Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa
File:                     4765031d-1fb0-368a-b723-e6788ae0b6c0.roa (raw, json)
Hash identifier:          HYIbBTDuFJUavj8vss7srzE9xHjhgxgw6TnBG+QmK1c=
Subject key identifier:   F4:32:6E:52:00:4E:8B:3C:8E:57:F3:19:5D:16:96:26:5F:E5:FA:0A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845C70E286AD3B51F5F1E8E6900
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa
Signing time:             Mon 06 May 2024 01:00:24 +0000
ROA not before:           Mon 06 May 2024 01:00:24 +0000
ROA not after:            Sun 04 Aug 2024 01:00:24 +0000
asID:                     8069
IP address blocks:        20.33.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c7:0e:28:6a:d3:b5:1f:5f:1e:8e:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May  6 01:00:24 2024 GMT
            Not After : Aug  4 01:00:24 2024 GMT
        Subject: CN=b49a0374-cc40-4e4a-920f-8c351e6d4316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:5c:91:66:a1:9e:f6:85:0f:2a:e6:9a:22:
                    a5:16:d0:e5:28:7e:74:21:de:a9:cc:a2:a3:41:1a:
                    50:6a:7d:73:ce:ee:2e:f6:56:cc:26:6b:a6:4c:be:
                    71:3d:7a:24:b8:ba:fa:1f:07:1b:dd:22:32:2d:52:
                    36:05:8d:45:f4:c2:87:45:1c:70:0c:38:2c:7a:fd:
                    f1:4b:4e:5b:a0:7b:cd:cf:e4:3c:c0:55:f4:66:94:
                    91:63:78:b0:bf:ca:9e:2f:24:0c:b0:7b:77:5b:f7:
                    56:58:2b:24:71:92:13:0a:b0:33:48:39:ec:47:df:
                    40:e0:c5:91:2c:9e:80:5c:13:1b:5c:04:b7:d5:d9:
                    69:59:da:f9:2e:8a:8a:9e:b9:e9:a5:d7:8e:fd:11:
                    84:7c:da:a5:88:ae:55:39:ee:f3:bb:33:9c:b6:0a:
                    f5:2b:69:52:9d:53:d0:66:22:ec:84:e3:9c:9e:8a:
                    a9:0d:a6:5d:ef:2c:0c:87:28:cf:5a:7f:82:8b:50:
                    76:57:ce:cf:01:a6:ad:fd:18:b9:59:2e:7a:4b:ac:
                    2c:11:35:ab:47:23:eb:8d:ae:f2:9f:01:33:96:f0:
                    e8:23:d5:54:90:eb:b3:c9:19:43:56:71:28:90:5b:
                    5f:5c:69:3c:20:f3:cc:47:a6:f4:17:93:b9:a5:9e:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:32:6E:52:00:4E:8B:3C:8E:57:F3:19:5D:16:96:26:5F:E5:FA:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:81:e9:d6:d8:c4:78:20:3d:22:07:ce:f7:c3:ab:99:33:3a:
         76:91:a3:db:62:da:c7:a3:82:64:02:72:91:67:52:3f:de:46:
         0c:9b:66:f1:b2:69:5f:17:64:02:6b:bb:f1:57:c5:6c:c5:6a:
         a3:d1:f6:d5:0a:2e:ca:8c:bd:92:41:c7:3e:28:ef:02:d4:cc:
         a5:3b:2f:0f:ba:9e:fd:b0:13:ba:03:3e:55:12:cd:8c:72:41:
         67:86:4f:ae:25:45:f9:2c:f8:61:65:cc:a0:ac:04:eb:18:36:
         b3:79:bb:5c:e8:c1:9f:84:8f:bb:d9:b3:83:99:ce:be:c0:49:
         f5:5e:ab:83:55:b8:94:e1:0c:e5:3c:31:ae:cd:77:2c:3b:ec:
         a1:cd:40:65:ec:e1:65:93:29:05:cb:9f:31:2d:43:95:6c:a6:
         48:65:3e:4f:30:55:c5:e3:e4:a6:6c:bd:0c:08:2b:37:d9:89:
         1b:a6:eb:4d:df:07:7e:2f:8c:d0:1e:fc:11:2e:16:e5:97:ec:
         36:94:2e:c2:6b:dd:8b:fc:86:65:ee:0a:7c:55:78:99:f0:89:
         96:b3:6b:73:54:9a:20:a3:bb:2a:a2:85:9d:4c:84:64:e6:bf:
         29:6d:8b:6c:cb:1f:97:cf:d4:73:0b:67:df:31:72:41:9e:d8:
         50:0c:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:09 2024 by rpki-client on console-ams.rpki-client.org