Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fa628394-8c8d-3e8f-9c50-3fb34854799f.roa
File:                     fa628394-8c8d-3e8f-9c50-3fb34854799f.roa (raw, json)
Hash identifier:          OykonLL3IkmRVmfk14JXdUHOsRrEwalqG9EGcaJERLo=
Subject key identifier:   FB:4B:F7:9B:22:A5:76:87:C5:3A:F4:62:00:89:E9:D9:1D:D6:E5:5F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF08B7A2
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fa628394-8c8d-3e8f-9c50-3fb34854799f.roa
Signing time:             Sat 13 Jun 2020 18:54:43 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Mon 15 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.74.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:08:b7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Apr 15 04:00:00 2030 GMT
        Subject: CN=70cd6a11-1cf1-4e10-baf2-7882ce9428d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:a4:47:f3:be:2b:a2:fe:b9:b5:80:ae:62:
                    7e:a9:47:c4:c2:9b:28:00:cb:f8:3a:80:5f:b9:d2:
                    69:c0:2b:a4:06:8f:0b:fb:17:3e:c4:43:05:02:98:
                    e5:70:0a:ee:dd:07:d6:92:06:c1:8e:dd:42:8b:4f:
                    dd:4a:c6:be:30:2a:01:4a:f3:a5:88:40:29:e4:be:
                    ff:cd:08:f8:d4:86:1a:46:10:bd:e9:81:1a:aa:99:
                    d6:2d:1f:1b:c7:2f:db:e8:cd:20:2a:85:f3:2d:6e:
                    6d:0e:bb:98:cc:4a:9c:05:fe:cd:aa:9f:98:26:38:
                    4f:eb:34:0c:2d:72:4b:bb:17:fe:5b:25:ed:3e:b1:
                    f6:f8:d3:23:04:ca:f0:63:12:9d:3c:0f:ff:40:71:
                    8f:18:32:c4:87:6b:b3:c8:94:2e:f1:f0:75:d1:5f:
                    ea:ff:cd:66:9c:ac:95:f3:97:95:06:c2:6c:f3:02:
                    2d:2f:e9:60:79:f4:2c:8f:75:48:3e:f4:d7:33:23:
                    72:e0:aa:5e:c1:dd:ac:72:0b:3f:ed:b1:d8:ad:b4:
                    e2:5b:8a:ba:0a:48:73:42:94:62:9a:b7:5e:2e:cb:
                    85:59:16:a7:4c:33:39:80:4c:5b:75:64:11:25:13:
                    41:1f:14:f1:d6:6c:4e:12:45:77:c4:b8:a1:aa:b5:
                    db:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4B:F7:9B:22:A5:76:87:C5:3A:F4:62:00:89:E9:D9:1D:D6:E5:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fa628394-8c8d-3e8f-9c50-3fb34854799f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4d:b5:63:11:11:8c:98:eb:8f:da:b5:4d:7a:b5:ae:ea:f7:
         69:77:d5:20:11:23:67:97:50:36:a7:d9:9f:49:6b:43:32:90:
         72:93:fb:54:16:5f:7b:b1:b2:cd:c8:e7:27:9f:5b:4b:42:b3:
         a4:dd:cb:db:e3:5e:6a:23:9e:db:dd:87:da:0f:3e:62:5b:e4:
         cc:46:29:1d:05:ed:83:46:7b:dd:88:7d:8c:37:ee:ea:27:87:
         51:80:1e:36:a6:55:25:fc:cd:13:48:09:f3:ab:31:a8:da:54:
         68:4b:c0:78:8a:ba:33:cd:4b:de:f3:c2:e9:ec:e6:2b:02:ab:
         b5:35:6a:e6:28:fb:ab:cf:07:10:e0:2e:5f:9c:47:c8:8b:32:
         b3:e0:a5:e6:bf:a5:e3:57:1a:06:9b:5b:fb:a3:d8:7b:d7:5a:
         3a:63:e2:00:ff:a7:0d:d0:13:47:d4:1a:42:3f:fb:e4:7d:16:
         02:39:44:3f:fc:31:b0:e8:a4:d7:2c:d6:82:cb:59:73:24:20:
         03:10:6d:d7:31:e9:b9:96:85:ea:ea:7d:c8:75:c1:f1:73:1a:
         51:4d:c0:58:c9:8f:e7:c3:ea:41:a7:db:9a:0a:e6:14:db:65:
         aa:2e:40:77:d1:f8:2a:1c:c5:89:f8:a7:39:de:a3:ec:a8:fd:
         4a:00:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:45:34 2024 by rpki-client on console-fra.rpki-client.org