Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa
File:                     9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa (raw, json)
Hash identifier:          nKYZf5iv7cOgkUx6dhGSn4ySaSVT8xdKLQVKRiCu7HU=
Subject key identifier:   00:EA:D9:90:89:F8:A2:6B:89:1F:76:37:BD:1C:86:D7:0E:2A:F7:B5
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845B3837602CA8D324648DCBF00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     8069
IP address blocks:        20.33.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:76:02:ca:8d:32:46:48:dc:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=29842fd1-8a9d-4f44-858b-c71664f8f5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2d:b2:92:31:9b:e8:6b:3b:9f:3f:ee:ab:bb:
                    87:c8:3f:ae:2c:c8:df:cb:2b:42:46:7f:0b:c5:77:
                    cd:b1:ff:b7:d1:b4:02:d0:0b:b3:59:61:dd:9f:e8:
                    b1:5c:17:75:d8:d9:c2:38:7e:b7:59:cc:96:39:0d:
                    0b:69:2a:0f:8a:fe:b4:11:43:63:e5:fc:43:ed:69:
                    12:61:ef:0b:05:fb:fc:9c:97:9e:b1:a8:eb:a1:30:
                    db:b1:92:0b:4e:f5:45:8a:f1:b2:68:b5:0d:4a:a0:
                    8a:fc:fa:6d:04:5e:d7:a8:55:80:9e:b0:3a:ed:a1:
                    d0:82:a9:5f:a6:96:1b:fb:fe:af:8f:6c:fb:c7:f1:
                    bf:f8:3a:3f:bd:00:db:d7:3e:d1:e4:e7:61:f0:b6:
                    ad:4c:bf:01:e2:ea:8c:28:08:f2:13:d1:a7:b8:c8:
                    d6:73:95:fd:19:0f:fa:05:bc:1f:56:38:47:55:77:
                    2b:fd:4b:87:a4:be:ab:2b:44:a8:31:4d:f5:e2:96:
                    96:9d:99:1d:45:65:f6:2b:47:fd:6b:23:30:ad:99:
                    13:0b:4b:03:f3:8a:34:0d:42:d2:37:66:ba:9a:2c:
                    75:ca:33:f3:22:23:af:96:a1:80:df:95:b7:07:90:
                    74:51:a6:b6:87:ec:78:4c:e8:1b:c2:58:9f:1c:d6:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EA:D9:90:89:F8:A2:6B:89:1F:76:37:BD:1C:86:D7:0E:2A:F7:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:84:2c:a6:13:ea:a4:db:b5:dc:4f:44:a8:b9:1d:37:c2:10:
         42:eb:3c:07:2a:ee:50:ab:57:6e:fd:ae:7c:4e:62:2a:b1:73:
         1a:da:ec:6f:c7:4f:04:48:d2:cb:a4:90:ac:e5:29:63:a7:87:
         ad:95:40:7b:cd:04:79:53:b2:7f:50:a8:d6:d4:61:64:b6:3f:
         e1:c0:f4:eb:56:b7:be:6b:fd:09:45:0f:9b:f0:eb:a8:76:af:
         d2:22:e4:e5:54:d9:5b:b5:2a:8d:a3:6f:87:3b:82:98:2c:13:
         68:d4:22:ab:71:3d:4a:bb:1a:ff:23:ca:2d:38:48:e7:9c:9e:
         3e:17:96:2c:47:1c:b2:e3:36:6f:67:14:ee:95:08:8d:c8:9e:
         e2:d9:8d:6f:79:8f:2c:37:a3:0a:2e:94:e0:2a:03:1d:5f:cf:
         47:2d:4c:81:57:25:c9:9c:c8:b7:06:9f:de:42:a6:55:44:35:
         79:e1:8c:c3:5a:e1:f7:27:80:57:62:5e:0f:a3:d0:5a:c2:50:
         ea:01:e3:b7:d2:b3:68:df:b1:b0:32:b8:0e:6e:45:2a:2e:4b:
         18:d6:8b:63:23:fe:9d:7c:53:f2:e7:3d:a4:62:5b:e5:6c:38:
         87:c2:bc:f8:63:d8:5a:e6:98:67:79:eb:f1:12:10:c5:3c:61:
         40:c6:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:40:42 2024 by rpki-client on console-fra.rpki-client.org