Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9013276-9143-3cce-bb26-b33513f6c9aa.roa
File:                     d9013276-9143-3cce-bb26-b33513f6c9aa.roa (raw, json)
Hash identifier:          VBCYBu1pdHS/2XenLKU9ZWeCKzfoVFPqgUUhp3wbKis=
Subject key identifier:   11:3F:0C:1D:00:9C:D5:EC:A5:CA:A0:6B:28:6A:1C:78:4C:E8:97:DC
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0A0C3F
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9013276-9143-3cce-bb26-b33513f6c9aa.roa
Signing time:             Sat 13 Jun 2020 18:56:10 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Sun 17 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0a:0c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar 17 04:00:00 2030 GMT
        Subject: CN=994e975a-5156-4ce0-9ca0-2c1888383f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:88:24:41:95:49:4e:4a:8b:70:e3:6f:e0:11:
                    d1:79:93:62:35:bf:2f:c4:7f:a0:7c:93:09:78:af:
                    6f:7b:01:d7:09:15:b8:70:18:6f:7c:db:a2:33:27:
                    c1:8b:67:31:86:16:6a:d3:c2:64:fa:d5:51:52:48:
                    e4:56:55:ff:f1:d0:cf:6e:dc:11:56:26:d1:f4:0b:
                    e8:d0:4a:91:88:2c:ce:e0:df:d5:77:dc:56:91:7b:
                    af:96:3e:44:51:ec:7b:4a:42:bd:fd:66:70:f7:79:
                    65:8c:f4:d8:6d:02:d0:24:8e:b3:d7:31:f5:05:49:
                    95:f8:4c:c3:1e:af:d5:71:97:ad:2f:75:6e:8d:fe:
                    f9:15:8b:a0:93:da:9d:ef:5b:8a:50:8d:6f:cf:3f:
                    69:17:ee:70:03:f3:be:ef:ea:31:4a:6b:11:ba:c9:
                    d2:d6:22:e8:c5:21:a7:b1:5b:96:1b:40:fe:63:8d:
                    17:73:8e:0f:80:cc:86:3f:a2:54:8b:5a:03:2e:af:
                    8b:72:a7:50:5a:01:98:d5:a9:42:9a:01:4b:7f:12:
                    b8:4c:64:7a:b4:33:18:17:e5:39:c9:88:20:34:b9:
                    45:4b:4f:cf:01:6b:5f:ff:17:d0:05:07:0f:02:6b:
                    69:ee:9a:af:06:8b:cf:17:c8:4b:ea:11:43:a4:a8:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3F:0C:1D:00:9C:D5:EC:A5:CA:A0:6B:28:6A:1C:78:4C:E8:97:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9013276-9143-3cce-bb26-b33513f6c9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:8f:34:1b:b7:b2:28:8a:5a:9f:1d:99:a2:c5:a0:71:36:85:
         2a:02:74:86:6f:0c:0d:59:56:7c:1d:a7:52:47:3a:fe:af:a5:
         0d:2c:d6:ac:7b:86:bf:1c:41:06:e4:36:f1:f9:1a:12:ce:fd:
         8e:c7:f3:cc:a6:ef:fa:b3:8d:cf:13:a6:06:27:37:8a:01:0a:
         7b:7f:d0:1b:e8:e7:72:7a:26:ad:35:30:d4:5e:43:df:a9:48:
         a4:d1:17:fb:c0:db:03:bb:19:48:92:92:07:3d:85:e6:47:c4:
         27:e0:06:d8:5d:f0:cb:ef:fe:59:c1:11:01:67:54:08:40:e8:
         48:62:f7:62:30:5e:38:d6:46:8c:70:d7:38:5f:a5:cd:15:6c:
         2f:26:ce:62:e3:a4:33:c6:b6:c9:b9:2d:03:1d:4e:f4:c3:f1:
         2f:0d:bb:ec:de:3d:50:86:c2:c8:85:6f:83:e6:04:d4:0d:a0:
         55:6c:39:36:2f:dc:cc:a0:d4:5f:f3:c9:b0:ba:98:6e:d7:e2:
         1f:ca:e4:63:46:ee:1a:92:db:2d:0d:ba:e5:62:3d:88:ff:81:
         56:2d:94:75:61:1d:ad:ab:87:ce:db:7f:92:14:d0:ae:a2:5e:
         5c:3a:7c:3f:07:28:11:ae:d7:df:5b:7f:d6:9f:5f:9f:41:92:
         95:3c:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:33 2024 by rpki-client on console-fra.rpki-client.org