Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afae0743-0431-334c-b31d-305cc40e4e06.roa
File:                     afae0743-0431-334c-b31d-305cc40e4e06.roa (raw, json)
Hash identifier:          BcgAYSrfLiFZ/OKZ4sefeJHi2Ul3gzofvIVf+KZQntI=
Subject key identifier:   D1:46:AB:33:32:88:B0:9D:7D:EA:FA:3C:AA:25:CA:95:35:9E:55:25
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17324D2C655
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afae0743-0431-334c-b31d-305cc40e4e06.roa
Signing time:             Mon 06 Jul 2020 15:50:59 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Tue 05 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:d2:c6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Mar  5 05:00:00 2030 GMT
        Subject: CN=9a459488-26dd-4806-8b20-223408950fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:fe:a1:ba:24:fd:21:11:c8:0b:d3:30:d7:
                    52:18:8b:19:6f:aa:82:2f:8e:77:c1:6d:b9:aa:68:
                    f2:11:85:6a:ba:49:46:14:6d:6f:0a:24:8e:c8:d6:
                    84:91:f0:53:54:ff:9d:4e:95:70:32:c6:df:8f:3f:
                    a7:c7:1d:a5:9b:b7:05:48:65:a4:c6:27:ae:c5:70:
                    36:f8:f0:74:ef:0b:c9:7d:1b:50:f7:27:4f:df:d3:
                    32:dc:b6:50:69:f6:e9:83:b8:55:d4:29:1d:3c:fb:
                    7e:ad:bd:74:e7:dc:00:9a:93:80:66:dd:6a:7e:84:
                    b7:ae:43:df:bf:68:b2:96:a1:73:3c:ae:74:17:4b:
                    53:07:d0:00:8f:e8:90:52:94:f1:1d:e6:50:a8:00:
                    b6:14:b4:28:99:e7:18:d5:e5:b2:99:aa:9b:9a:d2:
                    a8:23:c7:02:88:98:b3:c9:40:64:75:99:d4:10:3f:
                    9d:68:80:b4:7d:56:1c:69:9a:66:da:77:4a:18:f0:
                    a7:66:9b:80:6c:21:a3:fe:5d:68:f7:82:bd:bb:43:
                    5f:03:86:2c:b3:fc:5f:d3:eb:f9:81:d1:29:b5:8b:
                    10:ae:85:51:4d:15:16:43:ee:18:a0:61:c3:69:a4:
                    87:f6:be:70:60:0f:9d:e5:e2:1c:a3:5b:34:d4:0c:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:46:AB:33:32:88:B0:9D:7D:EA:FA:3C:AA:25:CA:95:35:9E:55:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afae0743-0431-334c-b31d-305cc40e4e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:bf:bb:14:06:02:30:90:51:ee:92:ee:dc:ff:34:49:78:56:
         3e:30:1c:72:16:de:47:12:1c:76:d6:d1:cf:2c:50:db:af:ec:
         17:07:22:ed:0c:78:ad:63:7b:61:d5:0d:f2:79:fe:94:a6:73:
         40:dd:2c:06:b0:8f:15:61:54:8b:d1:02:b5:9a:35:89:ed:00:
         f6:7a:47:3f:55:d7:a9:98:a5:b2:5d:fd:e8:f5:ed:e5:67:3d:
         a8:e0:6a:b5:a6:e4:ec:61:32:d9:93:23:8d:23:5b:8f:b5:c0:
         de:3d:9e:1c:ee:99:8b:f5:31:69:7f:dc:8c:78:ff:c3:5b:90:
         83:e3:bd:c7:08:b2:aa:c9:ce:28:77:c7:0c:95:4b:1e:cd:a5:
         cd:2f:c4:69:d7:40:00:7a:96:d5:ba:08:b9:63:f3:a3:67:5f:
         5b:ba:0d:45:c3:e5:d6:5b:74:b0:55:a8:ca:cf:90:74:2d:d9:
         7a:62:b2:2d:1f:28:cd:b4:71:ba:f7:2e:10:06:7f:3e:50:e6:
         b7:d0:3f:34:09:53:14:b3:68:90:3d:fa:62:c4:11:f5:db:64:
         0c:5c:c9:46:ea:78:36:80:7c:a5:a6:90:7e:ec:71:60:bf:e0:
         b9:5a:8f:48:a6:ad:f3:c9:d8:85:ae:93:cf:7a:c3:2e:76:de:
         83:1c:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org