Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e994b082-c88d-3fab-916c-14f185d2f957.roa
File:                     e994b082-c88d-3fab-916c-14f185d2f957.roa (raw, json)
Hash identifier:          pN06aYuP/8K2jkCJsRorxfJsRZrU0Xo6WrXZZBI5qwc=
Subject key identifier:   CF:6E:2A:4B:0B:C2:2A:24:91:EB:92:C1:FD:CB:D4:54:B7:61:B8:73
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328583D2976E75849A01BC517C6D120
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e994b082-c88d-3fab-916c-14f185d2f957.roa
Signing time:             Mon 07 Mar 2022 05:00:00 +0000
ROA not before:           Mon 07 Mar 2022 05:00:00 +0000
ROA not after:            Wed 06 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.157.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:29:76:e7:58:49:a0:1b:c5:17:c6:d1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Mar  7 05:00:00 2022 GMT
            Not After : Mar  6 05:00:00 2030 GMT
        Subject: CN=5d424719-d743-44a3-8bd9-61a915d64060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9d:ca:e0:0a:d9:01:55:58:2f:46:58:a2:3e:
                    05:ef:ec:fe:0b:c8:b5:38:7c:92:46:74:e9:4f:ca:
                    bb:39:e8:01:a8:ec:95:8e:45:96:5b:83:1d:9e:f0:
                    a2:f2:23:05:a8:36:73:4c:c5:0a:08:ac:5a:df:f7:
                    f7:42:46:89:65:d1:2b:25:ac:0b:bb:8b:e4:99:4c:
                    37:c5:21:0b:7d:1e:94:1f:d9:63:1b:e0:92:50:53:
                    68:a1:2b:4f:93:3e:05:89:b7:09:ba:54:e1:00:9a:
                    65:09:fb:8b:99:57:fd:33:70:8e:4f:53:bf:cf:e5:
                    c2:2c:f3:af:f8:13:b1:39:f8:ac:26:29:1f:7c:83:
                    78:e1:f9:47:e6:8c:74:1e:e3:f8:2b:14:11:c3:8d:
                    f9:ce:6b:6e:80:5c:74:a2:b8:ca:cf:9a:15:4c:8e:
                    88:ec:55:5e:d0:11:ed:2b:87:ad:90:40:62:28:00:
                    2e:a3:eb:71:87:95:76:c2:c9:1a:60:31:f5:a2:9e:
                    31:f1:9c:8f:b2:27:4b:4d:4e:74:d8:e7:60:05:51:
                    f3:1b:a4:f0:c6:c0:a1:97:dd:c8:5d:92:b6:16:11:
                    b9:d2:8d:23:d7:a5:38:90:72:44:a2:af:46:a1:10:
                    7b:d3:6d:a1:20:8c:3d:9d:b6:ef:8c:9c:f0:28:9c:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6E:2A:4B:0B:C2:2A:24:91:EB:92:C1:FD:CB:D4:54:B7:61:B8:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e994b082-c88d-3fab-916c-14f185d2f957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:de:43:c6:97:13:f9:8e:19:e9:b1:77:a9:1b:cb:e5:f5:ee:
         cd:7f:8f:9d:ff:53:57:45:95:ac:54:46:4b:8b:75:54:51:68:
         c7:d9:07:c5:7e:5d:fd:e0:8c:9e:ee:77:92:b7:b9:93:db:d0:
         13:55:2a:d8:c1:71:f9:00:60:02:5c:8a:c2:ac:08:9c:58:2e:
         71:da:a8:a1:fd:54:f7:08:b4:16:3e:be:32:70:66:5e:5f:dd:
         e5:0c:17:f4:a4:23:75:30:5c:e9:b9:45:36:a7:0e:e5:19:31:
         5d:0b:1b:b1:67:dc:0e:5e:54:95:d6:24:38:11:fa:a4:d7:f2:
         e3:a7:26:a0:0d:65:91:45:63:6b:2f:c6:77:fe:bf:6b:2f:06:
         c9:25:7c:d4:f5:f0:b4:e4:ad:02:10:57:8f:da:82:a2:d2:87:
         59:58:aa:42:af:12:46:1e:04:39:ab:35:d3:ae:dd:70:cf:4f:
         b0:38:aa:4a:df:c2:96:fe:3e:35:4e:d9:e8:bd:0d:97:d7:eb:
         f2:f0:ce:32:10:a2:11:c2:ee:1d:23:d5:c5:6d:81:34:3a:09:
         ce:cb:36:01:a7:07:15:b3:56:a3:84:98:31:f3:04:4a:49:52:
         c2:bb:f0:1a:1f:d1:29:e7:7a:5b:2d:35:17:55:73:e6:04:3d:
         dc:22:14:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0pdudYSaAbxRfG0SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTIyMDMwNzA1MDAwMFoXDTMwMDMwNjA1MDAwMFowLzEtMCsGA1UEAxMk
NWQ0MjQ3MTktZDc0My00NGEzLThiZDktNjFhOTE1ZDY0MDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp3K4ArZAVVYL0ZYoj4F7+z+C8i1OHySRnTp
T8q7OegBqOyVjkWWW4MdnvCi8iMFqDZzTMUKCKxa3/f3QkaJZdErJawLu4vkmUw3
xSELfR6UH9ljG+CSUFNooStPkz4FibcJulThAJplCfuLmVf9M3COT1O/z+XCLPOv
+BOxOfisJikffIN44flH5ox0HuP4KxQRw435zmtugFx0orjKz5oVTI6I7FVe0BHt
K4etkEBiKAAuo+txh5V2wskaYDH1op4x8ZyPsidLTU502OdgBVHzG6TwxsChl93I
XZK2FhG50o0j16U4kHJEoq9GoRB7022hIIw9nbbvjJzwKJxTowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM9uKksLwiokkeuSwf3L1FS3YbhzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTk5NGIwODItYzg4ZC0z
ZmFiLTkxNmMtMTRmMTg1ZDJmOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXeQ8aXE/mOGemxd6kby+X17s1/j53/U1dFlaxURkuLdVRRaMfZB8V+
Xf3gjJ7ud5K3uZPb0BNVKtjBcfkAYAJcisKsCJxYLnHaqKH9VPcItBY+vjJwZl5f
3eUMF/SkI3UwXOm5RTanDuUZMV0LG7Fn3A5eVJXWJDgR+qTX8uOnJqANZZFFY2sv
xnf+v2svBsklfNT18LTkrQIQV4/agqLSh1lYqkKvEkYeBDmrNdOu3XDPT7A4qkrf
wpb+PjVO2ei9DZfX6/LwzjIQohHC7h0j1cVtgTQ6Cc7LNgGnBxWzVqOEmDHzBEpJ
UsK78Bof0SnnelstNRdVc+YEPdwiFOw=
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:34 2024 by rpki-client on console-fra.rpki-client.org