Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5597617-72e3-30ca-9e8e-f721e25e7bb5.roa
File:                     c5597617-72e3-30ca-9e8e-f721e25e7bb5.roa (raw, json)
Hash identifier:          nuVYNCzti2Xst052lU56liSnnDWl2J4n7owM2F/9fYQ=
Subject key identifier:   A0:14:9B:41:63:F9:E9:9C:BD:18:A0:4F:60:30:3B:14:E2:A3:69:7D
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17324D28AD6
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5597617-72e3-30ca-9e8e-f721e25e7bb5.roa
Signing time:             Mon 06 Jul 2020 15:50:44 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Wed 06 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:d2:8a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Mar  6 05:00:00 2030 GMT
        Subject: CN=ee6b92e2-eb55-495c-baad-d288d3b84eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:3c:40:15:05:d9:50:bb:61:35:5d:96:6c:
                    22:57:62:33:2f:51:af:8d:74:42:fd:20:86:3f:d6:
                    cc:c1:a7:dd:bd:a3:a8:b3:87:21:91:87:74:27:a4:
                    fb:cc:79:be:65:e3:b5:ab:88:13:9f:ac:60:8a:d3:
                    ad:5c:62:6f:3d:11:03:ad:0f:4b:31:e4:ef:93:2d:
                    42:9b:fc:f1:31:e2:79:9a:7c:55:a6:24:b5:f3:a5:
                    8e:f3:16:db:26:c8:fa:b6:f4:f1:57:7c:a9:ff:dc:
                    8f:99:c6:ff:8d:e6:9c:aa:fc:31:7e:b6:5a:1b:23:
                    32:58:05:41:43:9f:1b:b0:1d:85:5e:f3:7a:57:fe:
                    d2:6b:9a:8c:75:6b:93:7e:85:a4:69:77:c2:47:e6:
                    49:5e:73:3c:98:3a:b1:9c:8d:44:55:54:57:e3:d2:
                    8e:f8:a4:44:53:82:7c:76:44:c4:08:a7:cb:a4:ed:
                    8a:f1:2a:25:1d:58:1c:01:16:92:68:e6:a7:2a:10:
                    f1:86:d2:5d:01:5f:1e:c1:c3:86:d1:be:e6:23:77:
                    f3:8f:cd:5a:ae:64:ad:a1:2b:b3:5c:7e:bd:94:66:
                    55:98:fe:14:38:de:ac:92:2c:4a:b8:9f:36:db:21:
                    04:c2:d7:0d:9a:30:1f:04:cc:42:7b:ba:2a:34:7f:
                    20:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:14:9B:41:63:F9:E9:9C:BD:18:A0:4F:60:30:3B:14:E2:A3:69:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5597617-72e3-30ca-9e8e-f721e25e7bb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:16:3d:c1:78:1c:f5:0c:39:cb:0a:e9:6b:84:81:b3:38:
         ea:98:b5:51:e2:c6:cd:36:b1:f8:3f:73:d5:46:5f:d2:90:d8:
         5b:ae:83:bd:27:4a:65:fe:74:fe:9a:92:62:9b:39:ba:1c:8d:
         07:98:78:5e:9b:dc:67:5e:c9:14:a8:cc:cb:b3:cb:ef:19:40:
         6a:2a:49:79:12:b1:e1:2c:37:68:e2:47:82:bf:d0:51:c4:55:
         e9:20:43:9d:b0:ea:b5:b2:36:7e:f3:37:56:22:7c:7f:2a:ce:
         f2:22:bb:7f:a3:1e:7e:ea:60:69:9c:8f:c0:a7:2a:4f:07:05:
         34:e4:de:5e:d5:2c:90:66:64:7e:1e:73:21:76:bd:92:bf:75:
         95:fe:48:77:8d:05:17:6f:62:45:5d:e3:37:e0:ec:32:73:8e:
         53:ff:05:81:50:03:31:38:ee:a6:07:12:d4:8d:a8:bd:84:f5:
         80:3b:bd:76:cc:b6:ab:1a:01:61:35:ca:ff:78:a0:af:03:c4:
         ff:ed:48:41:47:3f:ea:9d:46:07:51:88:c6:ec:fe:93:8c:26:
         d2:a1:b6:24:c1:74:e1:31:41:e5:a3:83:14:88:47:41:a8:b9:
         8f:c4:8f:85:7e:06:3e:c8:4f:63:e5:6c:f4:da:b2:bd:a4:2d:
         97:5d:0e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:11 2024 by rpki-client on console-ams.rpki-client.org