Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa
File:                     b12175cf-2702-3731-83e8-14996dac56a9.roa (raw, json)
Hash identifier:          ffcvtY7IljFVXDzby9D+zPTvsKR2E5JYgy+c/R1MMtU=
Subject key identifier:   C6:A6:80:95:DA:E0:1E:BB:1A:3E:9B:15:49:89:3C:27:CD:DB:E2:3D
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584566FEF1C4CAE8011D21372C40
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa
Signing time:             Mon 01 Apr 2024 15:12:12 +0000
ROA not before:           Mon 01 Apr 2024 15:12:12 +0000
ROA not after:            Sun 30 Jun 2024 15:12:12 +0000
asID:                     8069
IP address blocks:        20.33.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:fe:f1:c4:ca:e8:01:1d:21:37:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr  1 15:12:12 2024 GMT
            Not After : Jun 30 15:12:12 2024 GMT
        Subject: CN=6d6b1aa7-aa03-4ab1-9cd0-ec8fdd6fd453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:db:ed:ad:df:8f:d9:28:c9:bd:b1:5e:ba:05:
                    de:13:0b:13:b1:36:0f:d9:e7:df:27:fe:8e:aa:6f:
                    f1:a9:6d:f1:73:c0:06:15:2e:3b:a9:ef:1f:38:d8:
                    06:da:b9:cb:f5:24:9e:19:50:0e:a6:3f:88:ab:cb:
                    66:90:58:a2:5c:56:90:71:d0:1c:87:7d:99:70:10:
                    22:63:0d:16:87:dd:2a:db:a6:8d:44:76:d0:af:c8:
                    6d:4b:77:1f:7d:bf:d0:74:34:46:1c:0c:ce:e6:8e:
                    02:34:ad:3c:3c:5f:12:67:4f:6f:e3:53:3c:18:2b:
                    f7:9c:9e:b1:89:3b:5a:2a:63:1a:e6:df:68:80:7c:
                    d4:ae:01:9c:57:39:87:5a:c0:49:f9:62:cd:de:fc:
                    7f:9c:f6:81:06:a8:35:c9:eb:58:a1:63:bd:c3:fb:
                    0b:99:df:12:08:91:f0:27:26:e0:ee:b6:d5:79:5c:
                    df:94:36:84:74:ec:e2:43:e9:3a:4a:01:52:01:e9:
                    90:58:e7:28:88:52:36:37:94:76:48:73:a2:01:62:
                    90:43:fd:99:ac:96:c5:eb:b0:5e:fc:cf:e2:67:c3:
                    3c:81:27:87:36:d4:dc:63:5c:2a:8f:58:e5:a7:2c:
                    8a:e5:9a:21:4f:e2:09:49:55:05:5b:3f:6e:d9:71:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A6:80:95:DA:E0:1E:BB:1A:3E:9B:15:49:89:3C:27:CD:DB:E2:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:72:aa:e6:99:7d:55:80:02:f5:72:4e:43:b5:63:94:c7:fd:
         ac:72:c6:77:29:b8:82:48:64:7d:9e:6c:31:86:e5:7a:2e:4c:
         05:06:f6:5c:1a:b7:95:2f:0e:0f:90:54:0d:17:16:98:1f:4c:
         29:8a:6a:29:a1:80:2c:59:9b:5c:e5:b8:1a:93:58:a0:d6:39:
         9f:ad:a1:a9:7e:61:ae:36:cd:41:10:1e:f9:b9:59:62:35:b5:
         92:b8:4b:52:58:80:9f:22:0c:71:72:4a:a0:38:83:f6:13:ab:
         00:31:7e:9d:e7:ff:d1:06:42:af:7c:49:ab:06:57:dd:7e:e0:
         c0:d1:5c:e4:15:84:ae:00:fe:8b:12:31:b8:7f:98:15:91:56:
         e9:99:3d:25:d4:c2:73:73:2f:5f:06:c6:75:a3:2f:d2:01:d6:
         e1:87:6b:ed:ed:36:95:98:fe:55:14:0a:b7:c6:6a:5e:48:31:
         9d:c8:c5:0a:1c:3b:56:ca:f2:9a:b1:da:43:36:44:19:62:7f:
         cd:d6:e3:07:1d:76:73:51:36:83:fb:cf:a7:2d:4b:b2:a7:44:
         39:57:93:f1:9f:42:66:dd:98:a5:ed:b6:6a:0e:20:a0:8e:f7:
         26:25:0e:f1:25:27:40:11:9a:25:bb:58:81:e0:ac:12:b4:84:
         6b:ee:3f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:11 2024 by rpki-client on console-ams.rpki-client.org