Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa
File:                     b5372288-b2a4-3d59-81bc-41226acf8120.roa (raw, json)
Hash identifier:          GmhQYX4TUhI0Y8ohGoY3Rby64WmqmYduAi99jioAxqY=
Subject key identifier:   61:C5:87:6E:FE:B3:4E:BF:BA:08:17:5F:B2:1C:D5:A3:79:D1:92:A4
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858463AE9A46838FC329397AC35A0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa
Signing time:             Sun 16 Jun 2024 13:00:33 +0000
ROA not before:           Sun 16 Jun 2024 13:00:33 +0000
ROA not after:            Sat 14 Sep 2024 13:00:33 +0000
asID:                     8069
IP address blocks:        20.33.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:3a:e9:a4:68:38:fc:32:93:97:ac:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 16 13:00:33 2024 GMT
            Not After : Sep 14 13:00:33 2024 GMT
        Subject: CN=678126c4-c16e-413d-9c73-0b855fa3a2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:49:f7:18:f2:c5:0d:c2:6d:7a:b8:6d:15:
                    d2:d6:3f:88:98:2e:5d:38:19:df:8a:da:d0:e7:d8:
                    e1:d7:2f:b6:88:1c:06:77:b8:61:71:6b:5d:df:5f:
                    dc:1d:24:78:46:b6:90:03:6b:7a:84:a5:9c:4e:e5:
                    65:71:cd:ad:84:03:01:d4:ba:ef:71:53:38:76:75:
                    0f:7a:e3:d9:fc:c6:b9:96:7d:57:8d:95:1d:6b:57:
                    61:ff:21:a4:0e:e1:cd:78:d9:f9:25:2a:e9:2f:26:
                    00:2d:87:56:64:67:14:15:9e:31:2f:60:f3:57:23:
                    d3:71:45:c5:fd:25:79:d3:cc:28:e6:08:32:86:c0:
                    55:df:aa:a5:39:e7:e5:a7:ab:74:2d:c7:b3:fc:c0:
                    02:b5:4b:b3:18:86:f5:0c:b8:16:f7:bd:ff:3e:b9:
                    3e:09:58:50:b4:84:2f:1f:a4:09:18:25:d9:50:98:
                    f4:2d:43:ca:36:2b:b9:40:dc:8b:b2:43:8e:47:2c:
                    80:5a:74:1d:cc:7d:64:cf:96:04:8e:55:8f:3f:b5:
                    59:91:84:8e:73:62:39:44:27:14:1f:79:f9:7c:38:
                    94:76:52:f6:bf:27:b1:b5:3a:e5:b4:0a:fd:db:7c:
                    7b:de:7b:ed:45:06:f8:b4:ac:73:7a:3b:b3:6e:45:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C5:87:6E:FE:B3:4E:BF:BA:08:17:5F:B2:1C:D5:A3:79:D1:92:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:3c:6e:fb:ef:a0:94:61:28:59:e5:2b:56:0e:ec:d2:ce:
         ce:00:8e:a5:76:1c:42:38:d2:19:5a:96:d4:fc:78:4a:a7:22:
         02:17:12:e4:eb:3e:c0:b3:e5:e9:1f:55:93:19:d4:39:32:2a:
         9f:d5:cf:1d:9e:91:1e:ba:5d:38:4c:87:8b:4a:7c:76:78:89:
         0b:1f:4f:e8:3c:a8:16:08:0a:27:82:3a:f3:c3:a9:71:8b:8d:
         35:69:cf:71:e0:21:78:8f:a2:29:6e:9f:34:69:dd:8b:ba:42:
         85:3b:4e:00:92:86:c9:5c:c6:21:12:c8:24:7a:74:56:e0:f7:
         3d:45:81:2b:32:da:03:a1:cd:8d:e5:d4:30:1c:ed:b0:9b:2f:
         c5:80:4b:0f:f3:e0:78:46:d3:57:15:e2:85:37:2b:b7:ea:c6:
         69:9c:c4:9e:1c:f3:64:fd:93:69:07:5b:05:b1:4d:16:48:7a:
         c8:c4:f8:3f:f8:1b:87:86:8f:3b:90:6c:39:e6:7f:d7:b5:42:
         cc:c6:5d:55:22:d1:ba:f3:49:5b:2e:50:3d:26:a2:01:c0:e6:
         13:b5:cb:3a:08:95:51:67:bf:13:f2:a5:ba:50:e3:b1:b1:bf:
         b8:1b:e2:4a:82:72:cf:2b:b3:40:1b:5a:f3:6e:07:83:2f:c3:
         bc:5e:e1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:31:19 2024 by rpki-client on console-ams.rpki-client.org