Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df3eb266-c9e2-32ed-8864-322363c13974.roa
File:                     df3eb266-c9e2-32ed-8864-322363c13974.roa (raw, json)
Hash identifier:          Jukj36g9Fkq+oBcQpJGT18i5LATntG0bouxfYDuM0+k=
Subject key identifier:   D8:79:85:8D:FE:7F:32:27:6A:20:8C:7B:3A:31:DA:99:6C:CE:A1:DB
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285840C3494A9BFAA6FDE62E48ED00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df3eb266-c9e2-32ed-8864-322363c13974.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Sun 10 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.157.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c3:49:4a:9b:fa:a6:fd:e6:2e:48:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : Mar 10 05:00:00 2030 GMT
        Subject: CN=6d1cc25d-4976-44ff-af0c-0c9d85a55edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:5d:27:bb:c6:61:f8:23:e5:22:cf:80:86:
                    c4:5d:f7:55:10:1c:1f:d2:a3:aa:82:8a:a5:e3:59:
                    88:a8:5c:4a:ec:d6:69:ae:11:f9:26:dd:cb:e1:fd:
                    ac:f0:c4:3b:7c:41:02:75:b8:e4:3a:fd:2e:d0:09:
                    e8:09:af:95:65:fa:61:1b:3b:0c:f8:f0:b9:f4:9a:
                    66:1f:05:16:e0:28:82:21:28:ec:57:a0:13:54:51:
                    97:9b:a7:ab:31:35:ba:2f:07:c0:e1:6c:7a:86:21:
                    61:52:0b:4f:77:66:5b:c6:69:74:2a:fc:85:d3:fc:
                    9c:8f:99:ae:7e:9f:78:4e:b5:33:46:ce:5e:1b:0c:
                    d4:a3:89:44:14:4c:03:43:33:05:7e:f6:3c:38:da:
                    c8:e6:8b:e8:85:ad:0a:79:ec:45:5a:2c:ec:e5:9d:
                    cd:eb:95:62:92:8d:89:51:37:5f:28:58:32:af:77:
                    1b:4a:5d:87:d6:4d:47:eb:7c:d5:97:67:1c:90:c4:
                    8e:0c:4b:88:65:f4:31:37:68:24:3a:53:a1:80:b5:
                    7b:ec:6c:4f:25:f1:e5:5e:b8:a1:5f:65:4b:d4:43:
                    ac:7b:7a:70:10:ab:f0:09:ea:36:64:a8:f1:06:59:
                    a4:d8:8b:14:25:61:be:b5:72:fa:3a:22:52:1a:3d:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:79:85:8D:FE:7F:32:27:6A:20:8C:7B:3A:31:DA:99:6C:CE:A1:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df3eb266-c9e2-32ed-8864-322363c13974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:29:d5:06:52:db:ea:14:83:9a:74:68:6c:4c:a0:66:a9:54:
         d7:3b:dd:6c:fa:9e:dd:d0:89:c0:2a:67:ff:d5:4b:de:29:be:
         1f:c4:36:de:73:55:c6:97:d7:a7:19:f7:c7:8e:48:55:0b:65:
         93:67:7e:db:e2:69:d5:27:48:89:83:6c:07:e8:a3:94:06:16:
         57:1d:83:35:87:83:75:43:c8:4b:3c:4d:9f:b0:be:36:a5:3c:
         89:ac:da:da:4f:79:86:77:ff:06:1a:3b:b4:64:5e:26:a9:7e:
         54:ac:41:c3:0d:a8:12:92:70:d4:98:a0:42:98:c9:3e:a1:11:
         46:3a:6f:b1:08:b0:13:dd:75:a8:5c:ee:ab:f2:1c:91:3e:42:
         f9:ab:91:90:92:4f:c0:b3:fc:71:b9:3a:cf:1e:7c:fa:ce:fe:
         04:14:3f:78:f6:52:4c:aa:35:6c:1d:f7:17:01:f6:26:73:17:
         e2:49:2b:87:4c:8c:4c:37:d5:9e:51:80:30:5f:49:8d:e4:eb:
         54:42:76:4c:1d:f1:ea:cc:40:62:f4:24:be:2c:c9:c3:7a:fb:
         6f:8a:8e:ab:57:88:48:a2:02:77:8d:37:df:36:ab:35:48:55:
         99:da:23:cb:16:cf:6d:18:b7:ea:ae:a6:33:87:eb:e2:85:40:
         74:09:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:38:40 2024 by rpki-client on console-ams.rpki-client.org