Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3e164ccc-c894-31f7-9279-b72430161367.roa
File:                     3e164ccc-c894-31f7-9279-b72430161367.roa (raw, json)
Hash identifier:          Hq6sV42YyRvkA8PZwhMQKuUqAeRGC7xesEJ8OGDvwwk=
Subject key identifier:   67:1A:4A:2F:0B:52:03:38:23:53:65:11:02:E4:38:93:A4:10:B4:9A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328583F2CEF00ED172039D1B67FD300
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3e164ccc-c894-31f7-9279-b72430161367.roa
Signing time:             Wed 07 Sep 2022 12:00:00 +0000
ROA not before:           Wed 07 Sep 2022 12:00:00 +0000
ROA not after:            Sat 06 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.157.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2c:ef:00:ed:17:20:39:d1:b6:7f:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Sep  7 12:00:00 2022 GMT
            Not After : Apr  6 04:00:00 2030 GMT
        Subject: CN=26b0d121-e083-41a2-a856-ce9aba0f5bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a5:47:79:d4:de:6a:ea:5e:89:f0:1a:6f:8a:
                    b2:a4:41:2f:81:71:71:83:54:a3:e5:68:dc:3c:e5:
                    74:5f:35:d9:31:54:4b:be:69:ff:c1:5e:de:9b:4a:
                    27:80:26:3f:14:b3:65:8a:90:f2:e4:fd:c6:b6:2a:
                    a3:af:02:67:53:f9:d6:43:fc:87:14:10:6f:aa:f9:
                    58:4a:38:cb:62:62:7b:ee:d0:45:e5:06:6b:b1:84:
                    db:c2:08:1e:1e:b1:b3:e2:5a:8c:58:aa:c5:64:8d:
                    74:0a:da:9a:21:34:57:c1:bc:b5:9a:56:00:46:74:
                    e3:2c:7a:a2:7e:c8:a2:75:22:99:7b:83:03:08:53:
                    9f:91:9b:a6:5c:95:a6:71:b6:21:e5:96:bb:2e:32:
                    1c:9f:af:80:01:8b:54:6e:64:7e:aa:50:d5:4b:6d:
                    48:b8:5d:96:ba:9b:5e:25:aa:40:7c:dd:23:37:0e:
                    a0:55:13:80:88:9b:b1:b1:d3:aa:25:5e:53:81:5e:
                    48:74:67:7f:6f:23:5a:21:fc:b5:8d:86:4b:67:3e:
                    00:df:2b:f0:2f:75:67:5d:21:47:94:7c:50:3f:f7:
                    cb:59:9b:63:d2:2b:73:05:00:57:bd:d7:e1:2a:12:
                    ec:15:e0:51:ad:44:6f:40:de:80:ce:62:b7:4b:60:
                    c1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1A:4A:2F:0B:52:03:38:23:53:65:11:02:E4:38:93:A4:10:B4:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3e164ccc-c894-31f7-9279-b72430161367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:b3:2d:8e:cb:26:c9:45:da:ad:90:ac:7f:8a:c4:5b:7f:
         22:a5:13:61:33:65:cd:e2:e4:0d:b4:32:36:c5:4b:ad:32:0e:
         fc:ea:9d:91:28:e1:2b:02:17:02:60:3a:18:25:c7:9e:dd:73:
         68:60:62:1b:13:d3:5f:15:68:8b:41:85:29:79:e2:df:f9:a7:
         88:37:6b:83:15:f2:a9:6e:42:b4:e3:fe:59:d5:3a:25:67:0f:
         e8:2b:80:5f:1c:27:d4:21:a2:b3:69:46:bc:25:03:56:92:ca:
         d4:6c:74:24:d6:cc:a2:a0:85:d3:82:fc:7e:3e:fa:e0:19:b6:
         a8:80:76:3d:1d:08:e4:ea:35:4c:01:56:10:7d:db:66:f6:9c:
         2e:27:68:15:f5:27:b4:63:9f:9e:9f:39:c3:37:47:c1:7c:a4:
         5c:a6:c3:64:1a:40:db:ee:49:31:d5:f0:ea:ee:86:af:b7:39:
         4e:d4:54:c3:b5:ac:00:39:b4:c4:f6:ef:0d:f4:a4:ad:cc:da:
         b6:73:19:83:6d:11:d7:26:ce:bb:61:9e:fd:a3:cd:d2:77:69:
         94:ba:5e:52:e1:a5:c4:08:09:b0:93:ce:e3:93:d7:e1:7d:2d:
         d9:2b:f7:13:6d:d1:da:47:e7:98:2a:3c:16:bd:4f:b5:03:fa:
         46:2a:e0:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8s7wDtFyA50bZ/0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTIyMDkwNzEyMDAwMFoXDTMwMDQwNjA0MDAwMFowLzEtMCsGA1UEAxMk
MjZiMGQxMjEtZTA4My00MWEyLWE4NTYtY2U5YWJhMGY1YmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6VHedTeaupeifAab4qypEEvgXFxg1Sj5Wjc
POV0XzXZMVRLvmn/wV7em0ongCY/FLNlipDy5P3GtiqjrwJnU/nWQ/yHFBBvqvlY
SjjLYmJ77tBF5QZrsYTbwggeHrGz4lqMWKrFZI10CtqaITRXwby1mlYARnTjLHqi
fsiidSKZe4MDCFOfkZumXJWmcbYh5Za7LjIcn6+AAYtUbmR+qlDVS21IuF2Wupte
JapAfN0jNw6gVROAiJuxsdOqJV5TgV5IdGd/byNaIfy1jYZLZz4A3yvwL3VnXSFH
lHxQP/fLWZtj0itzBQBXvdfhKhLsFeBRrURvQN6AzmK3S2DB4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcaSi8LUgM4I1NlEQLkOJOkELSaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2UxNjRjY2MtYzg5NC0z
MWY3LTkyNzktYjcyNDMwMTYxMzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ21MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSmsy2OyybJRdqtkKx/isRbfyKlE2EzZc3i5A20MjbFS60yDvzqnZEo
4SsCFwJgOhglx57dc2hgYhsT018VaItBhSl54t/5p4g3a4MV8qluQrTj/lnVOiVn
D+grgF8cJ9QhorNpRrwlA1aSytRsdCTWzKKghdOC/H4++uAZtqiAdj0dCOTqNUwB
VhB922b2nC4naBX1J7Rjn56fOcM3R8F8pFymw2QaQNvuSTHV8Oruhq+3OU7UVMO1
rAA5tMT27w30pK3M2rZzGYNtEdcmzrthnv2jzdJ3aZS6XlLhpcQICbCTzuOT1+F9
Ldkr9xNt0dpH55gqPBa9T7UD+kYq4JU=
-----END CERTIFICATE-----
Generated at Sun Jun 16 13:45:32 2024 by rpki-client on console-fra.rpki-client.org