Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a28fa6d6-c28e-3c34-baca-81e472b579af.roa
File:                     a28fa6d6-c28e-3c34-baca-81e472b579af.roa (raw, json)
Hash identifier:          4NuzrsK5kPaeAGaTUu5VOL5ZBa1bjrMLyNJXAQma5L8=
Subject key identifier:   64:8C:4A:30:34:C5:52:C4:67:0E:E6:58:75:0D:3D:B5:BA:BA:2B:DA
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17324D317C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a28fa6d6-c28e-3c34-baca-81e472b579af.roa
Signing time:             Mon 06 Jul 2020 15:51:20 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Fri 12 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:d3:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Apr 12 04:00:00 2030 GMT
        Subject: CN=a8201702-4c0a-4bf8-82eb-0073872227dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:09:d1:04:6a:f0:8b:83:dc:e9:83:81:ca:23:
                    e8:0c:ee:87:26:d7:f1:05:c8:a8:f7:a7:f5:5c:7f:
                    75:20:d7:59:81:fc:cd:17:7f:5f:e4:fc:d6:dc:a5:
                    bd:b1:d5:0e:7c:e3:59:e9:db:fd:26:ef:8f:9b:3b:
                    ba:6f:a0:00:9d:c4:7c:b6:47:f4:51:7a:4c:cc:0b:
                    45:c0:2e:0b:06:0d:51:ed:f5:46:01:ef:4b:8f:c8:
                    bc:d1:58:09:60:fe:c3:8f:d0:93:cc:bc:01:1c:33:
                    90:f7:57:50:42:be:92:47:5f:c3:1c:ad:6c:85:28:
                    fa:53:23:1f:56:3c:b6:aa:20:4c:db:d2:79:2e:2a:
                    24:8d:33:69:db:8e:c5:84:ce:20:f0:b8:5c:d7:12:
                    c9:ab:b6:e6:83:96:26:20:fb:01:7f:af:ad:24:d8:
                    e2:fc:82:72:c1:a1:0e:78:a7:f0:be:56:24:59:63:
                    0d:c8:39:d7:38:4d:4b:3f:3a:72:41:48:4c:26:8f:
                    f4:ae:5c:51:f7:be:4c:37:68:f4:e1:da:9f:08:c9:
                    6d:1b:12:0d:60:64:f8:e5:55:c7:58:df:0e:33:86:
                    ca:53:3a:d0:aa:b3:3c:3b:73:c4:c3:e4:65:e5:f2:
                    19:09:1e:cc:fe:93:3c:41:ed:88:ef:44:a0:98:d3:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8C:4A:30:34:C5:52:C4:67:0E:E6:58:75:0D:3D:B5:BA:BA:2B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a28fa6d6-c28e-3c34-baca-81e472b579af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:51:22:bc:76:39:90:cf:77:62:d9:84:8c:22:f8:04:4f:a6:
         02:fe:57:a7:79:4f:57:be:5d:ef:69:1e:56:39:e3:af:6b:51:
         99:e1:26:51:d8:bc:98:04:80:6d:a9:3e:d7:8b:af:2b:2c:f7:
         8c:97:08:df:e6:ba:52:3a:b2:45:3d:0a:53:04:45:37:e9:68:
         92:b7:43:f1:c3:90:ee:f8:60:5b:18:cd:ae:4d:13:b1:bd:47:
         c8:97:71:ea:8b:6f:c7:15:4d:a0:15:b9:83:c4:9b:71:33:ff:
         35:f9:67:eb:69:1c:b9:59:b8:21:40:5a:c5:09:10:13:b6:2c:
         e8:be:4a:51:76:eb:c8:e8:21:29:2a:2a:37:e9:87:da:c2:f4:
         d9:19:b2:b8:f1:12:ff:19:99:be:1f:3e:db:4f:28:90:a1:22:
         5a:dc:1c:fc:ae:0f:8b:8e:49:17:7e:c0:2d:2e:8b:66:5a:5e:
         27:b1:72:9b:2b:eb:29:04:be:5f:d3:85:6e:6a:6c:23:a7:db:
         90:c0:5c:8d:23:17:71:c0:1c:bc:72:ab:0f:8a:a8:31:74:40:
         01:52:e0:da:72:39:38:69:d4:23:e0:10:02:18:71:5c:62:ee:
         9e:19:e1:f4:d5:f8:32:e0:42:f0:16:b3:4f:94:a8:a9:a2:83:
         80:af:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org