Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e7bdc6ad-42c4-3e70-bb82-020ff2823444.roa
File:                     e7bdc6ad-42c4-3e70-bb82-020ff2823444.roa (raw, json)
Hash identifier:          ia7zRnGvW0Fe6OaJgA00isUsLGjOEwEM0+MNG4rjSG0=
Subject key identifier:   BA:E5:AC:89:3B:FA:22:5E:E6:D1:5E:07:4F:BB:4D:9C:12:F5:DA:BF
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0A396F
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e7bdc6ad-42c4-3e70-bb82-020ff2823444.roa
Signing time:             Sat 13 Jun 2020 18:56:22 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Wed 27 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0a:39:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar 27 04:00:00 2030 GMT
        Subject: CN=d1f83dce-0881-4876-8dea-b38124303e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:dd:2d:43:0b:66:1f:64:30:ea:ac:3a:93:
                    59:08:f4:41:a4:cc:e9:57:4d:6b:1a:1e:7c:6e:09:
                    2f:7d:1f:99:04:ef:48:18:03:3f:28:f5:be:0f:8b:
                    cc:d5:d2:7a:40:ff:6a:d3:e5:15:9c:26:79:c7:bf:
                    bf:7a:d4:c3:9b:4c:2a:2b:6d:2c:dc:94:5c:b0:02:
                    e6:fe:64:b5:db:d3:5a:93:8b:e7:e0:05:af:d2:aa:
                    24:e2:4c:6c:49:64:41:d4:d6:01:65:90:30:1a:ff:
                    d3:3b:01:bd:15:5d:4c:0f:44:dd:6a:21:5d:33:02:
                    ae:e2:1e:ae:83:67:19:bf:54:19:79:76:fe:b1:8b:
                    54:c1:f8:da:3a:27:91:54:75:4b:30:fa:17:93:9a:
                    b3:69:ea:0d:90:3d:b9:a1:d3:4e:a7:20:58:a7:09:
                    fd:ce:1b:6e:08:2b:c7:b6:c5:b0:3f:d1:2f:ea:93:
                    0d:cc:8c:0a:e6:c6:60:16:34:01:bf:16:35:b1:ca:
                    a6:25:9c:2f:83:01:28:84:39:18:b6:a0:4e:58:5e:
                    d1:77:2f:1e:dd:ba:17:34:5f:98:fe:43:3b:86:93:
                    be:2a:d5:8e:79:5e:ea:fc:2b:61:2e:b9:90:fd:6f:
                    b6:5c:f8:64:c0:b6:1c:07:52:6b:c5:79:f8:a1:8b:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E5:AC:89:3B:FA:22:5E:E6:D1:5E:07:4F:BB:4D:9C:12:F5:DA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e7bdc6ad-42c4-3e70-bb82-020ff2823444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:17:bf:a6:d3:e0:58:71:d7:95:b2:d8:1c:54:fb:71:16:ca:
         38:27:03:4b:35:d0:e0:24:b8:8e:b2:d9:57:1b:55:fe:62:1f:
         f5:26:19:e2:bb:85:51:8b:8d:75:97:2b:b6:e6:3e:56:fb:3d:
         e1:df:b8:eb:15:8e:bc:0a:7a:40:de:2f:9f:49:75:99:9d:b4:
         91:60:ef:3e:e6:78:44:e3:ac:2f:77:fa:c5:2a:4f:65:f3:c9:
         65:ff:a5:95:df:2d:4c:7d:ed:57:6b:c1:84:32:7d:dc:5d:56:
         01:9a:58:b8:f9:6a:98:44:b3:14:85:32:5e:2b:c9:65:18:fc:
         74:82:02:ba:26:7b:62:7d:2d:c7:07:04:53:44:fb:b5:2d:04:
         12:68:b6:bb:9a:17:bc:f0:b3:0b:46:7a:93:b1:7a:c9:ed:b0:
         ce:df:b8:57:14:f8:02:12:5c:94:97:bf:6f:c8:7f:ba:c6:14:
         ab:94:07:0a:23:64:b3:ea:bd:1c:10:45:b6:c9:a4:c6:bb:4a:
         c6:f6:24:3e:26:a8:9c:ea:5e:50:b7:a7:69:79:7c:b5:62:13:
         44:b0:e2:6f:6c:32:15:ec:35:09:98:91:2b:24:59:a4:63:34:
         63:64:9f:bb:ac:37:8d:33:d1:34:55:98:64:cd:4b:75:d0:70:
         79:5a:91:e5
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcq8KOW8wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA2MTMwNDAwMDBaFw0zMDAzMjcwNDAwMDBaMC8xLTArBgNVBAMTJGQx
ZjgzZGNlLTA4ODEtNDg3Ni04ZGVhLWIzODEyNDMwM2UxNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMnQ3S1DC2YfZDDqrDqTWQj0QaTM6VdNaxoefG4J
L30fmQTvSBgDPyj1vg+LzNXSekD/atPlFZwmece/v3rUw5tMKittLNyUXLAC5v5k
tdvTWpOL5+AFr9KqJOJMbElkQdTWAWWQMBr/0zsBvRVdTA9E3WohXTMCruIeroNn
Gb9UGXl2/rGLVMH42jonkVR1SzD6F5Oas2nqDZA9uaHTTqcgWKcJ/c4bbggrx7bF
sD/RL+qTDcyMCubGYBY0Ab8WNbHKpiWcL4MBKIQ5GLagTlhe0XcvHt26FzRfmP5D
O4aTvirVjnle6vwrYS65kP1vtlz4ZMC2HAdSa8V5+KGLiVMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBS65ayJO/oiXubRXgdPu02cEvXavzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhL2U3YmRjNmFkLTQyYzQtM2U3
MC1iYjgyLTAyMGZmMjgyMzQ0NC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABQvWjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAXhe/ptPgWHHXlbLYHFT7cRbKOCcDSzXQ4CS4jrLZVxtV/mIf9SYZ4ruFUYuN
dZcrtuY+Vvs94d+46xWOvAp6QN4vn0l1mZ20kWDvPuZ4ROOsL3f6xSpPZfPJZf+l
ld8tTH3tV2vBhDJ93F1WAZpYuPlqmESzFIUyXivJZRj8dIICuiZ7Yn0txwcEU0T7
tS0EEmi2u5oXvPCzC0Z6k7F6ye2wzt+4VxT4AhJclJe/b8h/usYUq5QHCiNks+q9
HBBFtsmkxrtKxvYkPiaonOpeULenaXl8tWITRLDib2wyFew1CZiRKyRZpGM0Y2Sf
u6w3jTPRNFWYZM1LddBweVqR5Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:11 2024 by rpki-client on console-ams.rpki-client.org