Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/782138f7-06c6-3929-96a7-c3ac5434cee1.roa
File:                     782138f7-06c6-3929-96a7-c3ac5434cee1.roa (raw, json)
Hash identifier:          x/hOkcpl+cA7fwI37NCxeePA7Fz+zArMDswlP6fk/Ak=
Subject key identifier:   50:2E:D4:D4:91:87:59:60:B9:C8:A1:B8:10:83:A6:7F:D1:90:B4:BF
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17324D346D7
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/782138f7-06c6-3929-96a7-c3ac5434cee1.roa
Signing time:             Mon 06 Jul 2020 15:51:32 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Fri 08 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:d3:46:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Mar  8 05:00:00 2030 GMT
        Subject: CN=de8eac05-ea72-4f63-867f-269f9b06b52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:c0:c9:6f:39:2b:96:fa:16:3b:0a:2f:db:
                    98:56:47:1f:dc:e3:aa:1e:e8:1e:4b:76:d5:46:61:
                    4d:6f:2e:4f:ae:a1:3d:61:43:24:be:fc:9d:bd:0e:
                    f5:41:90:9a:77:b7:46:dc:3c:2b:a3:b2:1c:16:79:
                    a9:89:e2:4a:74:44:fb:c8:12:cb:8c:4a:6c:83:72:
                    c1:37:fb:42:37:3c:0a:a3:fe:0d:3f:c8:28:cc:19:
                    8a:5a:ca:ed:a0:8a:f1:a1:49:8c:ee:d7:73:7b:fd:
                    db:fb:f9:1c:bd:69:fa:7b:fe:0d:fb:9f:06:d5:4d:
                    43:45:c3:4f:15:2c:a3:15:f8:0a:ff:a2:1a:06:20:
                    75:0f:1c:f2:28:74:dc:e5:56:ea:cf:3e:dc:c0:ba:
                    78:84:3a:73:16:25:c2:0a:cc:99:a6:72:fc:b1:1a:
                    91:03:f1:a8:e1:99:66:1c:2f:d5:80:1a:06:0d:03:
                    cf:c4:62:f4:11:4d:ce:4d:52:3d:f3:99:5d:a6:0e:
                    39:10:8f:fe:55:6a:1c:8a:ae:68:17:4f:11:05:74:
                    75:be:5d:6f:ff:6d:88:61:24:65:c3:5d:22:83:12:
                    4b:ed:bd:79:7d:88:cf:08:ce:89:e9:17:56:1a:e2:
                    ae:18:96:ef:14:03:ee:37:a1:21:55:84:ab:b5:70:
                    32:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2E:D4:D4:91:87:59:60:B9:C8:A1:B8:10:83:A6:7F:D1:90:B4:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/782138f7-06c6-3929-96a7-c3ac5434cee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9c:2e:59:d6:ee:3e:1a:78:54:ed:63:2c:d7:4b:6d:db:9d:
         ce:63:7b:bb:02:fc:0d:bf:6a:82:41:11:2b:2b:ed:9a:86:04:
         1f:7a:31:66:27:ca:77:e4:38:ff:87:cf:5b:cc:ff:c2:c4:7c:
         94:07:e3:2a:db:29:0d:bd:4e:82:5f:f6:0a:35:13:b0:12:a9:
         d0:b4:05:cf:01:fa:cd:f4:fd:e4:68:cb:17:19:30:2e:ad:b7:
         85:cf:63:4b:d5:6d:40:ff:02:ca:3b:e4:1b:a6:02:e9:74:93:
         e4:b8:bc:60:e6:f9:09:03:ed:60:d8:18:bd:da:8c:7a:4c:89:
         fd:13:03:e6:0c:d9:20:4b:61:0f:31:7c:d8:14:d9:e2:f8:f4:
         95:21:df:98:1a:89:1d:ba:e2:e5:09:86:29:3a:47:bc:09:1f:
         74:cd:88:cd:ab:da:5e:ab:83:2e:11:1f:87:47:2d:39:60:7d:
         37:ed:47:86:8a:97:f1:7a:99:47:54:4c:5c:6e:bc:9b:e7:22:
         8d:0d:15:80:6c:ae:36:51:ad:82:d0:88:59:51:08:c5:ea:5e:
         c4:9c:b7:4c:6f:65:b3:8e:a7:04:88:50:ea:a9:d1:fb:ef:b8:
         f6:5d:e4:a4:4d:e2:50:1f:bc:db:73:a2:81:0a:c1:10:d5:a4:
         d3:da:88:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org