Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ba2bb848-2c79-35ba-bb3c-1ff744560772.roa
File:                     ba2bb848-2c79-35ba-bb3c-1ff744560772.roa (raw, json)
Hash identifier:          NvXIV89OmCgP0mYTqBxDFfT6B5F5lFzS+bP5UF1mjIk=
Subject key identifier:   F0:2E:67:7D:41:17:A3:7A:1A:90:C4:BA:10:1F:E6:34:42:5E:4A:A0
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0BE00A
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ba2bb848-2c79-35ba-bb3c-1ff744560772.roa
Signing time:             Sat 13 Jun 2020 18:58:10 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Sat 09 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.76.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0b:e0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar  9 05:00:00 2030 GMT
        Subject: CN=2408feb6-9c7a-417f-ad09-eeaa0ea95ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:8f:bd:a5:bb:a4:e9:27:11:12:c5:b3:ec:
                    f8:b0:9f:0a:5b:9a:65:50:6c:36:cf:58:33:26:f2:
                    f1:a0:02:5c:74:20:b4:d3:dd:29:cf:55:cb:86:4a:
                    bd:62:d7:c0:b5:12:70:32:03:85:d4:bb:fc:e2:1c:
                    a7:5f:dc:47:ce:1e:3b:fa:e5:c5:77:9b:95:a4:77:
                    02:80:c8:3b:83:1c:f6:62:32:5e:f7:15:f6:81:32:
                    cf:5d:3b:41:85:2b:d6:30:5c:00:71:fd:24:00:a4:
                    18:d1:77:31:6c:84:0c:03:62:9d:5b:f9:47:95:78:
                    81:b1:1d:de:2c:cd:da:95:0f:89:d0:54:90:75:32:
                    5d:45:79:42:aa:b7:98:51:b9:44:38:ec:88:41:36:
                    dc:9c:2b:9b:50:b7:57:36:f3:45:44:f2:a3:e6:11:
                    df:f0:09:e4:f7:5a:73:c5:32:c2:38:ce:77:29:14:
                    35:07:75:16:d8:a2:5a:8b:18:ed:b5:dd:1f:bf:2a:
                    fc:85:be:50:04:a5:be:56:6b:5a:80:ce:91:e9:32:
                    60:1a:d9:39:d0:31:f9:02:a1:fb:08:75:c3:b9:d1:
                    2e:46:26:58:e6:07:4a:66:69:28:8b:2e:12:55:bb:
                    9a:a0:90:f7:72:74:53:66:08:9a:d6:36:ae:8c:2b:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2E:67:7D:41:17:A3:7A:1A:90:C4:BA:10:1F:E6:34:42:5E:4A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ba2bb848-2c79-35ba-bb3c-1ff744560772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:1c:f4:2d:b5:49:59:82:e1:41:e3:b0:b3:a2:f0:67:e2:fc:
         68:49:53:4e:f4:c3:36:8f:a2:18:1a:39:5c:0c:bb:28:cf:3e:
         d7:7b:1c:11:bf:e8:01:01:1a:5b:ea:c1:ab:ea:2f:52:5e:96:
         37:a5:27:7c:ac:97:06:2e:5b:dd:df:15:58:64:f1:da:3f:a0:
         01:76:de:76:51:65:e7:8b:ea:8e:c1:cf:8f:2f:ff:57:c4:7b:
         e9:42:df:5d:7f:6f:bb:ba:63:ab:12:50:a1:54:0d:e6:e6:ba:
         77:75:d1:4b:dd:f7:f1:d6:43:01:ec:d3:3d:29:a7:2d:30:fd:
         c6:b5:7f:be:c2:bf:67:07:8e:cc:26:83:7c:98:14:6d:83:db:
         58:73:b2:76:48:6c:ef:02:94:aa:6e:e7:a8:75:32:29:fe:fa:
         4c:77:36:65:fd:45:bd:7b:3e:4a:54:21:91:a5:a1:2c:0e:31:
         1d:eb:19:7f:0b:dc:2b:a1:c8:50:01:f5:c1:34:4e:c3:54:77:
         2b:31:22:89:3a:33:88:a4:b6:7a:60:6d:0e:8d:d0:cc:de:06:
         ec:dc:ed:72:d6:bd:32:98:d9:a0:4e:fd:4f:33:f9:3c:6e:70:
         1e:19:fc:48:16:bf:8a:62:f0:91:af:0a:38:9c:dd:c5:63:ef:
         7f:95:7c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:11 2024 by rpki-client on console-ams.rpki-client.org