Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/76b3d1ca-ec7d-3fd8-85c1-888d0e0fbb5d.roa
File:                     76b3d1ca-ec7d-3fd8-85c1-888d0e0fbb5d.roa (raw, json)
Hash identifier:          0n9ctJzzQaafbqlytgTcu7DLfw0DgptU2t1Us9e5qy4=
Subject key identifier:   E0:7F:2F:40:48:9B:90:AF:05:F3:94:DF:66:E5:EB:18:C2:8D:D9:57
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285838BBA16E5D626015112F945C00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/76b3d1ca-ec7d-3fd8-85c1-888d0e0fbb5d.roa
Signing time:             Mon 25 Jan 2021 05:00:00 +0000
ROA not before:           Mon 25 Jan 2021 05:00:00 +0000
ROA not after:            Thu 07 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.157.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:bb:a1:6e:5d:62:60:15:11:2f:94:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jan 25 05:00:00 2021 GMT
            Not After : Mar  7 05:00:00 2030 GMT
        Subject: CN=69892670-435b-470b-8e8b-4b6d6edc3999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4f:42:79:34:08:db:9a:1a:e5:43:e8:ba:4d:
                    05:86:57:87:47:31:d7:1d:2b:77:de:57:3a:96:c4:
                    83:5e:e9:af:10:ca:26:54:72:a4:f8:0e:46:f6:e3:
                    8d:9d:89:e5:a7:0a:f5:ae:bf:5c:3c:72:5a:58:5f:
                    84:7e:d5:60:fb:43:38:e3:1a:57:40:7e:5c:58:db:
                    54:d0:8e:17:ec:38:f3:da:a5:39:33:29:0d:de:04:
                    4a:62:d2:c7:02:eb:5e:e6:26:e5:95:69:54:22:93:
                    40:16:08:07:aa:aa:b0:b9:dc:df:f5:84:6e:62:ae:
                    25:b1:0c:a9:9d:7a:d9:ed:a8:f2:92:d4:9e:d4:a1:
                    e0:ef:a1:be:01:94:da:a3:fc:4d:5d:c1:0d:c0:82:
                    b3:6d:01:b2:e8:eb:11:02:27:ee:77:a3:5e:13:c0:
                    1b:a6:47:03:cf:92:78:1a:84:ce:39:03:a5:c1:9d:
                    02:44:5d:4f:77:ee:da:cb:9f:da:d9:66:27:38:f3:
                    60:a7:d9:7a:9f:58:9d:97:84:23:eb:4a:51:6a:69:
                    d2:5a:8f:72:e2:36:d3:f0:74:08:63:af:9c:8f:17:
                    68:07:0d:59:d3:7d:ca:f5:70:18:1c:d3:42:8a:50:
                    35:3f:48:ac:90:73:c2:c1:12:c2:5a:e7:4a:70:b1:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7F:2F:40:48:9B:90:AF:05:F3:94:DF:66:E5:EB:18:C2:8D:D9:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/76b3d1ca-ec7d-3fd8-85c1-888d0e0fbb5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:9d:eb:15:f5:84:79:26:1f:b1:7f:f9:ea:93:74:fc:3a:
         e7:ac:60:38:da:ee:48:94:6c:5a:e5:a5:61:78:5b:af:a2:14:
         48:26:e2:6e:76:13:d7:b0:ea:a3:e7:d5:bf:bb:e8:41:15:65:
         98:2e:85:93:db:ad:18:46:f0:d3:e4:43:ee:ae:05:9a:29:97:
         a7:37:a2:73:a2:99:b4:69:39:93:ca:9b:06:77:fd:2b:17:e7:
         7e:15:ff:0c:6d:9b:03:7f:0e:48:08:62:ad:00:19:7b:79:9e:
         8f:df:be:2d:4e:5f:43:40:d9:b2:e8:b4:ef:72:1b:9f:3d:17:
         8d:43:ba:03:2d:cb:91:93:2a:75:bc:1d:c4:52:e7:ba:ab:f0:
         e8:13:77:6b:07:42:f8:37:8d:4c:33:85:e4:cf:21:a7:80:0f:
         1f:c4:43:81:fd:9f:3e:20:12:c9:e2:ff:75:36:f9:ea:7f:fc:
         fa:12:24:07:79:be:80:37:8c:e9:64:4f:af:cf:c3:fe:1f:84:
         4b:e2:2a:b4:8b:1b:94:24:78:62:20:a7:e3:dd:ba:3c:15:e1:
         38:c7:8a:61:7c:a3:1c:25:b1:27:df:3f:3d:4a:b0:9e:31:35:
         87:36:a2:36:33:84:34:c9:16:56:1d:9b:0a:9e:db:40:6f:a0:
         fd:d1:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org