Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a03ee5a-ddfd-3e7e-8ab6-2e392c9e160b.roa
File:                     6a03ee5a-ddfd-3e7e-8ab6-2e392c9e160b.roa (raw, json)
Hash identifier:          9axrc29Zi0nb0Tlbg53pHZwNucAkPTD11oAhrGlJ6/w=
Subject key identifier:   47:D1:62:75:3E:EB:9F:73:4B:D2:F4:02:D0:31:BB:77:7E:08:BE:BA
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0B23BE
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a03ee5a-ddfd-3e7e-8ab6-2e392c9e160b.roa
Signing time:             Sat 13 Jun 2020 18:57:22 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Thu 11 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0b:23:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Apr 11 04:00:00 2030 GMT
        Subject: CN=a2c3a8a2-f734-4ee4-a2a8-61ebef494445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:d4:8f:d2:cf:b7:e5:61:3c:56:5b:17:32:
                    5d:65:1b:ab:85:51:e3:1b:17:fa:5c:06:22:c0:32:
                    6e:66:1c:fc:34:d9:49:3b:e8:52:3c:91:90:0f:02:
                    f1:fb:1a:2e:d0:61:0c:3c:b9:64:99:0a:17:e0:9f:
                    b1:29:28:af:b5:da:70:64:6b:9b:43:85:b9:16:ea:
                    9f:dd:ef:03:00:3a:48:89:24:b8:8b:bc:b6:b5:63:
                    1e:4d:1b:0f:b7:de:65:e2:70:f7:df:af:08:10:6c:
                    1d:0b:72:4d:27:7b:18:13:a2:cc:d6:3c:08:1d:76:
                    8e:4c:4b:a9:ab:fb:43:41:16:1b:33:34:a7:cc:a9:
                    cb:9a:9e:cd:ca:e1:44:83:0f:40:16:4b:a3:95:05:
                    e1:70:35:25:b6:ea:5b:af:94:5c:7b:8f:fa:14:1b:
                    24:85:44:df:32:6b:73:5f:ec:87:8e:cd:be:e3:c5:
                    db:bc:56:b7:ee:af:c5:26:3b:04:f5:66:b4:27:ec:
                    b8:01:5e:0c:b9:c7:e0:f1:dc:76:ee:e1:d1:13:09:
                    be:de:c6:31:d2:49:b5:24:9c:dd:fe:ad:8b:61:bb:
                    8d:7a:12:7e:4a:f4:0e:87:9e:e6:a9:50:49:66:d7:
                    2a:97:7c:4e:6d:12:d4:da:2d:31:6d:19:04:6f:66:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D1:62:75:3E:EB:9F:73:4B:D2:F4:02:D0:31:BB:77:7E:08:BE:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a03ee5a-ddfd-3e7e-8ab6-2e392c9e160b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:82:2e:01:a7:1e:a0:21:64:a9:29:4a:24:80:c0:e1:28:3e:
         aa:06:9f:43:c3:42:92:91:d7:2c:af:6f:11:bc:19:99:f9:45:
         a3:f9:3e:96:22:bc:d0:3b:1d:b9:24:20:ae:6e:9c:82:28:6f:
         43:a0:5b:13:41:21:23:61:aa:61:ab:74:b4:08:2f:69:2c:a6:
         57:be:05:90:cf:1e:b1:53:eb:8a:7e:1e:11:a0:27:cc:ca:93:
         b9:21:8d:0f:f9:a4:0d:95:e8:84:36:3c:5b:41:06:b5:f4:6b:
         73:3e:b1:3a:5b:a3:de:6f:1b:a6:5a:bc:6c:1d:52:14:8d:f4:
         e1:bb:34:88:41:38:b5:2a:9d:a8:a4:e2:2a:9e:ac:37:1a:51:
         3e:52:1b:68:24:93:93:bc:0b:0e:8d:54:ac:a1:25:c9:2b:89:
         d8:70:e6:f0:be:f5:d0:a6:3a:a2:ff:95:5d:dd:e0:d1:a0:d5:
         6c:b9:b6:18:78:cb:ae:29:d5:d3:18:67:5e:23:c2:f2:15:fe:
         ae:ee:93:83:96:60:52:a0:35:78:f9:ca:4d:ad:d6:3d:7f:04:
         1d:08:24:67:f9:ca:dc:55:a0:4f:43:ad:b1:71:cd:50:1b:fe:
         43:6d:5c:fe:bf:94:2a:a8:31:fc:f6:85:e8:4a:dd:aa:7a:3c:
         c1:ab:97:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:40:42 2024 by rpki-client on console-fra.rpki-client.org