Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/52cf86b2-3740-3437-8855-ccbf1d156044.roa
File:                     52cf86b2-3740-3437-8855-ccbf1d156044.roa (raw, json)
Hash identifier:          14WjfIN8cWABGe7ql88BvXAcSCo8ocUKE2u5jIDiH2E=
Subject key identifier:   96:E4:BE:EC:EC:4C:F2:A6:80:1F:8C:D7:D4:8B:1A:8B:11:6A:EE:3B
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328583D29774D1EC7959CBCE0A11C80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/52cf86b2-3740-3437-8855-ccbf1d156044.roa
Signing time:             Mon 07 Mar 2022 05:00:00 +0000
ROA not before:           Mon 07 Mar 2022 05:00:00 +0000
ROA not after:            Thu 28 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.157.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:29:77:4d:1e:c7:95:9c:bc:e0:a1:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Mar  7 05:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2030 GMT
        Subject: CN=ad8d9b00-30dc-4edc-a621-a6abc47897be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c3:a9:85:9f:06:a8:16:a7:d9:10:0a:4f:d0:
                    65:d8:b6:a2:36:e2:61:f4:8e:75:99:f9:68:18:38:
                    93:a6:69:1a:32:34:1a:81:30:7b:8e:0b:11:82:54:
                    45:b4:ea:43:bc:ae:dd:8d:83:ba:60:b4:17:19:ff:
                    a2:3c:20:5d:b4:13:84:fb:f0:53:f9:30:ce:d9:be:
                    45:b4:41:a4:e4:c8:39:7d:08:16:8d:e0:af:a9:77:
                    c4:f3:f6:57:47:e1:b5:a6:cb:98:18:d6:40:b2:30:
                    6c:56:80:0a:42:58:7e:da:3c:8f:47:3f:14:de:64:
                    6d:08:c7:69:22:16:0c:20:1d:be:5d:5e:b7:41:20:
                    4d:01:eb:ac:32:19:43:ac:ed:8e:28:07:0b:22:bf:
                    ab:97:ad:9e:f9:d1:89:96:25:05:97:8e:df:3b:a4:
                    15:71:d6:54:d0:1f:ca:5c:78:c2:ba:c9:1b:16:e7:
                    9c:21:64:1d:c9:39:e7:41:c0:45:42:aa:8b:68:a9:
                    30:b0:72:8a:27:09:f6:3f:01:ee:6e:83:b3:f0:bd:
                    3e:19:7d:71:d1:48:a9:2f:7c:0d:f2:23:51:42:97:
                    6c:ee:78:b7:e9:66:8c:fa:92:cd:2b:4b:cf:89:83:
                    89:f9:9a:ba:6f:17:14:74:dc:f6:45:b4:c9:84:1e:
                    9b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E4:BE:EC:EC:4C:F2:A6:80:1F:8C:D7:D4:8B:1A:8B:11:6A:EE:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/52cf86b2-3740-3437-8855-ccbf1d156044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:1d:aa:2a:9f:96:36:00:85:55:f5:8e:0c:ee:f2:a1:1d:32:
         d2:06:54:b9:f9:ad:b5:81:3b:49:fd:83:e0:d1:8a:0d:b6:a0:
         5c:a6:1d:03:3d:9d:7e:98:42:fc:1c:c3:69:13:f1:98:e5:85:
         1d:ea:4d:5f:82:a2:3c:6a:86:de:17:4b:82:b3:06:b2:28:98:
         1a:ea:77:0a:e8:eb:27:d8:75:06:c8:74:5a:6d:84:87:af:90:
         27:be:e2:28:c8:8d:3a:7c:1d:17:96:2d:2e:ae:b1:4f:be:a3:
         d0:26:16:ba:e4:5b:7c:bd:ba:3b:96:04:3d:d8:c0:0f:1e:8b:
         ce:57:05:84:a1:40:27:10:ca:77:e1:5f:56:3c:41:a7:ce:3d:
         b1:9d:25:6b:bf:c2:79:bb:ba:03:3d:9a:48:b8:17:49:c7:b7:
         4b:9c:50:8b:fc:c5:5f:c4:69:65:d4:d5:c9:0b:cb:3e:07:fc:
         15:27:f6:63:ed:4b:69:86:1c:19:4c:a4:08:ab:05:2c:b3:62:
         cc:1a:e2:43:5c:01:7d:ec:b5:a8:5f:0f:c2:a5:1e:f9:aa:a5:
         4e:c9:f6:bd:b5:bb:28:e1:ac:33:4b:0f:ae:a8:de:1c:96:49:
         61:0d:89:1d:89:53:ef:b0:7d:f2:4f:dc:56:05:a7:45:be:4f:
         a1:a9:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:40:42 2024 by rpki-client on console-fra.rpki-client.org