Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/75001df1-5e21-3546-b115-8de972f910a8.roa
File:                     75001df1-5e21-3546-b115-8de972f910a8.roa (raw, json)
Hash identifier:          cdkjuwGfU4zC2VXKumGv6/3iQopg34Ke0rV3R5xJlZU=
Subject key identifier:   55:DD:0A:B9:77:93:2D:65:11:92:23:78:9D:0B:E2:C4:ED:E0:8A:FF
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845C70E27D75C69DED36B84AF00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/75001df1-5e21-3546-b115-8de972f910a8.roa
Signing time:             Mon 06 May 2024 01:00:24 +0000
ROA not before:           Mon 06 May 2024 01:00:24 +0000
ROA not after:            Sun 04 Aug 2024 01:00:24 +0000
asID:                     8069
IP address blocks:        20.33.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c7:0e:27:d7:5c:69:de:d3:6b:84:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May  6 01:00:24 2024 GMT
            Not After : Aug  4 01:00:24 2024 GMT
        Subject: CN=e4b7a668-001e-44f7-8d6b-764f7f11f1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:20:fe:b1:00:0e:b2:db:90:a2:2d:bb:bc:4d:
                    4a:e0:20:1c:d3:cd:f5:9e:a2:f2:5f:0c:9b:4b:49:
                    62:5b:d3:7d:62:8f:04:85:9d:9e:21:f7:1f:58:96:
                    f0:4e:8d:ef:1c:2e:93:38:28:3c:a5:49:1b:ea:72:
                    b6:67:fb:70:a3:69:c1:4b:04:78:e7:ee:46:8f:80:
                    ef:8c:c2:fb:89:37:ed:ec:cb:25:27:02:9f:78:f0:
                    bb:f2:23:21:a4:ea:9c:00:5e:10:48:0e:93:b4:17:
                    ab:04:bf:01:f9:37:bd:75:53:2c:91:c9:c6:18:7d:
                    8c:bb:fd:95:6a:f6:ab:04:f7:f9:10:3f:68:76:6b:
                    01:4d:ab:3e:95:6c:13:7d:59:2a:b2:f9:3a:da:ad:
                    b2:7d:34:24:90:55:c0:04:bd:47:cf:90:63:13:fe:
                    3f:a8:26:3d:c7:d6:25:d6:e9:79:bc:be:9f:4d:e6:
                    43:a1:fe:42:ef:00:7b:d4:76:3b:94:0e:5b:23:38:
                    df:53:e8:9f:c8:ef:b4:54:f0:c4:08:5f:89:e4:19:
                    02:38:81:7f:36:85:0c:e6:9a:1c:4f:62:0f:55:7b:
                    b3:20:f0:00:63:5d:ff:21:78:1f:8b:83:60:ad:f4:
                    6c:7f:5e:e1:c8:c7:b0:22:12:56:77:f3:f5:16:dd:
                    7a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DD:0A:B9:77:93:2D:65:11:92:23:78:9D:0B:E2:C4:ED:E0:8A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/75001df1-5e21-3546-b115-8de972f910a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:84:05:4b:69:79:f8:3e:a2:44:d4:6d:44:69:5e:70:48:12:
         3c:90:6d:95:81:e7:cb:82:cf:ec:47:6a:12:70:b6:79:4a:c5:
         27:4b:1c:ac:92:59:cb:cb:ec:96:82:e4:1a:f9:0a:17:e0:89:
         54:8a:ca:4b:40:54:62:a3:06:31:da:59:ab:31:bb:3b:83:76:
         a0:ae:e7:40:4e:ff:39:6e:19:9d:79:67:4c:a1:78:53:87:96:
         52:95:c3:52:67:95:b0:8b:0d:63:11:98:76:09:90:e4:32:33:
         e0:bd:ec:99:15:6a:da:55:68:a0:9e:cb:21:e2:be:53:2a:86:
         02:be:07:ac:b0:8a:e6:e9:c9:c1:70:97:ca:97:53:35:60:ec:
         99:d9:20:0e:f2:ea:85:7e:c1:99:30:44:78:67:a8:2f:cf:0b:
         1a:c1:ab:bd:c6:8b:b8:2f:a5:59:a9:aa:59:b0:ba:f9:59:89:
         06:24:ae:f2:5a:98:cd:7b:82:2d:51:97:c5:0a:82:5c:41:9d:
         16:6f:63:bd:76:12:94:89:84:b0:9f:29:d7:ff:36:f4:60:5c:
         0a:bd:4a:d5:dc:3a:9a:46:31:5c:ad:90:2e:f1:b3:01:44:49:
         aa:7f:57:c3:81:ef:c1:33:e4:38:46:f7:04:70:39:aa:fe:42:
         67:d9:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:10 2024 by rpki-client on console-ams.rpki-client.org