Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa
File:                     35b9c925-cda6-3421-a583-d46714bddd70.roa (raw, json)
Hash identifier:          f2Y3QdZeZLm1fbVcmTLY7+PJEyNYZUmuZKhFDmcnpRo=
Subject key identifier:   09:02:96:0A:7B:18:B6:CF:9D:B8:D5:47:0C:BE:65:CA:5E:E3:69:0F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858455A2D87D193290C62C9050980
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     8069
IP address blocks:        20.33.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:87:d1:93:29:0c:62:c9:05:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=d5fb7378-3c31-46f5-9921-80c0cfadccc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:12:6f:50:81:08:2a:df:84:e9:f0:5f:36:
                    98:91:f2:f8:7a:50:f2:09:a5:2b:08:52:65:f4:02:
                    40:f2:ed:f1:48:5b:c5:9c:cb:0b:9e:d1:3a:5d:f1:
                    13:2f:b9:38:03:49:d1:84:61:fa:74:2e:e5:02:e1:
                    dd:47:79:dd:72:28:10:cc:13:f4:52:29:e2:21:59:
                    8b:dd:ab:27:69:74:32:9e:2c:64:8b:f1:97:a4:16:
                    d9:f7:ec:b6:b3:c6:87:4a:b2:9f:fb:35:8c:73:eb:
                    c6:9f:7a:87:8b:b4:9f:d2:f2:a4:e8:ba:24:55:2f:
                    71:83:fb:91:03:cb:0a:68:9f:b2:00:9c:68:12:41:
                    00:22:35:01:35:f9:81:bc:85:a7:dc:38:a7:65:0c:
                    aa:73:cf:ec:b6:af:bc:d6:96:38:b4:c0:12:51:44:
                    de:1f:3d:df:a7:a2:e1:98:c2:1e:b5:9d:9f:d3:6e:
                    a9:07:74:3b:5d:1b:ba:d2:68:69:38:6f:68:9d:84:
                    27:33:95:8c:4d:fc:87:75:e4:78:6d:1f:6b:c1:94:
                    39:97:4e:8e:ec:5e:b1:14:70:16:04:0d:14:da:29:
                    91:2e:c9:13:af:ce:5c:b4:12:7e:4e:9d:da:74:83:
                    01:85:33:3d:67:72:41:11:21:05:83:6f:48:98:c7:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:02:96:0A:7B:18:B6:CF:9D:B8:D5:47:0C:BE:65:CA:5E:E3:69:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d7:bc:24:f1:32:f3:a1:03:81:31:25:37:84:8a:bc:17:b4:
         57:8a:ae:64:48:2d:4b:85:21:aa:3f:68:9c:51:b7:5e:5a:3e:
         65:47:c5:f9:24:22:a3:9e:52:af:2c:2c:77:66:18:be:a5:86:
         d2:f0:36:b7:97:0b:91:96:23:95:ec:e2:6e:f9:2a:69:9d:cd:
         26:8f:c4:3c:e0:7c:cf:e7:57:fd:5b:1a:4b:25:1c:f7:52:2c:
         42:97:65:10:73:26:da:c6:5e:fd:1b:2b:69:ca:13:ce:34:0d:
         32:25:54:89:43:66:4e:e4:9b:59:c2:f8:6a:9d:8a:a3:d9:c4:
         37:f3:d7:e5:a1:b4:0b:30:7d:b3:fd:e0:04:df:a0:b2:e2:e1:
         19:0e:5a:44:44:c4:f7:2f:9c:3c:aa:48:eb:45:7f:15:a5:66:
         5d:09:67:77:07:a7:b9:d5:33:ec:0b:61:52:84:50:3e:5a:b3:
         2e:f4:d8:c0:df:11:17:ca:82:69:9c:f3:99:94:01:1c:b9:0f:
         42:03:68:bb:ec:2c:88:a8:bd:7a:dd:65:cc:87:3b:4b:08:51:
         95:00:87:94:a3:b2:36:3a:fb:38:7e:c9:89:51:73:fa:7b:8a:
         d2:b8:d3:cb:c1:f0:47:8d:c2:d3:c6:a8:3f:39:2c:46:39:ed:
         39:2b:bb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:09 2024 by rpki-client on console-ams.rpki-client.org