Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2a7d2a8d-f53a-3e76-b061-76026b4617bd.roa
File:                     2a7d2a8d-f53a-3e76-b061-76026b4617bd.roa (raw, json)
Hash identifier:          JL+XNqPAObVdozR9um0JOEiO5O/80A1J9GoddM37o7Q=
Subject key identifier:   86:B3:7A:77:81:F5:C1:FE:80:D5:0C:84:0E:28:47:FE:F8:5B:2E:59
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173276C7C1B
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2a7d2a8d-f53a-3e76-b061-76026b4617bd.roa
Signing time:             Tue 07 Jul 2020 03:58:07 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Fri 12 Apr 2030 04:00:00 +0000
asID:                     8070
IP address blocks:        20.34.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:27:6c:7c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Apr 12 04:00:00 2030 GMT
        Subject: CN=4644509c-3c19-4382-a783-f48ecbb2dff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:c2:33:b1:c8:b8:ca:58:da:26:3f:e2:79:
                    14:7d:f3:b7:e8:7e:b3:f9:a9:eb:71:09:c0:9e:fc:
                    95:1e:17:67:1d:5b:88:64:41:4f:30:17:e1:82:a2:
                    93:1c:0e:3b:31:c3:ab:d7:d4:c8:ad:7a:ff:7f:4b:
                    28:90:1c:df:b9:2d:86:92:7c:7e:09:64:60:3e:ee:
                    6c:25:06:0b:9d:9b:46:60:04:42:03:09:08:51:4b:
                    97:88:c8:bc:82:71:42:4a:6a:c7:c9:61:87:68:05:
                    32:e2:81:45:01:c0:31:74:91:86:d5:a2:fa:d6:17:
                    9f:3e:29:c8:67:68:94:ad:df:e0:99:eb:e4:f5:58:
                    6b:9f:10:43:ef:99:82:d8:7f:31:fe:95:fc:0d:9f:
                    60:b7:62:46:6a:6c:05:46:a3:3d:b2:00:e0:3c:dc:
                    63:c5:f2:28:e2:65:10:ac:4c:2b:d3:c9:e8:f0:0a:
                    12:33:53:8c:38:0b:50:bf:d5:92:e4:6c:da:cf:49:
                    d5:ab:c1:d9:c3:37:b6:0d:2e:fe:5e:21:de:89:30:
                    94:8e:f0:99:65:5f:a8:af:1d:23:de:cf:18:97:db:
                    9a:3b:f6:46:4f:96:1c:e3:1a:34:d5:87:fc:23:9c:
                    a0:2a:45:a2:87:b8:10:12:25:c6:a0:cf:c8:7c:ef:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B3:7A:77:81:F5:C1:FE:80:D5:0C:84:0E:28:47:FE:F8:5B:2E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2a7d2a8d-f53a-3e76-b061-76026b4617bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.34.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6b:7a:a1:b6:a6:6f:3e:95:95:96:84:b8:80:c7:b1:1c:08:
         e4:bb:ab:93:04:03:2d:61:9c:a4:10:af:41:c8:51:a4:e6:6f:
         7a:98:91:a4:5e:2b:ee:f0:df:cb:88:06:a1:d4:26:93:5e:59:
         69:a5:67:dc:26:a6:71:2e:bc:50:18:b2:d4:10:a5:9f:7d:8d:
         3d:18:40:62:ab:60:e5:a5:1a:fa:7a:6e:1e:30:c7:1b:3f:73:
         d9:dd:8a:ab:71:33:60:f6:96:88:b5:62:ec:23:b9:67:bb:a6:
         d5:4f:b0:a2:41:74:39:4e:71:82:f4:09:f4:3d:d8:64:09:6b:
         d0:b8:97:fc:d6:05:b8:c4:89:51:fd:5d:8c:7b:68:44:57:22:
         09:19:de:69:ed:dd:75:87:d2:4b:08:b8:ea:3a:c5:6b:4d:b0:
         df:83:c3:e2:a2:4e:e6:f0:30:57:cc:1b:0a:6a:93:db:2c:2b:
         7b:b1:1d:37:8c:24:ee:9b:4f:23:51:3b:04:69:10:da:d4:01:
         4e:b2:97:78:6e:7e:7e:06:03:fc:7d:3d:4c:a4:26:31:a4:2f:
         6a:17:6e:7f:8d:4b:01:10:10:69:5c:5c:56:3d:2f:7c:af:1f:
         43:2d:9b:04:9b:db:5d:7d:2a:36:59:37:27:e0:19:92:45:d3:
         ea:55:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:32 2024 by rpki-client on console-fra.rpki-client.org