Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e524d4c6-be4f-338c-af81-88a96610ffac.roa
File:                     e524d4c6-be4f-338c-af81-88a96610ffac.roa (raw, json)
Hash identifier:          tS74pJ/Lvi8nVwXR395Qq9/fE1fPTk9vIhCyHoS4D6g=
Subject key identifier:   CA:CE:1C:68:7D:FC:4D:8F:14:76:58:A2:AA:19:F6:0D:A9:CE:E6:3F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328583A453472453E04E90440338940
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e524d4c6-be4f-338c-af81-88a96610ffac.roa
Signing time:             Tue 15 Jun 2021 04:00:00 +0000
ROA not before:           Tue 15 Jun 2021 04:00:00 +0000
ROA not after:            Wed 27 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.157.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:45:34:72:45:3e:04:e9:04:40:33:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 15 04:00:00 2021 GMT
            Not After : Mar 27 04:00:00 2030 GMT
        Subject: CN=907d4411-727f-4153-a0a4-d88ef954e526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:8a:7c:48:fe:69:70:af:f2:b0:b4:97:c2:
                    60:db:be:3e:06:2b:01:ae:a5:1f:da:09:d6:29:9d:
                    f5:ec:8d:63:43:85:81:83:92:2a:73:94:54:5a:68:
                    f1:23:ef:14:83:dc:bc:93:9d:69:5d:bd:d5:83:ec:
                    e6:03:c1:30:a0:38:83:b0:57:a9:92:6c:98:b6:4e:
                    19:75:38:46:42:27:6e:25:8e:68:a8:4f:6b:0f:bd:
                    0d:a3:5c:cb:86:4c:51:9f:a7:e5:51:38:47:42:27:
                    2a:eb:aa:65:ad:38:8e:71:35:93:22:38:97:2a:25:
                    46:be:bd:11:09:d2:84:ac:80:03:d2:b5:4b:49:76:
                    ea:ed:f8:e6:51:e7:20:74:11:e5:74:cf:6e:81:1a:
                    43:13:01:f3:e3:b0:87:89:5d:67:78:6c:3c:3e:34:
                    d9:29:e9:06:a2:6a:86:cd:4d:1e:d6:0e:0b:cd:6f:
                    69:0e:23:70:e4:2b:d3:13:bb:a7:c5:72:37:f1:6a:
                    5e:bf:ee:48:be:0f:89:f9:03:d1:65:c0:59:96:62:
                    f0:03:85:a3:fa:64:71:bf:72:b3:b3:43:19:53:58:
                    dc:2a:a8:8f:c0:68:12:1b:04:77:49:50:35:09:29:
                    62:3c:68:eb:5e:61:da:28:a5:29:0f:e6:b4:41:53:
                    fe:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CE:1C:68:7D:FC:4D:8F:14:76:58:A2:AA:19:F6:0D:A9:CE:E6:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e524d4c6-be4f-338c-af81-88a96610ffac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e8:07:cd:1b:73:ec:44:cc:17:d8:3f:12:db:52:8a:89:e6:
         37:34:53:b0:82:ab:22:e9:82:62:46:7a:be:6e:69:d8:ac:81:
         5a:15:bf:fa:af:a7:f1:21:f8:c4:a7:f7:13:14:36:5e:5d:9a:
         06:86:d7:33:98:e2:d7:35:42:29:97:1c:72:36:b1:af:f1:d4:
         38:40:ab:3a:c2:5d:84:f4:f3:14:23:d6:a2:a6:f7:ae:b7:d7:
         ce:a8:87:71:df:bd:96:15:2e:1c:5c:cd:53:29:2a:92:8f:86:
         7d:09:23:60:38:d5:92:88:72:71:0f:c5:58:ae:b9:c9:02:1b:
         df:29:3f:2e:54:3a:de:7b:ae:82:67:ec:e6:5e:66:b3:26:a8:
         6f:60:a5:5b:55:a2:d7:f6:ee:1d:1c:63:f2:dd:5c:17:34:f1:
         e2:51:8f:34:76:70:e0:c6:c4:fd:c2:f5:60:66:c1:22:cc:d3:
         ad:53:68:d8:d4:a5:54:00:68:d2:fa:b7:9b:f4:28:29:a5:aa:
         77:87:60:29:32:37:9a:8b:45:c8:98:e4:d3:3e:89:c7:11:4e:
         7c:2c:1e:c5:72:af:7a:82:c9:ee:3d:13:9a:bb:41:c7:9a:ed:
         7b:db:25:55:8b:c2:b1:cc:24:50:fd:ac:54:2b:71:26:04:89:
         d0:7c:3a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:11 2024 by rpki-client on console-ams.rpki-client.org