Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd9c2fd4-aa22-3133-9309-726ee0e3e373.roa
File:                     cd9c2fd4-aa22-3133-9309-726ee0e3e373.roa (raw, json)
Hash identifier:          WVeLzXNGMdN0tbeHvNHh8ukcWKLr1tf4SdZ7/XJqNTc=
Subject key identifier:   F2:59:FF:3D:E0:F3:57:B5:CF:29:EC:75:E6:C2:10:68:B7:11:6D:2B
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0A534B
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd9c2fd4-aa22-3133-9309-726ee0e3e373.roa
Signing time:             Sat 13 Jun 2020 18:56:29 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Tue 05 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0a:53:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar  5 05:00:00 2030 GMT
        Subject: CN=ae763df1-7ad8-4c61-ad7d-ac9fa85c5158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:fe:22:f8:1f:bc:c2:b8:7c:10:bf:06:c2:
                    22:49:35:a1:5b:6e:0d:9f:e4:77:f3:30:91:3d:53:
                    df:cf:0a:72:aa:4f:77:9f:c5:d6:03:f2:61:d3:87:
                    fa:34:91:ec:a1:15:65:27:5b:4b:36:17:db:e5:8c:
                    d9:7f:53:c9:34:0b:9f:ad:90:d3:77:97:4d:80:80:
                    7f:dc:94:39:77:64:44:a4:4b:63:d3:bb:b7:6e:da:
                    1e:02:0b:87:bf:eb:05:1b:d3:27:e0:12:80:57:2f:
                    10:f6:75:86:e5:71:2b:02:85:a5:ff:11:2e:96:5a:
                    04:2b:8a:ea:8d:d7:78:37:ae:c7:ab:2e:22:85:d1:
                    d2:59:25:e8:f4:6d:82:d9:e9:6c:cb:2c:9c:ed:21:
                    bf:86:73:77:f5:e1:f3:6d:45:18:15:23:ab:9c:b5:
                    a2:0c:96:14:1b:5d:cc:2b:a2:f4:c8:80:09:46:b3:
                    c9:44:0d:5b:2c:24:59:02:32:f4:ad:77:2b:97:d2:
                    2d:3b:28:c9:6c:55:a9:c3:6a:6a:f0:f1:60:8c:fb:
                    dc:ba:35:a6:a0:d8:62:bf:1c:01:12:29:b0:74:83:
                    20:66:d9:f2:b0:55:76:63:0c:72:fd:1c:19:6e:ab:
                    04:a5:d5:5e:03:94:20:50:a9:3f:72:d3:d6:0a:e8:
                    5f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:59:FF:3D:E0:F3:57:B5:CF:29:EC:75:E6:C2:10:68:B7:11:6D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd9c2fd4-aa22-3133-9309-726ee0e3e373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:48:59:4f:53:78:e6:01:a1:d6:b2:6e:96:8e:95:02:a8:69:
         8e:6c:a3:d3:17:1c:f1:a3:65:a5:2c:98:f4:50:d8:ba:c0:62:
         69:65:26:6c:f8:ec:91:ef:a6:7d:88:6f:f8:75:61:6c:5e:0a:
         d9:c9:4b:91:9d:32:38:a0:a9:2b:d6:3e:4b:a4:76:54:0a:21:
         79:51:81:1a:37:d3:34:1f:02:e1:a8:f1:a0:cd:eb:b6:88:d8:
         66:1b:f2:9e:1d:58:b8:9c:e7:ff:99:93:e7:d9:ad:d4:08:d6:
         24:f9:be:ae:da:e4:7d:d0:2c:29:b6:2c:d1:60:d2:e1:7d:a7:
         3b:dd:35:f8:82:ed:4a:56:c2:26:28:05:ba:56:85:71:ca:14:
         6e:38:2d:aa:3c:a5:bf:a0:0d:e1:dc:2f:81:3d:55:1b:3f:18:
         36:0e:a5:4a:ed:33:42:71:5c:0d:8d:64:bd:dd:a2:1e:88:17:
         8f:60:87:dd:35:89:e0:bf:e5:64:b7:01:39:8c:d9:45:86:c7:
         9b:96:ed:df:d1:88:3b:f9:2f:8b:91:e2:3d:0c:e1:87:bc:58:
         12:0d:af:ff:d0:fd:7b:64:52:6a:6f:78:8b:44:f6:0c:95:02:
         29:9b:ff:fe:13:f1:24:a3:64:b7:1b:29:fa:7e:7e:80:4b:ab:
         00:41:e4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org