Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a9676c55-9fba-374c-9f16-cf9a5fedd9ab.roa
File:                     a9676c55-9fba-374c-9f16-cf9a5fedd9ab.roa (raw, json)
Hash identifier:          cX4A8mxbvU3IYfv6mJw0hMGUlggeK1qTuG6OU40OgRQ=
Subject key identifier:   AE:B2:74:FF:45:1D:8E:65:2D:5B:C0:12:9B:B5:DC:22:88:65:82:6C
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0BC8EF
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a9676c55-9fba-374c-9f16-cf9a5fedd9ab.roa
Signing time:             Sat 13 Jun 2020 18:58:04 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Wed 20 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.72.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0b:c8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar 20 04:00:00 2030 GMT
        Subject: CN=103ed4db-74e9-4179-b249-149f6874f326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:8e:e9:d3:4e:f7:8b:8d:0c:81:65:e2:32:
                    41:92:d1:44:7a:80:04:97:4a:78:22:4d:e3:20:d8:
                    80:9f:e7:90:f3:17:68:75:cc:5c:18:a7:80:5a:c8:
                    de:1a:af:c5:f9:9c:22:a5:14:80:18:e3:3f:b7:c3:
                    d1:f5:77:50:d2:41:72:30:bf:2a:de:cb:5a:fa:c3:
                    4c:4a:ff:8c:e0:69:d2:91:03:13:2f:cc:ba:17:91:
                    29:17:30:ab:f4:17:eb:17:38:7e:98:30:1c:55:ed:
                    d7:e9:e3:32:f4:91:23:3e:fe:93:3f:17:30:29:4f:
                    6b:cc:b5:7c:9a:90:30:be:ee:6f:4c:ac:4f:43:f8:
                    0a:a3:07:d4:f5:2b:6e:0a:cc:90:f9:6b:ab:f3:f0:
                    29:27:b6:58:20:26:32:e8:30:28:3a:95:0e:41:b2:
                    83:f3:1c:2a:76:4e:4f:d8:eb:0e:d6:e2:3d:36:8e:
                    7c:97:90:b9:3b:09:0a:70:21:4f:5d:6a:9e:0a:ee:
                    1e:46:4f:a4:0a:24:84:3e:b2:71:e6:7b:97:25:9c:
                    33:14:db:44:9f:2c:11:cc:8e:33:6b:4f:04:44:9f:
                    ce:49:9e:c0:e9:ff:b9:de:31:08:77:44:8d:9b:8b:
                    82:46:21:e5:4c:08:3f:bb:b7:0e:eb:f1:3e:c6:65:
                    d5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B2:74:FF:45:1D:8E:65:2D:5B:C0:12:9B:B5:DC:22:88:65:82:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a9676c55-9fba-374c-9f16-cf9a5fedd9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:fe:9d:33:7a:33:8d:6a:03:1e:fd:8b:5b:ea:6c:fa:40:
         b4:9a:89:e0:9b:9e:be:18:da:13:f1:24:d9:dc:eb:da:c9:7b:
         c4:f6:85:08:8c:12:d8:fd:bd:b2:30:75:9e:f1:43:72:f7:d6:
         45:38:8c:f1:85:bc:83:7c:b1:d3:99:e2:3c:58:b0:c8:f1:11:
         f2:bb:ea:e6:fc:e7:a6:55:cd:44:71:3f:15:1c:47:ec:e8:e9:
         aa:f8:de:71:74:e7:40:c8:3d:fc:c0:48:91:3c:68:0a:5f:0e:
         09:95:0b:0d:f4:9c:00:6a:fe:1f:d0:9b:2d:00:25:76:34:71:
         5f:f9:71:b0:bb:4c:8f:80:28:fa:ee:54:c5:ea:f6:f2:ae:39:
         69:2d:2d:db:82:fd:ba:c0:ec:a6:44:02:24:06:e8:b0:e9:55:
         65:2b:51:13:27:83:2a:bd:c1:b6:bc:52:c0:8c:48:d0:42:68:
         a5:92:1b:0e:8d:06:20:04:3e:e0:3f:0a:8c:bf:63:e2:a8:77:
         c4:4a:56:ef:b6:18:38:77:c0:4d:eb:3a:80:71:7d:74:95:68:
         aa:2c:3e:09:41:89:3b:29:d1:cc:29:dc:29:74:6c:ce:ab:ed:
         c3:a3:4a:30:53:7d:7f:26:a7:00:b5:f7:fd:7d:2d:77:8c:5e:
         29:71:c2:dc
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcq8LyO8wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA2MTMwNDAwMDBaFw0zMDAzMjAwNDAwMDBaMC8xLTArBgNVBAMTJDEw
M2VkNGRiLTc0ZTktNDE3OS1iMjQ5LTE0OWY2ODc0ZjMyNjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAN+UjunTTveLjQyBZeIyQZLRRHqABJdKeCJN4yDY
gJ/nkPMXaHXMXBingFrI3hqvxfmcIqUUgBjjP7fD0fV3UNJBcjC/Kt7LWvrDTEr/
jOBp0pEDEy/MuheRKRcwq/QX6xc4fpgwHFXt1+njMvSRIz7+kz8XMClPa8y1fJqQ
ML7ub0ysT0P4CqMH1PUrbgrMkPlrq/PwKSe2WCAmMugwKDqVDkGyg/McKnZOT9jr
DtbiPTaOfJeQuTsJCnAhT11qngruHkZPpAokhD6yceZ7lyWcMxTbRJ8sEcyOM2tP
BESfzkmewOn/ud4xCHdEjZuLgkYh5UwIP7u3DuvxPsZl1akCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSusnT/RR2OZS1bwBKbtdwiiGWCbDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2E5Njc2YzU1LTlmYmEtMzc0
Yy05ZjE2LWNmOWE1ZmVkZDlhYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEARQvSDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEANnz+nTN6M41qAx79i1vqbPpAtJqJ4JuevhjaE/Ek2dzr2sl7xPaFCIwS2P29
sjB1nvFDcvfWRTiM8YW8g3yx05niPFiwyPER8rvq5vznplXNRHE/FRxH7Ojpqvje
cXTnQMg9/MBIkTxoCl8OCZULDfScAGr+H9CbLQAldjRxX/lxsLtMj4Ao+u5Uxer2
8q45aS0t24L9usDspkQCJAbosOlVZStREyeDKr3BtrxSwIxI0EJopZIbDo0GIAQ+
4D8KjL9j4qh3xEpW77YYOHfATes6gHF9dJVoqiw+CUGJOynRzCncKXRszqvtw6NK
MFN9fyanALX3/X0td4xeKXHC3A==
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:40:42 2024 by rpki-client on console-fra.rpki-client.org