Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cf0e427-3372-3d57-8cef-6d5cdff6e1fa.roa
File:                     3cf0e427-3372-3d57-8cef-6d5cdff6e1fa.roa (raw, json)
Hash identifier:          C7S4Ovzuwe/wVW6GPk+e0dPJHsh+UcTGte2WVxS71Us=
Subject key identifier:   98:92:F6:80:C9:4D:01:C7:EA:67:84:12:D4:88:90:5B:51:4D:2F:C6
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0ADDC3
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cf0e427-3372-3d57-8cef-6d5cdff6e1fa.roa
Signing time:             Sat 13 Jun 2020 18:57:04 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Sat 06 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.126.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0a:dd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Apr  6 04:00:00 2030 GMT
        Subject: CN=4a13695c-cf11-46b4-8d04-8823fa068e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:90:5b:b7:89:b4:f8:60:44:f1:73:fd:d9:
                    5e:33:ae:a0:00:68:6f:ea:a1:5d:6f:f6:6d:15:fe:
                    ad:4a:99:e9:d7:1a:02:b3:90:33:5a:85:8c:b3:bf:
                    3e:a1:5e:a6:9a:64:68:61:5b:1a:59:bf:fe:8d:b0:
                    65:ae:40:b6:58:43:84:01:c4:0f:4d:78:1d:22:8b:
                    09:12:d9:b5:6d:ff:3d:da:07:af:af:69:32:84:91:
                    64:e0:94:0a:4f:b5:d7:a5:ee:58:ed:8f:e2:b2:5c:
                    b8:56:25:b3:d1:a4:1b:9f:13:a3:09:8f:47:c7:fc:
                    1a:b1:34:0f:37:fd:b6:10:ff:cd:80:56:b2:50:09:
                    90:47:96:13:5e:d1:8e:05:81:35:66:49:28:59:1a:
                    36:37:6e:4f:b2:20:10:8c:cd:8f:53:fc:84:8e:d5:
                    e2:78:b2:19:dc:dc:d1:54:35:24:01:03:e7:10:61:
                    38:9d:b2:cc:1e:d8:34:3a:11:f9:0e:f3:d7:3c:34:
                    d0:49:83:94:d8:65:e9:11:68:e4:23:32:ab:68:47:
                    73:bc:10:b2:fa:5b:df:e0:c8:b0:79:40:cc:64:40:
                    10:5d:e8:5e:d8:04:6e:68:53:59:8b:82:3a:50:fe:
                    3a:ae:8a:5b:35:33:73:34:4b:ab:23:13:84:eb:e9:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:92:F6:80:C9:4D:01:C7:EA:67:84:12:D4:88:90:5B:51:4D:2F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cf0e427-3372-3d57-8cef-6d5cdff6e1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:34:da:31:d0:a9:f3:7f:f0:fd:51:c7:cd:e0:fe:84:0b:e8:
         84:aa:83:01:5b:67:40:95:d0:4b:92:24:ad:9a:51:61:23:5c:
         fe:e4:d2:da:88:e2:ae:44:26:c1:6e:6d:f0:1f:f1:fe:e9:11:
         98:a6:73:0f:af:76:25:b9:b9:71:0c:7b:8b:22:30:23:96:eb:
         92:af:36:92:a7:15:b9:b6:2d:a9:32:b6:bf:f1:cf:40:02:60:
         37:c8:d3:fb:87:52:be:e6:3d:a4:db:fa:52:8d:e4:c1:0c:86:
         ec:9b:0c:a6:e5:3a:23:a9:d3:0a:88:e9:c7:33:d7:4a:a8:72:
         82:75:9b:b2:d6:68:eb:91:d4:7a:b2:5e:92:ac:11:53:4e:05:
         3e:07:dd:37:cb:2e:53:28:33:3f:c1:d9:3e:42:89:c1:d6:76:
         76:8f:d9:8a:85:b7:f5:0c:52:d4:27:e1:dd:61:6a:05:a7:e2:
         9e:1d:c0:1f:5b:a3:16:7b:7c:66:da:cb:c0:11:d4:f4:0b:58:
         c9:0e:08:7c:1e:c6:b7:ce:37:31:56:56:5c:fa:58:59:3a:89:
         bb:44:ac:5c:5a:7d:09:4d:e5:bb:1d:c1:92:9b:5c:df:48:3b:
         53:61:15:cf:15:dd:0a:2b:b3:5f:e1:60:a4:4a:1f:e9:25:b3:
         61:57:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:09 2024 by rpki-client on console-ams.rpki-client.org