Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa
File:                     edf37cc8-43ef-3f95-8478-5c871e14d557.roa (raw, json)
Hash identifier:          h+Uqh146n6YQqxiGk7nUGfdJwgRRzhpdhdEmbPCRroE=
Subject key identifier:   F9:83:23:3B:6A:91:B0:C1:86:7F:B4:63:90:2B:5C:5C:2D:43:8F:82
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584566FEF828516FC21F3F824EC0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa
Signing time:             Mon 01 Apr 2024 15:12:15 +0000
ROA not before:           Mon 01 Apr 2024 15:12:15 +0000
ROA not after:            Sun 30 Jun 2024 15:12:15 +0000
asID:                     8069
IP address blocks:        20.33.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:fe:f8:28:51:6f:c2:1f:3f:82:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr  1 15:12:15 2024 GMT
            Not After : Jun 30 15:12:15 2024 GMT
        Subject: CN=29bd155c-4349-49ae-93eb-3d73b099a081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:a4:5b:a4:e0:13:c3:c9:98:46:ca:b2:94:
                    92:fd:59:06:f0:0d:e6:d8:82:ba:3c:20:05:09:22:
                    a3:87:d9:48:ab:95:a8:b4:f6:69:9c:0a:f3:ee:2b:
                    a9:9b:08:20:21:54:3d:fd:fd:ee:ac:65:7d:f1:54:
                    ae:86:58:2c:71:e2:9d:2e:11:db:d2:41:6a:f9:5a:
                    94:f8:08:ff:d9:e7:01:b6:19:a1:72:11:39:5a:2a:
                    52:46:d1:9d:ce:56:fe:0b:b7:3f:36:56:13:7f:f7:
                    80:36:0d:05:45:26:36:56:7b:dc:be:84:d2:b1:be:
                    ed:c6:ae:fc:c6:2b:0c:a0:f2:e8:37:e8:87:56:47:
                    18:99:28:db:62:ef:15:a1:bf:0d:4c:c3:5e:c2:c8:
                    0c:5b:e2:71:3c:26:67:28:ab:7e:ef:da:89:83:16:
                    66:5d:7a:66:c9:30:c1:d4:7b:77:76:af:4d:61:1e:
                    0d:12:55:99:74:d8:8c:2e:d7:f8:08:80:2b:19:b3:
                    c6:d7:b8:ae:64:8e:ce:fc:30:33:7f:97:aa:dc:39:
                    75:b7:06:cb:76:ce:db:c7:f5:d4:7a:30:cf:bb:b1:
                    67:fd:7e:43:53:fb:9d:98:c9:cd:05:56:ec:7d:d8:
                    7b:fc:1e:a9:8e:3f:14:e1:b8:66:60:8b:93:00:68:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:83:23:3B:6A:91:B0:C1:86:7F:B4:63:90:2B:5C:5C:2D:43:8F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6d:5c:51:4a:09:f2:5b:aa:03:0d:82:36:12:d2:79:ed:03:
         91:2c:ac:84:85:8a:cf:5e:12:29:2b:bd:33:8e:a4:43:c2:8a:
         b6:ae:da:b7:e5:d0:48:b1:26:ba:11:60:ed:c4:21:3f:70:25:
         4f:9d:c5:80:09:63:97:fb:5e:49:69:dd:fc:9f:3a:66:07:0b:
         fa:6f:44:e2:c0:b4:7e:96:aa:2e:cf:b5:58:a8:de:04:00:de:
         ae:ea:4e:2d:f5:2c:06:0d:0b:4a:e9:74:2a:74:84:0f:86:cc:
         e7:cb:99:26:8a:08:2e:ef:00:d6:02:af:40:bd:02:21:be:7b:
         66:5f:94:5a:87:b8:cf:53:dd:71:6f:61:24:bc:47:ba:4b:48:
         5b:68:44:56:0e:b6:3d:2b:f2:40:a0:a3:fa:d2:4d:b6:34:56:
         54:ca:62:2a:a7:bc:3f:5e:57:2f:24:b2:24:e3:a6:47:10:36:
         9f:c1:aa:21:90:af:ce:8b:e7:38:30:8b:8b:42:f9:11:e5:f7:
         f0:72:da:b2:b7:ab:76:b7:41:40:bb:22:96:6c:fa:60:bd:c8:
         5a:7d:2f:a5:5f:f5:8e:38:f5:52:1c:8f:84:bc:8d:9a:35:ad:
         09:f7:9f:08:d6:bc:05:70:64:5f:ce:46:0b:5b:03:58:50:72:
         59:e9:f8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:11 2024 by rpki-client on console-ams.rpki-client.org