Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa
File:                     61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa (raw, json)
Hash identifier:          K+In1zfjfunRv2Nqm0IXOomNpgvBOaBgSh28axzEYP4=
Subject key identifier:   56:BD:40:7C:47:E0:08:C1:E8:BF:4E:A5:C9:40:ED:0C:7F:05:DB:B7
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858457FDDD9D175E7C77771D3A140
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     8069
IP address blocks:        20.33.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d9:d1:75:e7:c7:77:71:d3:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=f983abbc-6d5b-481e-92e4-3853fd97a356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ce:91:40:4f:7e:c3:6c:70:17:ca:10:09:e7:
                    43:d5:92:25:d3:c3:33:5a:c7:23:f6:be:1f:e9:8c:
                    a7:eb:72:5a:e6:0b:91:94:2b:a7:8f:0c:4d:24:b1:
                    e8:7f:b1:f8:2b:2f:0e:ae:01:b1:53:37:c3:d8:62:
                    63:cc:ed:61:23:87:80:a4:cf:2d:ec:89:12:56:26:
                    0c:95:d7:84:7c:79:13:42:33:5c:d7:41:cd:5e:02:
                    74:30:d3:a6:09:2f:64:97:ad:1d:72:7e:21:85:cc:
                    1d:ec:4f:20:e5:55:41:b8:ba:2e:bf:bd:3f:36:6e:
                    f5:7c:f2:a5:a1:20:69:94:2c:b7:e1:cf:df:1a:5e:
                    dc:43:ac:ba:1e:40:df:e9:2d:3d:c7:57:6d:dd:e0:
                    1f:91:d0:b5:84:cb:c2:ea:08:36:9d:d7:6e:33:39:
                    fc:a2:24:28:b4:a2:c6:a1:96:fc:83:f5:45:d5:53:
                    fe:f3:19:ad:86:26:ba:8d:2b:10:35:2c:7b:af:cb:
                    20:09:c0:a3:a2:68:31:fb:83:64:2b:5e:5c:73:a0:
                    c3:17:ad:ea:d2:8b:33:bc:7e:a1:30:c4:8d:0e:d6:
                    7f:8c:a9:cf:97:3d:3a:b3:1c:3d:c6:dc:4d:70:e6:
                    fc:24:a5:1c:2c:06:c4:00:a8:1c:d5:c8:d4:2b:f2:
                    00:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BD:40:7C:47:E0:08:C1:E8:BF:4E:A5:C9:40:ED:0C:7F:05:DB:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:87:1c:2b:4c:a0:bb:e7:b6:32:d5:7d:3c:fc:e0:c2:6f:12:
         35:ea:26:df:bb:6a:63:fd:dd:d7:f3:ed:f4:c5:04:05:4f:5f:
         4d:cc:5b:02:c5:7d:a6:12:af:f1:a1:f6:a4:0f:fa:d7:60:22:
         a8:c4:2f:cb:4d:43:d6:79:07:eb:74:50:90:fe:16:25:b0:eb:
         a7:e5:b4:74:95:0a:61:e3:84:66:a0:c2:a5:ae:4c:85:6e:b3:
         c8:29:d9:ff:13:fe:9e:cb:9c:fe:ea:11:46:f7:e0:01:05:24:
         e6:18:86:21:57:48:3a:9b:88:2a:63:bd:01:a1:2e:9e:e7:7d:
         a9:1d:0c:39:e3:8e:24:b3:c7:ce:3e:b2:fb:f0:50:f1:df:21:
         02:3f:88:63:57:ec:5d:27:6f:9d:3f:ef:1c:c5:34:2b:68:b2:
         82:6e:4a:a5:2a:ac:cd:d8:c0:5d:05:a0:ac:2d:92:33:7a:62:
         07:f3:85:bf:e9:76:27:36:d7:05:65:48:78:96:36:a4:2e:e5:
         86:03:ee:96:d5:a9:92:a1:95:31:a8:e8:98:2d:5f:f3:20:d6:
         ff:e9:b0:39:82:3d:3a:bb:00:7e:15:4e:fe:4f:e9:f1:a5:0b:
         a3:99:0f:14:43:55:7c:ab:a2:36:81:08:c1:36:8d:cb:99:5a:
         a6:d1:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org