Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa
File:                     848376e0-ddab-3a49-a842-785182b9be6b.roa (raw, json)
Hash identifier:          5lhLKPa60Wk+xomhO969Wpp9M4Qi8v4Z5Brp04u4+/U=
Subject key identifier:   39:23:D8:23:F0:81:70:8C:A0:75:A3:5A:7A:53:0A:D5:08:5E:30:B2
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845C70E2848189FB40153F22DC0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa
Signing time:             Mon 06 May 2024 01:00:24 +0000
ROA not before:           Mon 06 May 2024 01:00:24 +0000
ROA not after:            Sun 04 Aug 2024 01:00:24 +0000
asID:                     8069
IP address blocks:        20.33.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c7:0e:28:48:18:9f:b4:01:53:f2:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May  6 01:00:24 2024 GMT
            Not After : Aug  4 01:00:24 2024 GMT
        Subject: CN=b2a78f80-8754-4ede-b641-13182c58d52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:19:60:8b:e8:7d:24:99:90:27:dd:6c:c1:
                    dc:45:4d:77:8b:79:c3:e9:8d:86:02:45:60:11:d6:
                    5b:2d:a5:d8:23:f7:3c:08:b5:e6:b6:99:58:a3:6d:
                    f0:c5:ab:04:88:bf:ae:fb:cf:08:b3:45:80:1e:99:
                    72:e3:ae:79:f4:53:37:4a:e7:11:49:25:6b:03:06:
                    6f:10:da:df:e8:4f:11:07:5d:69:94:c1:58:66:49:
                    3f:65:fc:60:2b:3c:c3:ca:13:3d:1f:89:14:a4:61:
                    03:f7:ef:0f:fe:88:8f:d1:3b:02:62:cf:ad:4d:c0:
                    1a:86:29:52:b4:28:47:a2:2c:b6:db:af:5c:fc:ae:
                    a7:f4:dc:b2:7b:d9:ff:8c:10:d4:16:73:80:bc:05:
                    2e:18:02:5b:0b:f3:b8:ca:f3:ab:2e:3f:32:99:7d:
                    82:7c:e7:3b:29:c1:ea:8c:1a:7d:35:35:1d:dc:78:
                    57:dd:d7:e0:62:e5:c2:e2:34:28:37:71:39:b4:df:
                    8f:be:27:de:4b:79:fa:7e:41:19:03:97:5a:ef:5c:
                    f0:1a:87:8d:2b:95:b9:46:71:67:18:77:51:0c:6a:
                    fc:4d:d8:86:8c:1d:97:68:b4:d0:e0:01:76:28:7f:
                    24:d1:db:29:65:e2:5a:c9:46:42:5e:83:7d:65:8b:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:D8:23:F0:81:70:8C:A0:75:A3:5A:7A:53:0A:D5:08:5E:30:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:73:96:78:23:02:47:78:bf:c7:0a:44:db:b1:2e:27:c8:3a:
         54:16:67:3b:cc:9d:38:84:b2:78:65:7b:0c:bc:90:8d:4a:b5:
         b8:91:ba:56:d3:12:27:97:49:7f:4d:7f:31:b5:27:d2:bd:65:
         4c:a6:13:36:f5:5f:37:78:91:59:7b:b3:c1:a4:d6:14:76:29:
         ff:3a:a0:8c:c1:9d:bf:9a:40:80:a4:6e:cb:b2:28:1c:78:d2:
         41:ba:5f:29:75:a0:71:69:c0:4b:de:65:98:b7:80:f2:dd:44:
         57:99:4f:3b:63:7e:07:7c:83:dd:fa:0f:ca:34:3c:1e:85:11:
         56:02:58:63:76:eb:ca:aa:e9:fc:eb:6e:3b:e8:81:7b:7a:9d:
         9f:fc:55:da:48:86:c9:7a:32:2c:ce:c5:93:19:65:d0:0a:a9:
         1d:80:42:29:6c:11:dc:dc:64:91:52:2e:44:42:c2:a2:8d:b7:
         e6:48:b7:7f:41:64:68:59:4b:60:38:ec:a8:72:06:4b:a7:ec:
         2c:75:67:c2:83:cc:18:f4:33:06:ee:bb:35:23:75:e1:5a:e1:
         ba:bb:78:50:36:8f:1c:1c:79:cc:75:ba:33:ae:20:19:38:44:
         be:72:50:cf:9b:38:d7:f5:8c:91:c9:ca:03:7b:b5:c3:c3:b0:
         b3:62:15:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXHDihIGJ+0AVPyLcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MDUwNjAxMDAyNFoXDTI0MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
YjJhNzhmODAtODc1NC00ZWRlLWI2NDEtMTMxODJjNThkNTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsoZYIvofSSZkCfdbMHcRU13i3nD6Y2GAkVg
EdZbLaXYI/c8CLXmtplYo23wxasEiL+u+88Is0WAHply46559FM3SucRSSVrAwZv
ENrf6E8RB11plMFYZkk/ZfxgKzzDyhM9H4kUpGED9+8P/oiP0TsCYs+tTcAahilS
tChHoiy2269c/K6n9Nyye9n/jBDUFnOAvAUuGAJbC/O4yvOrLj8ymX2CfOc7KcHq
jBp9NTUd3HhX3dfgYuXC4jQoN3E5tN+PvifeS3n6fkEZA5da71zwGoeNK5W5RnFn
GHdRDGr8TdiGjB2XaLTQ4AF2KH8k0dspZeJayUZCXoN9ZYuqwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDkj2CPwgXCMoHWjWnpTCtUIXjCyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODQ4Mzc2ZTAtZGRhYi0z
YTQ5LWE4NDItNzg1MTgyYjliZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEVzlngjAkd4v8cKRNuxLifIOlQWZzvMnTiEsnhlewy8kI1KtbiRulbT
EieXSX9NfzG1J9K9ZUymEzb1Xzd4kVl7s8Gk1hR2Kf86oIzBnb+aQICkbsuyKBx4
0kG6Xyl1oHFpwEveZZi3gPLdRFeZTztjfgd8g936D8o0PB6FEVYCWGN268qq6fzr
bjvogXt6nZ/8VdpIhsl6MizOxZMZZdAKqR2AQilsEdzcZJFSLkRCwqKNt+ZIt39B
ZGhZS2A47KhyBkun7Cx1Z8KDzBj0MwbuuzUjdeFa4bq7eFA2jxwcecx1ujOuIBk4
RL5yUM+bONf1jJHJygN7tcPDsLNiFUI=
-----END CERTIFICATE-----
Generated at Sun Jun 16 13:45:33 2024 by rpki-client on console-fra.rpki-client.org