Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/328f79ee-21f4-3729-8164-161b941e3435.roa
File:                     328f79ee-21f4-3729-8164-161b941e3435.roa (raw, json)
Hash identifier:          PqoTKB9eWEyTkBohFUZiBqpuC8r1vtWWT7ajpWBvR6I=
Subject key identifier:   64:CD:B7:A1:A8:26:F6:97:6A:EA:16:99:BB:B8:76:A6:44:6D:32:25
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845ECBE92E8A949C016FEF70480
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/328f79ee-21f4-3729-8164-161b941e3435.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     8069
IP address blocks:        20.33.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:92:e8:a9:49:c0:16:fe:f7:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=074aba82-06a1-4195-826a-3d725ac0b0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:ee:5f:a0:44:25:bc:c3:93:3a:43:0c:98:
                    0c:44:c1:68:5d:91:89:c2:1e:af:6e:86:c7:98:f9:
                    e2:62:10:33:56:02:e4:a0:92:e2:77:df:27:40:40:
                    b0:fa:3c:df:6e:0a:5b:1a:72:53:c0:ea:ea:ca:ee:
                    29:54:91:32:83:46:72:c7:7b:ed:58:05:79:11:fe:
                    26:5d:6c:a0:fc:ba:bb:c6:2e:cc:df:fd:ce:5f:1a:
                    0e:6f:c8:3e:ae:66:df:83:4e:64:10:43:45:2f:71:
                    45:88:26:b7:eb:d0:45:b5:4d:ef:a3:8a:93:cc:92:
                    d0:1d:62:fa:2e:3d:b3:13:ac:c1:2e:bf:ba:88:19:
                    85:e0:54:fd:9f:bb:4e:c8:49:78:d0:5f:77:0d:cd:
                    b1:b3:8f:f3:f3:26:6e:e6:a3:e7:5c:8b:c3:9d:67:
                    24:99:43:0a:02:0d:63:86:4f:00:5a:83:e5:9c:00:
                    21:77:78:8f:33:57:0e:46:95:6b:c4:de:e9:b3:9a:
                    36:2c:0b:78:73:34:70:c7:38:cd:a3:0c:36:d8:b4:
                    9b:d4:79:ed:e0:5d:68:28:f6:bf:56:8c:6c:c2:9d:
                    9e:0b:c8:c5:d2:37:35:66:59:65:4b:67:00:e5:ac:
                    8f:9a:10:46:fe:a4:e9:1a:70:13:bc:0b:c4:08:98:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CD:B7:A1:A8:26:F6:97:6A:EA:16:99:BB:B8:76:A6:44:6D:32:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/328f79ee-21f4-3729-8164-161b941e3435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:19:7f:ae:b8:fd:58:26:07:b2:78:d5:61:18:77:0e:bd:4f:
         c9:45:bb:9d:e3:13:1f:b5:73:cf:18:0a:4f:c9:66:a4:c3:3d:
         29:ae:f8:6a:e9:8f:4e:c3:af:7c:5c:90:8c:05:12:3f:78:d8:
         de:1e:72:3b:49:76:a0:66:60:1d:8a:e2:40:d2:16:32:9d:2d:
         74:d2:17:4d:2c:d0:1b:fe:dd:78:aa:2c:f4:9e:b7:97:6d:5e:
         3b:a5:63:52:b8:8c:c4:0c:61:91:5c:1a:05:71:2d:36:bd:36:
         5d:a4:fe:1c:99:e5:63:3b:76:8d:00:a0:e1:ae:67:f2:34:e5:
         42:c1:1f:b6:42:39:fb:d1:f1:4d:2c:9f:df:70:99:5b:83:29:
         e6:4b:d2:8e:00:3b:f2:4c:86:eb:6a:23:92:60:86:71:5a:86:
         cf:7b:44:1d:ba:85:2b:a5:15:4e:76:81:b6:d8:1e:24:be:cf:
         bc:7e:b0:30:c2:dd:15:f0:45:3a:12:21:70:a9:5d:75:d0:17:
         c4:b4:17:d8:0b:b1:2a:fb:d6:f2:fb:0b:2a:98:b7:a8:83:cd:
         39:a0:b6:50:c8:56:a0:d2:8d:72:d3:26:0c:7c:a9:65:14:eb:
         05:64:2c:a9:36:d8:6f:23:a8:9e:c2:a6:d5:27:a0:15:d4:79:
         ea:cf:ad:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXsvpLoqUnAFv73BIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MDUxOTEzMDAzM1oXDTI0MDgxNzEzMDAzM1owLzEtMCsGA1UEAxMk
MDc0YWJhODItMDZhMS00MTk1LTgyNmEtM2Q3MjVhYzBiMGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt3uX6BEJbzDkzpDDJgMRMFoXZGJwh6vbobH
mPniYhAzVgLkoJLid98nQECw+jzfbgpbGnJTwOrqyu4pVJEyg0Zyx3vtWAV5Ef4m
XWyg/Lq7xi7M3/3OXxoOb8g+rmbfg05kEENFL3FFiCa369BFtU3vo4qTzJLQHWL6
Lj2zE6zBLr+6iBmF4FT9n7tOyEl40F93Dc2xs4/z8yZu5qPnXIvDnWckmUMKAg1j
hk8AWoPlnAAhd3iPM1cORpVrxN7ps5o2LAt4czRwxzjNoww22LSb1Hnt4F1oKPa/
Voxswp2eC8jF0jc1ZlllS2cA5ayPmhBG/qTpGnATvAvECJhLQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTNt6GoJvaXauoWmbu4dqZEbTIlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzI4Zjc5ZWUtMjFmNC0z
NzI5LTgxNjQtMTYxYjk0MWUzNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkZf664/VgmB7J41WEYdw69T8lFu53jEx+1c88YCk/JZqTDPSmu+Grp
j07Dr3xckIwFEj942N4ecjtJdqBmYB2K4kDSFjKdLXTSF00s0Bv+3XiqLPSet5dt
XjulY1K4jMQMYZFcGgVxLTa9Nl2k/hyZ5WM7do0AoOGuZ/I05ULBH7ZCOfvR8U0s
n99wmVuDKeZL0o4AO/JMhutqI5JghnFahs97RB26hSulFU52gbbYHiS+z7x+sDDC
3RXwRToSIXCpXXXQF8S0F9gLsSr71vL7CyqYt6iDzTmgtlDIVqDSjXLTJgx8qWUU
6wVkLKk22G8jqJ7CptUnoBXUeerPrVU=
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:32 2024 by rpki-client on console-fra.rpki-client.org