Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e9f8c49e-530a-31a6-a27a-9ed55fa0d012.roa
File:                     e9f8c49e-530a-31a6-a27a-9ed55fa0d012.roa (raw, json)
Hash identifier:          hjZMHBHzhci/Z6JymHwWie6gPJzifIjrSLvCWRtvZbM=
Subject key identifier:   08:61:09:24:23:2E:6B:52:75:5C:F3:E8:37:68:5E:FB:AA:06:63:48
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0A31F5
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e9f8c49e-530a-31a6-a27a-9ed55fa0d012.roa
Signing time:             Sat 13 Jun 2020 18:56:20 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Fri 29 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0a:31:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar 29 04:00:00 2030 GMT
        Subject: CN=cc30e532-91db-404a-94ea-fab8948e3f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:2f:c9:0b:db:48:19:3c:d5:b0:8d:1b:3f:
                    0c:de:95:b1:92:ce:fb:a5:e2:90:83:02:30:56:ea:
                    70:7a:8f:70:76:01:8c:04:7d:48:9b:c4:ba:be:d5:
                    84:68:55:76:2f:53:58:6b:1a:22:54:2c:43:b3:a6:
                    92:ee:5a:30:ee:f3:7a:23:fd:c0:f2:e8:33:59:10:
                    b6:7d:4d:11:4d:dd:69:6c:85:d7:34:76:25:db:d3:
                    e4:2d:36:89:3e:77:da:5c:7f:d9:04:00:39:e9:57:
                    09:d7:ba:6b:bd:d0:0a:c2:0e:d4:3c:3f:60:1a:4a:
                    4c:9c:48:48:41:b2:ab:1f:51:9e:04:fa:42:a4:ad:
                    a7:c7:33:33:07:42:d6:ce:4e:ce:27:61:b3:f3:4d:
                    bd:a5:fc:60:43:07:8a:a7:a9:23:60:ab:6a:ff:a3:
                    f4:72:b6:38:9b:08:ae:8e:e3:c7:ce:19:cc:bd:4e:
                    69:f0:e3:a1:59:60:3f:34:dc:ee:1a:fd:51:b8:d7:
                    eb:a1:e9:61:fd:bd:9f:58:9b:9d:a7:b2:87:d5:71:
                    09:15:ae:1a:72:44:96:1a:c4:f5:3f:d7:05:7b:bc:
                    e9:d0:b7:e6:b5:2c:ff:a1:ba:a0:61:fc:35:6f:59:
                    86:01:fd:1c:af:bb:f1:2d:38:9f:59:06:fc:22:ab:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:61:09:24:23:2E:6B:52:75:5C:F3:E8:37:68:5E:FB:AA:06:63:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e9f8c49e-530a-31a6-a27a-9ed55fa0d012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:bf:2e:7d:76:1e:cf:8c:c4:fe:ed:e0:38:fa:0d:3d:fc:25:
         db:05:20:40:8b:89:7b:87:24:c9:3b:49:47:73:06:4c:a1:bd:
         b1:b1:2a:18:8d:0d:a0:13:ee:ed:dc:f2:0b:f4:57:5c:92:2d:
         6e:16:8d:36:b8:99:de:ef:6e:e5:24:62:5c:8c:68:9d:14:62:
         c9:08:a2:04:71:99:59:27:92:0f:d0:1c:0f:55:f9:c5:3c:71:
         65:da:9a:33:66:37:f0:3d:3f:4e:39:10:2d:44:be:67:e6:77:
         f2:58:bb:f1:c7:c3:c8:45:74:37:3c:f8:e0:0a:b1:09:04:30:
         a9:17:38:88:f8:36:ba:7b:25:66:3d:0e:84:37:a3:10:ea:3a:
         37:d5:8c:9f:be:e9:0c:eb:35:35:83:81:ff:79:f0:65:60:ab:
         e9:58:b2:f5:fe:a5:5b:d1:5c:8c:00:20:c3:6b:f1:f5:a3:69:
         56:e7:7a:2a:5d:f9:33:b1:17:87:00:c7:e8:dc:7e:1d:6e:c4:
         49:bd:4e:62:e8:dc:d3:b1:99:71:fc:a7:7e:5f:9d:81:d0:62:
         36:b3:3f:d8:70:a6:13:b5:d2:05:83:0f:63:e7:ed:50:60:92:
         5c:fc:cd:61:98:71:29:cb:75:9e:c8:fd:20:4b:4b:48:e6:28:
         66:ad:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:45:34 2024 by rpki-client on console-fra.rpki-client.org