Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/516de26d-45de-329f-8a65-78180d749aa4.roa
File:                     516de26d-45de-329f-8a65-78180d749aa4.roa (raw, json)
Hash identifier:          BWZA+8DCoyNcZPUr1etMp8aQB1Z5hEoKWPhSi1IA2BI=
Subject key identifier:   95:0B:48:AA:D7:5A:35:BC:57:60:57:00:E2:5F:7E:C6:D1:90:12:19
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0BEC63
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/516de26d-45de-329f-8a65-78180d749aa4.roa
Signing time:             Sat 13 Jun 2020 18:58:13 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Fri 05 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0b:ec:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Apr  5 04:00:00 2030 GMT
        Subject: CN=1c13e480-211a-42b7-bcd3-7f417507e07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:83:a2:e0:30:9d:41:ad:cc:c3:f4:d3:04:
                    42:ac:ea:16:45:23:17:40:3d:2e:30:bd:3e:be:6d:
                    3d:14:f4:3a:62:7e:19:e7:0e:52:cf:d3:6c:a7:02:
                    45:48:cb:df:d3:fd:c2:25:e8:f4:0e:bc:64:e1:3b:
                    c0:42:a3:1e:5c:d9:92:c9:4a:51:d8:d4:27:6a:95:
                    45:d7:b6:93:67:40:92:1b:6d:00:89:e2:30:ca:b4:
                    5f:8f:93:d1:a8:67:39:6a:01:31:b5:19:eb:44:ee:
                    da:7f:fc:cb:83:80:a2:63:5f:4d:aa:42:a1:f2:d6:
                    42:25:8e:ff:c6:56:a7:40:fd:f9:6d:54:3d:e0:02:
                    59:ce:df:83:c5:00:bf:10:d7:3f:83:65:82:6c:fa:
                    9e:ef:cc:f2:9c:45:18:bf:4c:ce:64:d0:6d:32:17:
                    99:c8:21:70:0a:b2:77:f9:7b:27:55:f1:fd:f0:a3:
                    d7:98:46:33:4b:70:ca:f2:c2:b1:bf:49:c2:72:4f:
                    36:1f:d5:01:27:f5:83:b7:ba:e0:aa:1a:99:c6:6f:
                    da:49:d3:b2:71:93:42:17:92:40:4b:38:1a:77:66:
                    d9:b0:6b:3a:b8:57:8e:1c:22:c4:cb:45:3c:85:1a:
                    7d:ce:72:8f:e2:2c:64:0b:23:0a:b9:e6:5d:62:36:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0B:48:AA:D7:5A:35:BC:57:60:57:00:E2:5F:7E:C6:D1:90:12:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/516de26d-45de-329f-8a65-78180d749aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a8:dd:ba:c1:a2:8c:c9:77:71:00:7a:2d:bc:33:89:e1:83:
         a4:f5:d0:36:af:6c:81:e2:30:5f:50:a7:12:e2:4e:9f:00:f3:
         22:03:6d:99:9a:de:8d:bc:b1:4f:92:30:1e:09:7d:99:0b:26:
         16:a5:30:9f:7b:f2:6a:72:57:86:5b:ec:2e:f2:8f:22:51:75:
         cb:7f:87:f0:7f:53:db:61:ba:31:26:94:e4:3b:68:38:b3:a6:
         2d:cb:f8:de:83:ce:aa:b8:8e:bd:f4:98:3e:7d:2c:1f:0b:96:
         91:82:6e:65:a3:63:41:60:d4:7b:42:04:cb:f5:e2:7a:0e:a1:
         36:87:0f:47:4e:9f:b1:b1:b2:34:45:83:fe:cd:c2:2d:00:57:
         7f:e3:df:ea:6b:b8:1a:40:8b:55:49:5f:13:45:c8:64:81:f8:
         f4:3e:a7:ef:14:76:98:7b:b3:27:fb:24:c6:67:da:5c:94:ca:
         46:3b:db:bf:a2:90:ef:01:13:2a:a2:83:26:f5:51:f4:05:dd:
         6e:65:7d:ba:c8:23:31:19:97:8b:00:71:97:3c:b9:87:86:91:
         c8:8a:65:fb:3c:1d:a2:eb:c7:04:d3:05:d5:6e:7c:fc:94:e9:
         67:b9:b9:57:a1:7f:8b:b8:38:6e:c6:5a:64:fd:03:37:53:33:
         f3:6f:33:28
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcq8L7GMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA2MTMwNDAwMDBaFw0zMDA0MDUwNDAwMDBaMC8xLTArBgNVBAMTJDFj
MTNlNDgwLTIxMWEtNDJiNy1iY2QzLTdmNDE3NTA3ZTA3ZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALZxg6LgMJ1BrczD9NMEQqzqFkUjF0A9LjC9Pr5t
PRT0OmJ+GecOUs/TbKcCRUjL39P9wiXo9A68ZOE7wEKjHlzZkslKUdjUJ2qVRde2
k2dAkhttAIniMMq0X4+T0ahnOWoBMbUZ60Tu2n/8y4OAomNfTapCofLWQiWO/8ZW
p0D9+W1UPeACWc7fg8UAvxDXP4Nlgmz6nu/M8pxFGL9MzmTQbTIXmcghcAqyd/l7
J1Xx/fCj15hGM0twyvLCsb9JwnJPNh/VASf1g7e64KoamcZv2knTsnGTQheSQEs4
Gndm2bBrOrhXjhwixMtFPIUafc5yj+IsZAsjCrnmXWI27GcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSVC0iq11o1vFdgVwDiX37G0ZASGTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzUxNmRlMjZkLTQ1ZGUtMzI5
Zi04YTY1LTc4MTgwZDc0OWFhNC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABQvZDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAbKjdusGijMl3cQB6LbwzieGDpPXQNq9sgeIwX1CnEuJOnwDzIgNtmZrejbyx
T5IwHgl9mQsmFqUwn3vyanJXhlvsLvKPIlF1y3+H8H9T22G6MSaU5DtoOLOmLcv4
3oPOqriOvfSYPn0sHwuWkYJuZaNjQWDUe0IEy/Xieg6hNocPR06fsbGyNEWD/s3C
LQBXf+Pf6mu4GkCLVUlfE0XIZIH49D6n7xR2mHuzJ/skxmfaXJTKRjvbv6KQ7wET
KqKDJvVR9AXdbmV9usgjMRmXiwBxlzy5h4aRyIpl+zwdouvHBNMF1W58/JTpZ7m5
V6F/i7g4bsZaZP0DN1Mz828zKA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:10 2024 by rpki-client on console-ams.rpki-client.org