae:eb:a6:15:0f:70:69:ea:65:ad:86:18:29:b9:42:
         9e:c1:82:d8:dd:d3:e8:50:90:ca:ff:12:79:1a:77:d9:84:5b:
         cd:3d:68:fa:c4:70:b5:8d:17:9b:d0:af:63:fa:5e:02:1e:2f:
         cf:e2:de:e1:6d:8c:de:c6:a4:48:6b:9c:a3:a8:13:49:28:58:
         9c:d1:24:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:32 2024 by rpki-client on console-fra.rpki-client.org