Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa
File:                     273c9b70-70a4-3eb6-9810-590c5e753b05.roa (raw, json)
Hash identifier:          DA6SI/Ndmz3utiEo2J0sgRyVcLMbbxK/ZLcKPtaZMgw=
Subject key identifier:   08:11:55:D7:5E:16:38:7F:06:52:34:0C:26:E4:68:82:5A:6C:E3:B6
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845ECBE92BD479BEBA2C67B7700
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     8069
IP address blocks:        20.33.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:92:bd:47:9b:eb:a2:c6:7b:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=2dcf4bfd-cc68-4b53-9b47-df7009301f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:05:52:f1:4f:a2:98:48:3e:55:9b:73:d6:
                    e0:e0:8b:f3:31:11:db:c5:af:f2:06:ba:a6:88:e3:
                    49:9b:3e:ac:56:52:31:74:4d:bf:fc:ac:fa:69:a3:
                    71:7d:87:01:d9:bb:7f:cf:2a:14:cf:d8:1a:f9:20:
                    99:54:e2:5e:b2:41:19:76:85:27:44:16:e5:90:0c:
                    f3:dc:d6:50:72:71:e8:96:60:8e:14:e2:0d:c1:d2:
                    f3:2f:cc:6c:c0:e9:8d:f6:65:25:16:d9:fb:0c:7d:
                    a1:4b:40:c2:cd:7e:7b:7d:5d:ba:26:59:ff:82:c6:
                    b3:d1:6b:a1:14:82:4d:0e:ff:02:c0:bb:b1:61:1e:
                    f8:42:1b:14:61:3c:1c:b0:7d:6a:2f:49:bd:a6:40:
                    47:73:18:0f:f3:57:29:56:50:83:78:11:c5:94:e0:
                    3b:29:39:ad:8b:73:62:80:7b:1e:5a:68:4d:2f:f6:
                    07:35:5a:4b:08:19:a0:b3:9c:45:0b:d9:49:7b:85:
                    47:99:3e:f2:71:fb:71:30:3f:c0:c1:82:f1:e1:2a:
                    25:13:57:b5:45:a7:59:e5:86:da:3e:ef:59:59:d5:
                    1d:16:ad:93:a6:64:ff:9a:1c:4f:57:2e:f1:0e:4e:
                    f6:8b:5e:6d:50:bc:a9:d1:eb:cb:f4:f8:55:2e:dd:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:11:55:D7:5E:16:38:7F:06:52:34:0C:26:E4:68:82:5A:6C:E3:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:62:03:29:b6:a1:18:2f:d7:00:29:ca:a5:e9:a5:06:69:b5:
         a8:82:4b:05:8b:ad:02:10:78:ab:05:7d:f0:6a:d7:92:2f:05:
         97:de:37:eb:b8:91:93:83:6a:a8:ba:03:b1:02:73:06:66:74:
         56:3e:68:df:30:2f:b2:3f:2c:d8:48:c2:30:d6:34:ea:e8:3a:
         3e:ee:a2:06:8b:a7:57:ca:49:c1:bd:b5:e4:5a:8b:d1:22:a0:
         88:e6:d7:7f:27:d6:e0:8f:48:38:d4:8e:16:45:9b:76:ab:c0:
         6b:76:7f:e6:c5:7a:d6:c5:cc:8d:c1:1f:92:0a:58:a0:19:18:
         26:86:96:b2:04:1a:06:29:a7:7c:81:3c:58:be:4c:f9:4a:ac:
         34:f1:13:79:38:df:14:a6:dd:cb:bc:e1:4f:2a:21:74:1b:26:
         6e:e1:2d:99:f3:14:a4:48:47:80:83:e0:d1:c4:c1:15:1e:91:
         19:02:08:19:29:3d:8d:c1:a2:22:d3:93:94:41:9f:38:d7:03:
         0b:f5:bc:d4:fe:4c:f9:a4:ea:0c:8b:65:72:fb:43:0b:01:e7:
         73:55:5a:07:d8:3a:0e:d4:95:0f:69:8f:20:c7:3a:d7:6e:b1:
         84:01:8a:f9:1b:b6:b6:e8:d5:4b:c6:58:26:c5:93:58:32:00:
         b6:62:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:32 2024 by rpki-client on console-fra.rpki-client.org