Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8e094b9-f63d-3f6f-bdd1-65b7f476051c.roa
File:                     c8e094b9-f63d-3f6f-bdd1-65b7f476051c.roa (raw, json)
Hash identifier:          JBApkl15IGsvsSSRCK20OnQsCf8kspgdpaMzBIUZ/cI=
Subject key identifier:   59:BE:3F:EA:25:A3:A1:45:F6:16:22:43:ED:0F:B5:DF:7A:C2:55:0F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173253C1A52
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8e094b9-f63d-3f6f-bdd1-65b7f476051c.roa
Signing time:             Mon 06 Jul 2020 17:46:02 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Thu 21 Mar 2030 04:00:00 +0000
asID:                     3598
IP address blocks:        167.220.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:25:3c:1a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Mar 21 04:00:00 2030 GMT
        Subject: CN=7d403670-4d4d-418a-b387-abf313bb4b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:a9:06:6f:02:46:49:4e:31:ca:4d:fe:8a:
                    5f:f6:37:e5:68:c3:60:dc:d1:27:80:ef:80:ef:8f:
                    f7:f3:d8:ab:d8:c9:43:39:d9:ff:cd:1c:32:19:00:
                    a4:79:28:74:a0:0d:c7:87:27:7e:b1:99:77:43:c1:
                    85:e2:65:fa:63:4d:75:4f:47:d9:f0:9e:14:55:30:
                    f7:b9:46:c6:7d:58:25:97:3e:0f:79:b9:dd:b9:8f:
                    20:69:27:c2:b3:93:10:cf:5d:a6:53:02:10:62:c6:
                    e6:98:e9:4c:2e:f2:d6:87:ca:b2:01:b8:6a:ec:5c:
                    64:7b:eb:0a:82:fc:5c:ce:5c:63:30:14:e4:2e:a7:
                    71:9f:a9:b4:4c:1e:8b:e8:00:bd:73:4a:9a:62:d4:
                    48:4f:d4:da:98:57:b6:c1:cb:23:8d:b0:44:03:86:
                    97:72:61:53:f2:85:81:8c:23:fe:2f:51:6a:25:2f:
                    f8:94:08:48:b4:7a:64:24:4e:9c:f1:d5:59:f6:de:
                    28:f3:e1:dc:be:5d:bc:1b:39:14:aa:ee:6c:56:8d:
                    42:45:53:16:96:45:bd:9a:51:4d:aa:e9:e4:75:0c:
                    94:56:65:8e:d8:97:01:d8:f5:20:f5:e4:b1:d8:87:
                    50:66:df:33:f9:6d:8a:fd:45:19:88:83:b3:15:3d:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:3F:EA:25:A3:A1:45:F6:16:22:43:ED:0F:B5:DF:7A:C2:55:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8e094b9-f63d-3f6f-bdd1-65b7f476051c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.220.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d8:2b:f4:46:b5:2a:24:b8:c6:c9:5b:55:46:22:4c:f6:85:
         b9:c5:5a:da:33:aa:30:b1:0c:e0:19:97:cf:74:10:f2:45:d9:
         6c:62:74:44:79:a4:1e:23:fa:5f:3a:ab:c6:91:46:32:ac:b0:
         77:12:b8:06:5f:c3:95:1b:50:fa:7e:ff:0c:d2:5d:11:14:6f:
         5f:7a:87:66:7b:d1:45:cd:82:56:2c:eb:67:eb:26:e8:52:18:
         0c:5a:f1:d4:dc:17:28:c5:fe:91:a2:f4:13:d1:36:5c:b9:c9:
         dd:89:86:22:87:30:7a:7e:23:2b:6d:f2:45:bd:b9:c7:dd:27:
         34:79:5b:e4:0e:51:ca:97:a6:93:66:9b:8a:e5:08:b3:09:07:
         87:5c:2e:b3:91:1f:b2:b4:27:a1:42:c9:b7:8c:39:13:74:bb:
         a9:52:e9:ce:54:da:1e:ad:12:fe:02:73:6f:b7:37:79:6b:76:
         ad:a1:eb:cf:fc:19:71:2d:01:fd:56:db:dd:c3:6e:6e:f4:b5:
         5e:60:2f:85:8a:69:6c:2a:78:6f:b8:9e:2f:f7:bf:30:4d:3c:
         32:e5:3c:3c:00:32:ab:21:59:c7:54:cc:08:79:77:e0:e9:81:
         1e:32:02:f4:ed:3b:f4:41:15:a0:30:d6:0e:36:8c:a9:5a:a4:
         fc:37:07:ef
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcyU8GlIwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA3MDYwNDAwMDBaFw0zMDAzMjEwNDAwMDBaMC8xLTArBgNVBAMTJDdk
NDAzNjcwLTRkNGQtNDE4YS1iMzg3LWFiZjMxM2JiNGI4YzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL+HqQZvAkZJTjHKTf6KX/Y35WjDYNzRJ4DvgO+P
9/PYq9jJQznZ/80cMhkApHkodKANx4cnfrGZd0PBheJl+mNNdU9H2fCeFFUw97lG
xn1YJZc+D3m53bmPIGknwrOTEM9dplMCEGLG5pjpTC7y1ofKsgG4auxcZHvrCoL8
XM5cYzAU5C6ncZ+ptEwei+gAvXNKmmLUSE/U2phXtsHLI42wRAOGl3JhU/KFgYwj
/i9RaiUv+JQISLR6ZCROnPHVWfbeKPPh3L5dvBs5FKrubFaNQkVTFpZFvZpRTarp
5HUMlFZljtiXAdj1IPXksdiHUGbfM/ltiv1FGYiDsxU9aDMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRZvj/qJaOhRfYWIkPtD7XfesJVDzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2M4ZTA5NGI5LWY2M2QtM2Y2
Zi1iZGQxLTY1YjdmNDc2MDUxYy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqfczDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAedgr9Ea1KiS4xslbVUYiTPaFucVa2jOqMLEM4BmXz3QQ8kXZbGJ0RHmkHiP6
XzqrxpFGMqywdxK4Bl/DlRtQ+n7/DNJdERRvX3qHZnvRRc2CVizrZ+sm6FIYDFrx
1NwXKMX+kaL0E9E2XLnJ3YmGIocwen4jK23yRb25x90nNHlb5A5Rypemk2abiuUI
swkHh1wus5EfsrQnoULJt4w5E3S7qVLpzlTaHq0S/gJzb7c3eWt2raHrz/wZcS0B
/Vbb3cNubvS1XmAvhYppbCp4b7ieL/e/ME08MuU8PAAyqyFZx1TMCHl34OmBHjIC
9O079EEVoDDWDjaMqVqk/DcH7w==
-----END CERTIFICATE-----
Generated at Sun Jun 16 13:45:33 2024 by rpki-client on console-fra.rpki-client.org