Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa
File:                     7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa (raw, json)
Hash identifier:          /tiTsjeN2E5fAZpkZT/omhtvx2u19qDC8WUrxztt5Jw=
Subject key identifier:   C4:2B:C6:97:32:F5:2B:26:18:B3:F2:EA:4A:2F:A3:AF:1B:E8:B9:3A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584613D41BE33F1A86513C347C70
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa
Signing time:             Sun 02 Jun 2024 13:00:36 +0000
ROA not before:           Sun 02 Jun 2024 13:00:36 +0000
ROA not after:            Sat 31 Aug 2024 13:00:36 +0000
asID:                     8069
IP address blocks:        20.33.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:13:d4:1b:e3:3f:1a:86:51:3c:34:7c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun  2 13:00:36 2024 GMT
            Not After : Aug 31 13:00:36 2024 GMT
        Subject: CN=a770abb3-0e61-49c8-a364-312aa9fb3b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:93:9f:94:81:3d:5f:8b:3c:b6:f9:ba:08:
                    f6:28:13:7d:0b:7a:74:07:4d:f1:3a:2a:fb:f1:7a:
                    e7:de:96:6e:06:37:e6:ab:af:36:26:cd:bc:ea:4b:
                    58:82:95:6b:9c:3b:b5:96:a4:c8:ea:bf:a6:3b:e0:
                    8c:f1:98:dc:f3:61:5b:e4:0f:dd:21:d8:9f:45:6b:
                    13:bb:6b:31:36:09:fa:e4:19:86:5f:70:c4:5c:36:
                    8c:ee:4b:b8:84:24:46:e5:b3:4c:58:31:6f:fc:44:
                    8a:17:82:7b:5a:12:12:6e:cb:c2:a9:3a:9e:12:9e:
                    6c:17:bd:74:ce:2c:be:99:45:e8:12:9d:02:d2:73:
                    8d:54:ff:9b:6e:68:3b:26:af:56:e2:48:c0:63:f6:
                    09:7f:58:81:fa:e2:7f:b5:26:75:be:26:27:7a:f8:
                    7a:6e:be:54:1e:a7:7e:fa:c2:58:cc:9c:4c:d6:2f:
                    a5:ee:5d:7d:66:f9:e8:ee:26:35:18:86:07:af:0d:
                    8c:50:88:95:a1:09:1e:4f:03:47:27:e5:6d:b8:5a:
                    ed:38:dd:3f:86:75:59:cb:70:33:dd:cb:45:5d:89:
                    86:d3:7f:70:3e:f1:20:06:77:9a:1a:ae:9f:c9:ff:
                    a3:b8:85:c4:b5:c4:fe:65:f3:f5:7c:26:b1:ae:88:
                    13:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2B:C6:97:32:F5:2B:26:18:B3:F2:EA:4A:2F:A3:AF:1B:E8:B9:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8f:ef:a3:dd:f4:6e:85:61:84:31:8d:f5:67:44:88:26:a6:
         62:ce:8c:16:82:6d:7b:99:bd:b9:f5:a8:91:13:e7:8a:33:bb:
         39:16:32:c7:ea:5c:8e:c5:43:16:a5:4f:0e:ec:83:02:4e:0a:
         67:e9:d7:d3:85:de:cc:74:5a:62:c8:5a:1a:54:62:65:c7:a0:
         43:b3:85:56:23:56:3c:0e:ab:bb:4d:5a:c1:a0:ab:b3:3d:99:
         1f:1e:eb:d9:2e:8f:ed:b9:48:fc:8d:db:cc:b8:18:3c:3c:2a:
         9e:36:69:da:de:14:6b:25:b4:fb:2c:16:59:32:e6:6a:b8:03:
         e6:d5:60:bf:62:8b:8a:ee:f9:da:66:22:2c:3f:89:2e:c8:06:
         a2:2a:2e:1d:b9:33:d5:ab:b2:d3:fd:d3:c4:d4:98:98:94:00:
         61:1f:55:5c:c9:22:e6:aa:44:58:b4:6b:f4:22:9e:ad:17:54:
         84:12:f0:56:5e:d7:68:05:c5:96:f3:89:ba:d8:c5:35:98:65:
         48:71:40:26:4e:0e:9b:14:a8:0f:1e:8d:ee:13:9a:fd:7d:a5:
         6b:86:75:b9:6d:d1:90:e5:da:05:c7:12:c3:60:e3:bc:c4:64:
         37:8e:87:35:08:86:a9:e4:1e:b0:e9:ab:dc:63:5c:ec:74:a3:
         dd:84:c9:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYT1BvjPxqGUTw0fHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MDYwMjEzMDAzNloXDTI0MDgzMTEzMDAzNlowLzEtMCsGA1UEAxMk
YTc3MGFiYjMtMGU2MS00OWM4LWEzNjQtMzEyYWE5ZmIzYjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2iTn5SBPV+LPLb5ugj2KBN9C3p0B03xOir7
8Xrn3pZuBjfmq682Js286ktYgpVrnDu1lqTI6r+mO+CM8Zjc82Fb5A/dIdifRWsT
u2sxNgn65BmGX3DEXDaM7ku4hCRG5bNMWDFv/ESKF4J7WhISbsvCqTqeEp5sF710
ziy+mUXoEp0C0nONVP+bbmg7Jq9W4kjAY/YJf1iB+uJ/tSZ1viYnevh6br5UHqd+
+sJYzJxM1i+l7l19Zvno7iY1GIYHrw2MUIiVoQkeTwNHJ+VtuFrtON0/hnVZy3Az
3ctFXYmG039wPvEgBneaGq6fyf+juIXEtcT+ZfP1fCaxrogTAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQrxpcy9SsmGLPy6kovo68b6Lk6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2VmMjY0M2YtMmVmMC0z
MjQyLTkzMjAtMGFjMjJhZTc4M2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWP76Pd9G6FYYQxjfVnRIgmpmLOjBaCbXuZvbn1qJET54ozuzkWMsfq
XI7FQxalTw7sgwJOCmfp19OF3sx0WmLIWhpUYmXHoEOzhVYjVjwOq7tNWsGgq7M9
mR8e69kuj+25SPyN28y4GDw8Kp42adreFGsltPssFlky5mq4A+bVYL9ii4ru+dpm
Iiw/iS7IBqIqLh25M9WrstP908TUmJiUAGEfVVzJIuaqRFi0a/Qinq0XVIQS8FZe
12gFxZbzibrYxTWYZUhxQCZODpsUqA8eje4Tmv19pWuGdblt0ZDl2gXHEsNg47zE
ZDeOhzUIhqnkHrDpq9xjXOx0o92Eyb0=
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org