Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a5276d1-553b-3352-8df0-cea698882b63.roa
File:                     3a5276d1-553b-3352-8df0-cea698882b63.roa (raw, json)
Hash identifier:          aIqfKssazW22lLeTSu9H4k/aHDpsn8OsubGZnOnmJsk=
Subject key identifier:   A9:DC:01:5C:FD:74:32:66:86:D6:A6:B6:E8:4B:50:5B:BE:A6:20:A6
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF087F0F
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a5276d1-553b-3352-8df0-cea698882b63.roa
Signing time:             Sat 13 Jun 2020 18:54:29 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Sun 10 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:08:7f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar 10 05:00:00 2030 GMT
        Subject: CN=7e9e670f-1422-446b-8669-edc954f380ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:e2:07:08:a7:e2:1e:6a:3b:4e:4b:d6:96:
                    61:43:71:f2:bb:96:e7:f0:69:1b:39:dd:3c:8e:29:
                    ed:a8:c8:86:a6:e6:f2:c9:ac:d2:f8:11:d1:c8:ce:
                    d6:02:93:06:82:f9:98:1f:2e:5b:ef:53:0a:ba:e3:
                    e7:54:d3:bf:a6:4e:0e:e1:54:e3:09:1c:86:cb:ec:
                    8a:f5:0e:f4:e4:c8:ef:c0:06:70:aa:56:43:a7:0e:
                    d2:eb:3d:e2:fd:64:50:bb:e2:9a:f6:f8:6e:29:42:
                    57:3c:a0:31:b7:5e:77:af:8d:12:a3:65:be:27:2d:
                    c9:e5:d4:1b:08:3b:5e:c7:82:99:e0:74:10:1d:78:
                    8f:89:7f:e7:3a:ed:f6:ce:2b:36:83:35:21:99:69:
                    a6:28:92:47:a4:15:bd:12:12:d0:2e:64:17:58:c6:
                    7e:69:1b:c8:3b:0a:55:df:86:1b:43:0c:05:5f:59:
                    c4:bb:0b:4a:ca:2f:61:d0:b1:bf:dc:2e:4e:7a:bd:
                    03:3d:c3:a5:80:b0:66:73:1f:0e:91:f6:0b:31:f3:
                    65:5f:64:f4:d3:46:de:2d:fb:da:0e:ff:75:c7:48:
                    fe:a6:10:2d:fd:cc:ad:e1:bf:85:b7:c7:32:20:e1:
                    f2:ae:15:69:cb:58:a8:37:5f:80:2d:f2:aa:4a:3d:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DC:01:5C:FD:74:32:66:86:D6:A6:B6:E8:4B:50:5B:BE:A6:20:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a5276d1-553b-3352-8df0-cea698882b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a8:d0:be:e1:e8:eb:86:34:1d:e2:38:f4:11:4b:16:df:19:
         3e:e8:26:51:2c:52:ed:3a:3e:e1:32:ec:2d:e6:d4:44:1e:1d:
         18:e8:1b:c9:1e:21:f0:56:ca:b9:66:fc:4f:f7:3b:64:b7:4a:
         2f:c4:13:a3:3f:5f:c8:00:a0:93:4e:b6:a7:a1:22:80:b5:03:
         08:48:be:db:30:aa:48:f8:f1:25:5e:69:c7:5b:88:cd:5a:ca:
         5f:be:20:50:e7:45:27:7a:62:b4:1d:27:40:1c:6e:3c:49:87:
         73:7d:1f:31:67:7b:e8:9b:4d:97:a5:2b:ef:c6:a1:8e:29:7d:
         0a:47:6a:af:6c:12:eb:fb:61:30:4d:ee:11:2f:31:34:53:60:
         da:b9:42:24:bf:a5:5d:27:3a:da:1e:9f:5d:43:33:1e:cc:61:
         9b:92:b9:ee:c9:cb:13:0a:e6:73:ef:e0:0d:5c:37:d7:bb:ba:
         cd:e5:da:e2:c5:51:1f:4c:45:e1:de:2e:6b:fc:08:52:4e:dd:
         b5:8d:a9:96:0a:01:ca:cc:91:ed:a4:0c:a8:7a:fd:17:98:95:
         78:e4:f5:c1:b6:44:02:30:4d:88:70:43:ed:d1:e1:69:1e:d0:
         4f:f4:c6:b0:19:98:f6:d4:57:fc:05:9a:16:5c:74:d2:cb:78:
         bb:5f:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:32 2024 by rpki-client on console-fra.rpki-client.org