Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a643cdde-67d2-366c-b975-a4e9acc4036b.roa
File:                     a643cdde-67d2-366c-b975-a4e9acc4036b.roa (raw, json)
Hash identifier:          1/eJrKBJeAD4BaTMUeo8aQMwTBDIiX3cHhADc7Eup08=
Subject key identifier:   0A:EB:13:2D:E6:21:91:6C:FD:96:5C:4C:0E:34:2B:C6:08:01:E7:83
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF085B52
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a643cdde-67d2-366c-b975-a4e9acc4036b.roa
Signing time:             Sat 13 Jun 2020 18:54:19 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Fri 08 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:08:5b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar  8 05:00:00 2030 GMT
        Subject: CN=331c2209-d087-48ff-8166-bb6519d5420e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:37:d7:98:86:a6:13:dd:98:2d:92:3a:4b:
                    37:9c:2e:cc:70:10:ad:97:be:ce:ae:75:16:de:19:
                    5d:2c:bf:f9:f4:a8:cd:b6:99:6d:c2:7d:65:09:a8:
                    4b:17:33:5a:16:d3:87:1d:a7:ea:65:67:0d:38:f8:
                    95:dd:aa:93:03:22:4a:d5:03:77:f1:9a:fe:ea:ce:
                    64:94:6b:45:31:3b:ee:81:3d:c2:06:c3:71:d4:29:
                    22:fd:36:57:fa:8d:23:07:51:ad:c4:96:a4:03:48:
                    fc:7f:f2:02:aa:26:01:f7:4e:ac:36:13:1b:0f:e9:
                    e1:bb:55:75:88:5d:01:b3:c2:7b:17:39:1d:2a:12:
                    da:40:8a:e3:6b:d6:25:e6:7f:2b:74:26:a6:5d:6b:
                    16:67:33:ad:20:be:3c:25:b6:b2:42:11:e9:ae:fa:
                    03:6e:ff:5e:6f:19:39:d6:63:3b:a1:8c:f9:5d:e1:
                    76:48:bb:0a:88:f3:4a:df:97:ba:a6:07:96:b0:19:
                    13:fa:f7:f1:c1:8a:38:ea:d8:93:bf:4b:e1:9f:7f:
                    55:85:a1:34:23:5a:c0:52:35:88:38:48:0b:03:11:
                    2b:b2:e3:01:f7:48:5f:b7:ee:e9:17:0b:bf:5c:c7:
                    cc:13:64:65:a6:fb:db:57:8f:b6:1c:fc:31:d3:b1:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EB:13:2D:E6:21:91:6C:FD:96:5C:4C:0E:34:2B:C6:08:01:E7:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a643cdde-67d2-366c-b975-a4e9acc4036b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:3a:1d:a2:37:a9:87:d6:17:41:81:0e:ec:d0:d9:ae:3b:1d:
         62:0a:3a:03:b0:c8:ca:07:98:69:fd:b5:eb:d9:13:20:24:16:
         e1:bf:62:e3:dc:4a:13:13:ba:39:b6:b6:e6:94:02:65:ff:82:
         69:be:7a:9c:45:26:8f:af:37:dd:22:9a:27:65:a0:05:a2:8f:
         ef:61:15:07:09:9e:c8:a2:34:44:8b:73:81:2a:3d:02:9f:3d:
         e9:1d:eb:27:7d:01:13:8a:52:20:6e:40:ff:48:db:d6:ce:f4:
         b1:9f:db:77:2b:5c:f1:79:10:4e:1f:d1:e4:eb:22:36:3e:a8:
         94:ff:41:71:db:5f:ea:96:9c:a9:c4:e4:2a:9c:64:8b:6f:48:
         2a:60:7a:55:30:99:5f:bc:3e:09:5e:5b:6c:91:60:4b:55:59:
         4b:51:49:c4:31:19:24:e8:1e:94:19:3c:0f:14:21:74:fe:c0:
         4a:e4:7a:82:9a:63:41:71:cc:75:16:a8:ba:f7:8a:b4:dc:bc:
         a7:ba:87:9b:d7:fc:9b:f0:50:d3:0c:5e:26:e2:01:70:81:16:
         d2:c2:8c:34:d6:06:b3:bc:e7:31:8e:82:24:c6:34:1f:05:b0:
         37:6a:33:8c:b3:24:71:19:60:fa:e4:e5:17:61:d4:ae:77:9c:
         74:c1:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:45:33 2024 by rpki-client on console-fra.rpki-client.org