Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa
File:                     51de0f90-d04b-3ee5-8cd9-8de517542b74.roa (raw, json)
Hash identifier:          tA4bVjFfQ+oJ5OPGAmaocngiO4bVIwzyt140+ZV2wfM=
Subject key identifier:   0C:06:C5:CD:70:84:1D:0C:46:56:16:A1:42:75:A4:91:6A:35:0C:90
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845ECBE91D3A5B8978DBFC2F8C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     8069
IP address blocks:        20.157.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:91:d3:a5:b8:97:8d:bf:c2:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=1c26a0b6-55e6-474e-95f3-72385a3bd378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:52:8c:46:23:38:ce:1f:f1:c4:bc:60:cc:fe:
                    9f:50:c4:8b:d5:ea:38:37:9e:c0:6e:d4:31:63:e7:
                    74:d3:8f:4c:55:7b:2b:19:be:95:72:42:ae:60:8c:
                    3c:19:c5:50:3c:b4:5c:2e:9d:f5:ab:4e:37:b6:b4:
                    05:b2:ed:f2:34:33:39:16:16:cf:a6:cb:8e:77:a0:
                    c9:d9:c1:fd:7c:89:3f:c1:29:a3:32:42:91:3a:31:
                    1e:f1:4d:c5:b1:9f:c8:ae:6c:1e:f0:3e:d6:b0:e9:
                    90:8c:07:d3:37:be:30:7d:e5:dd:8c:d6:c0:9c:05:
                    b8:9d:c7:3d:5a:95:13:84:e4:cb:97:8e:52:5b:e4:
                    e1:da:43:59:f3:cb:57:02:46:a7:23:af:dd:9d:84:
                    2a:9b:c9:bf:e8:f3:b7:1b:53:a5:63:e3:06:b6:d0:
                    54:f8:0d:96:1f:89:bd:b5:ad:63:7a:02:29:cd:5a:
                    cf:fb:52:4b:b9:81:26:cc:18:5b:d6:e3:c7:b9:e0:
                    4a:c4:8e:d9:63:55:f9:6a:c0:d7:e6:e0:8a:8f:e4:
                    2e:54:89:21:2f:d3:38:98:91:5a:07:c1:87:e3:2f:
                    e1:0d:f3:e4:c1:fc:3c:e8:15:67:7b:54:5e:61:f3:
                    f8:1c:49:51:c3:32:19:50:3d:7f:cb:53:43:99:06:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:06:C5:CD:70:84:1D:0C:46:56:16:A1:42:75:A4:91:6A:35:0C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e0:dd:43:40:03:5d:fb:dc:6f:8b:6c:c3:42:71:c9:2a:4f:
         a3:bd:57:b4:b8:5e:df:f1:fd:52:d6:a8:c7:5d:d5:9a:db:df:
         da:cd:34:48:7c:39:c7:dc:55:dd:f1:9b:20:38:16:fb:57:f4:
         d7:ba:61:ca:66:20:ec:e3:2f:b8:e9:24:8d:99:31:05:d7:6d:
         1b:bb:54:5f:06:ee:0c:b2:f8:ea:f2:1a:a9:0a:ed:aa:d4:3b:
         51:c1:29:79:ba:fc:23:11:aa:ac:3d:cd:d5:86:cc:c9:06:8c:
         f9:46:03:8d:15:af:58:82:44:d3:cd:40:2b:d6:d4:e1:6c:50:
         7b:63:a3:70:47:2e:d8:a2:f6:9b:ad:f9:2b:98:22:c4:d9:d2:
         7d:1a:c5:ae:1e:13:91:3a:82:d5:b0:92:e3:fc:ad:8a:6c:13:
         dc:c3:7e:99:83:2d:08:34:36:92:f9:ce:a2:e9:56:7d:06:5d:
         15:aa:33:bd:87:fe:33:b5:86:29:0b:16:f3:bf:72:9c:e6:21:
         9d:81:3c:ec:79:97:a4:d4:02:6d:53:c6:b0:e6:73:cf:4f:eb:
         00:e1:c9:a2:cf:03:d4:7c:f2:82:1c:af:fa:fb:de:fb:2e:ec:
         11:cc:83:0f:1b:35:84:16:64:05:c7:ae:d3:92:f2:69:85:1b:
         7a:9a:09:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:32 2024 by rpki-client on console-fra.rpki-client.org