Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d8d8ba9-e0d1-3998-8ebc-f4cc59e843d2.roa
File:                     4d8d8ba9-e0d1-3998-8ebc-f4cc59e843d2.roa (raw, json)
Hash identifier:          AhnwbWNwBPBg9H+JOH19EF14irHyY6ysQ2WriiIUu/Y=
Subject key identifier:   67:C1:E6:ED:B2:20:76:99:22:51:90:F8:DD:49:ED:67:63:ED:3D:F9
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0D2892
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d8d8ba9-e0d1-3998-8ebc-f4cc59e843d2.roa
Signing time:             Sat 13 Jun 2020 18:59:34 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Thu 07 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0d:28:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar  7 05:00:00 2030 GMT
        Subject: CN=5d60d315-cd1f-4a31-869a-9415c89364d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:09:0e:75:60:5d:57:2a:cf:f1:43:ec:fe:
                    45:62:7f:c7:42:b5:81:4d:b7:cf:5d:5d:9d:0c:a2:
                    7a:f8:4d:85:02:9f:1d:55:e7:65:a5:34:ff:3d:04:
                    3a:6b:da:68:3f:48:b1:ab:ed:8a:da:c9:bd:58:23:
                    77:e4:08:26:2f:49:79:e8:d2:ad:94:51:16:74:60:
                    60:d9:35:80:6d:bb:6e:3f:ba:b0:cb:48:93:62:0a:
                    ed:75:e6:b5:e9:01:1a:4b:82:6d:aa:0e:13:be:eb:
                    05:b9:24:4a:ee:13:a1:68:97:2b:46:d1:f2:58:5a:
                    d7:10:cf:c3:b5:0f:49:b9:97:32:4e:ad:1b:5e:5d:
                    93:52:0f:d1:6e:02:b6:63:a1:85:f1:4b:f6:90:72:
                    04:44:20:b9:c8:40:c9:e6:b5:3a:6a:24:be:8d:36:
                    5e:59:e7:85:b3:88:72:63:df:a8:5e:c8:cc:e5:9a:
                    97:13:8f:a1:f2:a8:b2:d1:cc:7a:fe:98:c8:b8:0a:
                    da:26:24:b0:49:5f:0c:a9:a0:cb:41:d2:0b:22:a3:
                    fe:c1:5f:4e:42:63:b9:e0:bd:01:27:a0:0e:bf:8a:
                    e7:31:a3:c5:5b:0d:d2:1f:79:59:fc:63:c3:df:35:
                    a7:08:31:ef:28:27:5c:ec:78:bb:21:8e:05:26:0e:
                    c3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:E6:ED:B2:20:76:99:22:51:90:F8:DD:49:ED:67:63:ED:3D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d8d8ba9-e0d1-3998-8ebc-f4cc59e843d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:67:9d:fc:cd:38:2e:99:ed:37:56:4e:d3:15:14:49:03:
         9c:ed:a1:93:75:75:c5:40:fb:72:fa:47:d1:97:1b:ef:ae:86:
         79:eb:af:60:3f:86:be:8f:69:ba:a4:9b:5f:a8:05:e6:e0:ab:
         13:26:4b:8b:2f:c6:33:ca:4d:07:a4:a5:18:53:82:08:44:4b:
         d9:d7:38:c6:4a:54:b6:d6:04:a1:13:ba:8b:4f:26:90:38:82:
         35:77:48:aa:95:5b:52:41:ec:3f:a1:8c:a6:0e:a4:22:25:a9:
         c4:66:67:91:9f:18:0c:fe:81:0e:a1:39:35:9f:97:51:86:e2:
         14:54:b7:7c:2e:46:53:01:a5:6b:f4:f1:cf:79:e8:b7:a9:c4:
         db:28:32:be:2f:35:d3:f2:61:e0:49:64:26:81:8a:30:e2:be:
         0e:26:13:54:8f:0c:ed:d2:27:3c:b9:76:a8:6e:f9:08:cd:9c:
         4d:16:9e:46:82:47:4c:35:39:e1:fe:83:ff:ae:f5:e5:3f:e1:
         6b:b3:53:a7:2c:d0:28:81:cd:cc:d7:5e:0c:5e:59:ac:be:0a:
         14:96:b3:40:7a:01:70:43:ef:9b:46:0c:cd:35:3a:91:b5:36:
         31:85:26:f7:fe:ab:d3:11:53:20:1b:52:2e:2c:01:77:9e:20:
         e9:1b:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:09 2024 by rpki-client on console-ams.rpki-client.org