Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa
File:                     7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa (raw, json)
Hash identifier:          rEl4Tnt+lmtFLz2oolzHTIerdjK/lUHDGfXZUXbJ574=
Subject key identifier:   C7:C1:22:50:FA:28:5A:A3:D7:1A:C9:F2:39:DB:E8:D3:EE:70:50:E3
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584566FEF7557163098288023A20
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa
Signing time:             Mon 01 Apr 2024 15:12:15 +0000
ROA not before:           Mon 01 Apr 2024 15:12:15 +0000
ROA not after:            Sun 30 Jun 2024 15:12:15 +0000
asID:                     8069
IP address blocks:        20.33.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:fe:f7:55:71:63:09:82:88:02:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr  1 15:12:15 2024 GMT
            Not After : Jun 30 15:12:15 2024 GMT
        Subject: CN=60479bf1-8157-4fdd-8a1c-b90ccebeeac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:be:ed:33:30:2c:bb:cf:78:35:a1:5c:02:
                    56:5e:f0:21:f2:b4:e0:25:95:2a:4a:ee:6f:5d:35:
                    2e:9b:3e:08:24:51:07:8f:92:1d:96:e6:6b:fd:a3:
                    74:55:02:23:c0:ba:ab:b4:0c:a1:bc:05:d4:91:04:
                    2e:5d:e2:4b:10:db:3c:88:5a:5c:ae:a5:e9:43:6d:
                    b9:ae:ad:70:50:17:ea:77:69:f7:85:d0:59:8e:71:
                    2d:ec:de:d0:de:6e:4f:15:c8:c0:86:16:d4:1a:6a:
                    ee:f2:bf:2f:a9:a0:6b:17:f8:54:49:e4:2a:9e:36:
                    9c:eb:f0:ed:92:f5:8d:09:05:22:c2:49:dc:99:8b:
                    44:1d:2b:0d:1a:d5:43:2d:ec:af:0a:02:68:38:98:
                    ff:30:7c:d6:44:c6:0d:31:d3:ad:e7:af:51:fd:9f:
                    ed:b5:d1:83:04:72:77:49:d4:33:73:45:63:25:03:
                    1e:47:0f:77:c8:73:38:84:66:64:69:81:a8:d5:3b:
                    dc:18:de:75:06:4c:97:a0:9d:b1:f1:97:d1:4e:d8:
                    b7:6c:74:68:50:a6:18:f2:71:da:56:f3:81:fd:46:
                    40:bd:fd:df:49:92:62:0c:69:d0:70:7a:bd:91:05:
                    68:92:ea:7a:48:bd:e9:8d:39:a7:3b:d0:a1:cc:5f:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C1:22:50:FA:28:5A:A3:D7:1A:C9:F2:39:DB:E8:D3:EE:70:50:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:fa:22:3c:5f:87:9b:10:26:eb:84:a9:e4:28:13:58:ef:0d:
         22:c6:3b:b0:71:f3:f8:4b:9a:e4:69:fd:ba:3a:72:9f:1c:3d:
         1f:ef:ec:f2:b0:de:4b:29:0c:4c:9c:41:ea:bd:08:38:de:01:
         a3:cf:f7:98:2a:82:db:00:5f:eb:a3:b9:99:5b:28:46:51:ff:
         f4:33:d2:8a:53:d8:cc:ea:ec:61:2e:8b:38:63:22:0f:64:9a:
         d7:86:f8:55:a9:4f:04:67:f0:b5:1e:ef:9b:16:3e:a5:ae:e1:
         a1:a0:5a:42:39:8e:20:ca:c0:ae:93:e4:dc:3b:70:0e:db:38:
         53:42:d4:67:ab:ae:4d:21:97:c9:d6:d5:6c:12:38:d6:99:e5:
         7c:82:bd:a5:3b:12:29:82:10:77:fa:fc:05:d5:ff:82:9b:61:
         7a:2d:f9:00:c1:ee:55:51:25:9a:88:4b:74:76:f5:b7:1f:e2:
         d7:fa:da:5b:57:b1:d8:a2:c8:32:a1:7a:01:9c:7a:94:51:6c:
         f2:03:e1:ea:fd:8a:0d:d0:d7:b1:cd:93:fd:ca:c1:46:9f:c3:
         2e:3f:90:69:15:38:aa:e0:dd:fb:46:67:29:ab:d9:ba:38:c9:
         0a:5e:91:88:3a:d5:dd:ed:90:91:93:3b:90:b3:3b:d9:1d:c6:
         65:22:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org