Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa
File:                     7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa (raw, json)
Hash identifier:          3jqGgy0Cy4N4sw7Wds6BHmflPScEogFGha6dnVJRKFg=
Subject key identifier:   1F:D2:A4:E0:DF:7B:EA:AB:DA:32:1E:FD:85:1C:2C:FD:D8:77:22:D8
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845CF6E47244A7CC38F81059560
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     8069
IP address blocks:        20.157.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:47:24:4a:7c:c3:8f:81:05:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=9cdd87c6-1da5-437f-bae4-6df8010e7208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:60:c7:f8:77:48:33:97:d9:09:31:03:5a:
                    12:ba:c6:4b:99:51:ce:df:bf:a5:f4:dc:53:90:2f:
                    a0:1f:05:9e:39:02:25:f1:b2:4e:38:19:c4:6b:5c:
                    c5:2d:2b:d5:bf:a9:aa:69:69:43:f5:96:3d:b4:67:
                    e3:58:b3:0e:d7:d7:58:ae:3b:15:3e:d4:40:c1:be:
                    32:82:4e:6c:60:39:2d:51:0b:68:b0:c4:06:dc:1d:
                    69:de:63:16:38:1a:f5:8b:91:5d:10:42:05:6b:d9:
                    a8:c7:88:f9:35:c2:3d:68:0b:70:f9:7f:95:15:1c:
                    d1:1c:ac:c0:52:12:83:37:56:79:ee:84:28:72:0a:
                    11:39:29:aa:d9:3d:82:ef:f6:60:48:9d:98:42:71:
                    f3:e6:1c:26:45:d7:66:e9:c0:09:f7:3b:2c:ae:9e:
                    aa:04:c1:35:0f:32:c4:64:e9:37:11:65:a6:dd:fe:
                    d5:65:57:9c:e2:43:a5:9b:ea:d5:68:43:89:a2:5a:
                    f8:25:ef:a2:f0:75:c3:26:73:a3:47:f0:03:5c:6f:
                    b3:a0:ea:b5:b1:1b:d6:94:f7:be:df:aa:d3:ee:1b:
                    37:7e:c1:28:6b:6b:e2:da:24:d0:80:3a:7f:c0:7d:
                    12:02:db:68:ab:fe:60:dd:3c:eb:34:5c:1f:52:bc:
                    93:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D2:A4:E0:DF:7B:EA:AB:DA:32:1E:FD:85:1C:2C:FD:D8:77:22:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:3d:81:30:a8:6a:84:23:1a:43:46:59:d6:95:01:a0:08:72:
         a9:69:5c:21:61:b5:97:44:a3:b5:7f:41:c4:9b:e2:41:d2:97:
         57:6a:83:b9:a8:b0:bd:2e:15:01:10:6c:ec:b0:fa:c0:7d:06:
         3d:c6:7d:56:96:10:8c:88:ee:12:0c:c2:69:4a:64:89:fa:17:
         11:a1:22:48:3e:e5:70:19:15:c9:6d:26:33:bd:41:d6:5b:d7:
         d7:56:f7:4a:5b:71:d2:a2:44:9b:c8:73:02:64:49:8b:64:8b:
         ac:a9:2a:61:9d:16:bf:c2:8e:4a:94:ec:18:51:25:a1:e9:34:
         9e:01:31:b4:64:0b:6b:a6:62:35:51:0e:be:3d:f7:c6:6e:82:
         55:bf:f0:be:3a:c9:c0:bd:fc:35:d8:17:a3:d7:bc:27:8a:71:
         1b:5a:c8:b8:a5:b1:c3:f1:75:cc:38:b3:76:31:94:19:77:bd:
         6e:03:2a:e4:0e:c4:67:a9:68:48:ab:68:25:5e:f7:db:9f:71:
         d5:93:ed:c4:a6:31:ab:06:11:36:7c:0f:40:0f:52:38:bd:2d:
         92:48:b1:7a:63:51:bb:5c:67:46:f2:96:85:f3:06:7e:13:d4:
         22:13:17:f8:85:5a:52:ac:0b:02:9b:1f:9d:ed:00:29:ca:b8:
         70:fe:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org