Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8062e060-9cf8-3aa1-9295-7f24747f9829.roa
File:                     8062e060-9cf8-3aa1-9295-7f24747f9829.roa (raw, json)
Hash identifier:          w6Xs5qZHG3048JDciIQcYgRDqSx2bnqKOXHdEBJh4CE=
Subject key identifier:   39:A3:32:F7:F5:89:45:8D:EC:BD:43:AC:89:29:B2:AC:02:0F:E1:BD
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17324D2AD94
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8062e060-9cf8-3aa1-9295-7f24747f9829.roa
Signing time:             Mon 06 Jul 2020 15:50:53 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Sat 23 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:d2:ad:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Mar 23 04:00:00 2030 GMT
        Subject: CN=7dd01b30-494e-468d-8343-ccdf9eade5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c9:7e:d8:e4:c0:d7:5f:c9:68:33:92:68:2d:
                    79:a1:5a:2b:31:c3:c6:55:39:72:12:7a:f4:eb:15:
                    46:ad:01:5b:96:f9:22:6d:cd:79:21:44:f5:5d:e6:
                    b5:3c:a2:f9:14:c2:59:44:2b:05:7b:b2:48:49:ee:
                    5b:e5:96:ef:37:e4:bb:48:be:80:c6:f6:0e:3b:ba:
                    40:f2:16:72:0c:fb:7d:f3:2c:c1:bd:09:7d:0a:9e:
                    d7:4a:2b:74:b7:ce:ad:75:c1:9d:88:e7:5a:43:2e:
                    b6:06:ec:0c:32:6c:b8:12:c0:d9:d2:96:5b:99:2b:
                    d2:91:ea:6b:4c:9f:c9:5f:67:9c:a6:3a:c6:d9:85:
                    11:b4:f9:39:84:d7:a6:bd:ce:af:ac:9c:0e:a1:bb:
                    13:88:02:ed:32:32:16:ee:a9:ad:88:ed:3e:c5:f8:
                    e6:bc:5a:9e:a2:26:14:4d:a2:3b:48:f1:7e:31:75:
                    08:49:16:7e:51:08:0c:cf:a5:69:ed:98:e5:84:18:
                    f6:2a:aa:1a:97:85:cd:16:0d:85:12:9f:d9:44:20:
                    78:66:16:8c:af:a2:d1:89:ab:de:02:35:35:bb:21:
                    b8:b4:3a:74:77:45:71:45:16:3d:8f:80:6b:57:79:
                    b5:27:53:0d:0d:02:6f:26:93:f9:58:60:e0:df:8a:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A3:32:F7:F5:89:45:8D:EC:BD:43:AC:89:29:B2:AC:02:0F:E1:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8062e060-9cf8-3aa1-9295-7f24747f9829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0b:04:bc:aa:bb:0e:78:47:80:b5:4e:c5:7a:66:f5:6c:38:
         76:f2:fa:c6:dc:30:6e:0e:e5:86:4a:18:fe:85:9f:ab:1f:b2:
         49:0f:c7:b0:61:b4:44:c0:8b:b4:ad:47:ae:55:2f:07:a2:ee:
         96:2e:b2:02:f7:89:65:29:7e:ae:62:6e:ed:b2:27:5b:ad:3a:
         b4:7c:1f:2e:41:40:b1:f1:9a:df:f6:a9:26:b8:aa:db:5a:40:
         ee:91:b9:c8:66:73:44:a2:0e:87:86:75:56:50:00:50:b5:c8:
         c1:3d:c4:20:b9:8b:31:8f:2b:4d:2f:d0:51:41:eb:4e:d3:df:
         13:89:e8:db:a6:24:ed:dc:d8:d9:94:8e:8e:78:7c:d3:a9:c0:
         64:4e:9e:88:d0:00:2b:da:6e:db:69:ef:1d:27:66:6f:11:5f:
         59:c8:4f:17:5f:f5:db:17:54:9a:53:ac:cf:a9:46:e1:8c:d8:
         9f:1c:fb:a6:9f:c3:66:d1:5b:df:85:9a:9b:08:fc:f3:7c:e6:
         f9:3e:76:f3:41:2f:b4:3a:6e:1d:d7:c6:27:50:24:e3:ed:f2:
         8e:b2:cb:9f:8b:d0:10:0c:3d:58:af:ba:6d:6c:6a:86:44:7d:
         f5:af:30:36:db:12:3f:31:0d:66:40:af:52:c6:43:84:d2:9b:
         8d:1c:1d:bd
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcyTSrZQwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA3MDYwNDAwMDBaFw0zMDAzMjMwNDAwMDBaMC8xLTArBgNVBAMTJDdk
ZDAxYjMwLTQ5NGUtNDY4ZC04MzQzLWNjZGY5ZWFkZTVmZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAO/JftjkwNdfyWgzkmgteaFaKzHDxlU5chJ69OsV
Rq0BW5b5Im3NeSFE9V3mtTyi+RTCWUQrBXuySEnuW+WW7zfku0i+gMb2Dju6QPIW
cgz7ffMswb0JfQqe10ordLfOrXXBnYjnWkMutgbsDDJsuBLA2dKWW5kr0pHqa0yf
yV9nnKY6xtmFEbT5OYTXpr3Or6ycDqG7E4gC7TIyFu6prYjtPsX45rxanqImFE2i
O0jxfjF1CEkWflEIDM+lae2Y5YQY9iqqGpeFzRYNhRKf2UQgeGYWjK+i0Ymr3gI1
NbshuLQ6dHdFcUUWPY+Aa1d5tSdTDQ0CbyaT+Vhg4N+KAFsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQ5ozL39YlFjey9Q6yJKbKsAg/hvTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzgwNjJlMDYwLTljZjgtM2Fh
MS05Mjk1LTdmMjQ3NDdmOTgyOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABQvNDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAJwsEvKq7DnhHgLVOxXpm9Ww4dvL6xtwwbg7lhkoY/oWfqx+ySQ/HsGG0RMCL
tK1HrlUvB6Luli6yAveJZSl+rmJu7bInW606tHwfLkFAsfGa3/apJriq21pA7pG5
yGZzRKIOh4Z1VlAAULXIwT3EILmLMY8rTS/QUUHrTtPfE4no26Yk7dzY2ZSOjnh8
06nAZE6eiNAAK9pu22nvHSdmbxFfWchPF1/12xdUmlOsz6lG4YzYnxz7pp/DZtFb
34Wamwj883zm+T5280EvtDpuHdfGJ1Ak4+3yjrLLn4vQEAw9WK+6bWxqhkR99a8w
NtsSPzENZkCvUsZDhNKbjRwdvQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org