Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bc6bce8-474a-30cf-ad15-31c9267ad4e6.roa
File:                     7bc6bce8-474a-30cf-ad15-31c9267ad4e6.roa (raw, json)
Hash identifier:          wOY0e94RJxXKSML0+saDKDw+Ddo22wNc5wAo07mW3dM=
Subject key identifier:   CE:51:B4:7D:E0:2C:57:0B:FE:A7:DF:4C:3B:59:0E:C7:94:56:FF:C6
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328583DBF5474A85F8451D8CCC72700
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bc6bce8-474a-30cf-ad15-31c9267ad4e6.roa
Signing time:             Fri 29 Apr 2022 12:00:00 +0000
ROA not before:           Fri 29 Apr 2022 12:00:00 +0000
ROA not after:            Fri 08 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.157.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:bf:54:74:a8:5f:84:51:d8:cc:c7:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 29 12:00:00 2022 GMT
            Not After : Mar  8 05:00:00 2030 GMT
        Subject: CN=efcb9e36-cc0e-4e5f-9599-0f4fe9ca87f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:28:d5:ca:40:f8:ab:5c:7c:1f:0b:2d:e1:21:
                    9b:7f:59:66:b9:f9:7a:e4:6b:51:63:fc:c4:df:81:
                    f8:c4:a4:f1:66:82:5b:3b:38:97:00:eb:bd:1b:b3:
                    72:5d:ab:bf:f5:52:a8:8b:2f:3e:10:86:6f:ba:4a:
                    7b:0e:44:43:91:cb:ee:ef:ce:86:34:32:f4:ac:86:
                    65:c3:08:cd:ba:a6:9b:77:ab:b0:fc:30:bd:68:f1:
                    8d:25:d5:11:89:24:4d:a3:f4:d4:03:fa:6e:92:6c:
                    cf:76:c7:1f:a0:b0:1b:b7:f7:d8:79:c0:45:28:c2:
                    ec:e0:86:d1:3e:7a:6b:2e:61:2c:05:5d:c2:ff:d1:
                    07:09:68:cf:24:b3:13:65:73:01:ba:9b:a2:f5:68:
                    0c:35:56:7a:13:b3:b6:33:65:5d:1e:af:f0:c3:d2:
                    79:fa:33:3f:69:95:16:3b:26:c4:55:95:33:12:77:
                    fa:05:ca:4c:33:e1:95:6d:ce:4c:a6:32:bf:28:9f:
                    fb:ca:f0:10:fb:4a:9f:56:ba:ec:66:fb:ac:48:7a:
                    89:f8:a8:ba:bd:28:05:1e:3a:1c:c0:9f:7d:64:d3:
                    f9:56:b2:a1:f2:b3:a9:3d:85:e4:df:84:a2:bd:02:
                    92:4b:a0:82:40:25:a0:79:07:0a:cf:74:5b:c6:bd:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:51:B4:7D:E0:2C:57:0B:FE:A7:DF:4C:3B:59:0E:C7:94:56:FF:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bc6bce8-474a-30cf-ad15-31c9267ad4e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:2f:fb:2b:75:93:a8:3d:48:63:8c:0d:fd:72:5b:e4:d8:
         d0:d8:c2:63:14:e4:e0:8c:08:d2:c1:d9:9f:07:b0:93:8c:ad:
         f1:b6:82:e5:c7:9f:a7:a2:42:49:55:fb:01:cc:22:67:6b:56:
         95:6b:0b:67:e5:e1:7b:1c:21:cb:75:c4:17:d8:1a:25:20:0a:
         f5:e6:2f:25:90:74:1a:2a:4b:ff:1d:53:76:63:9e:64:a4:6c:
         2f:a4:bd:3f:4e:a5:bf:c5:e4:72:2f:ff:0d:22:d7:f5:d6:9e:
         8a:ca:99:37:19:85:ef:ea:fd:35:f7:d4:7b:a5:09:f1:f8:fe:
         39:f1:e9:ca:7b:21:00:c3:51:0e:fc:9b:68:85:08:77:ff:09:
         b2:00:8c:f5:57:ff:c5:f6:ea:7b:7b:97:69:39:a9:b1:3d:52:
         a1:37:d7:00:cb:dd:01:a8:cf:77:1d:f0:b5:42:c6:4d:13:9d:
         90:ad:3d:a9:63:fd:19:24:c1:92:88:0a:0d:97:01:e7:f2:c1:
         42:7a:87:ac:06:25:3d:f7:35:7f:85:41:1a:47:8b:a1:5b:80:
         e4:04:ab:70:72:09:f1:0d:78:be:a2:2d:77:63:7f:25:b5:03:
         86:14:ed:19:08:dd:14:98:68:1a:1b:0a:a9:d0:af:b0:cf:c0:
         05:14:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:10 2024 by rpki-client on console-ams.rpki-client.org