Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0c2152c5-dd82-3836-b1d4-2fb879751d80.roa
File:                     0c2152c5-dd82-3836-b1d4-2fb879751d80.roa (raw, json)
Hash identifier:          NWDnMY7JtVaSsPwGXiLFwZkEOz27w6fq3z1XBjM8q5Y=
Subject key identifier:   54:F7:9F:83:82:9F:30:89:3C:FC:40:8A:A5:23:26:51:E1:92:10:54
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0D34A9
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0c2152c5-dd82-3836-b1d4-2fb879751d80.roa
Signing time:             Sat 13 Jun 2020 18:59:37 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Tue 19 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0d:34:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar 19 04:00:00 2030 GMT
        Subject: CN=4b9394d5-7b7c-4268-99e0-526354b75f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:0a:0a:46:55:84:97:96:5e:c7:43:d4:b6:
                    c3:78:01:3c:b9:99:55:5f:9c:b4:a0:ba:c6:7e:2b:
                    e3:1d:c9:c3:2e:ed:ce:fd:22:75:b5:b0:a2:8f:1c:
                    f8:fc:70:7d:cb:ca:50:c3:0f:b6:e8:bf:1b:d7:b3:
                    de:33:d2:a3:78:5d:15:bd:78:3d:70:f3:02:74:fe:
                    b6:bf:bb:97:99:38:f5:c3:58:d5:21:74:d7:47:95:
                    f0:8d:d2:f9:e1:ee:6e:21:f1:64:27:22:85:36:ce:
                    aa:03:94:cc:1a:1e:d0:20:6c:e5:60:57:85:88:b4:
                    b1:f6:f9:d0:21:7f:cc:ff:66:fe:44:43:ac:b6:c7:
                    bc:cc:b0:25:7b:8f:fb:e1:bd:d8:be:04:73:4e:7f:
                    d2:a8:63:b4:ca:2c:7c:d1:3b:32:55:67:87:51:fe:
                    e2:ac:25:df:f3:bd:a4:fe:98:89:bc:48:25:1d:40:
                    68:cf:57:5c:69:f9:8e:d8:b9:31:70:11:d6:f3:0a:
                    94:3f:1b:06:6e:9d:fa:4e:65:93:b4:97:d6:9e:f0:
                    40:e7:84:ad:69:88:f2:c3:78:58:c3:40:a0:62:7b:
                    64:45:ff:7b:59:5d:24:f9:c2:8a:48:77:cc:98:06:
                    ca:3f:45:7c:14:54:da:10:52:a8:37:fc:f8:0d:84:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F7:9F:83:82:9F:30:89:3C:FC:40:8A:A5:23:26:51:E1:92:10:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0c2152c5-dd82-3836-b1d4-2fb879751d80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:76:d8:f2:14:12:f2:3c:00:fb:a4:80:19:c1:50:f2:7b:0b:
         55:d7:5f:22:51:8a:21:75:2d:6f:98:c5:c1:17:1a:8a:2d:6e:
         eb:88:16:52:44:51:2b:3b:c9:18:68:30:bb:f6:3e:77:43:83:
         9e:9b:30:b8:ac:dd:70:8c:44:99:3b:64:d8:4a:c5:c6:76:5a:
         1c:ec:1a:89:7c:cd:5b:99:72:9b:72:f6:9b:fd:29:13:a2:f5:
         c4:02:88:a9:bc:b6:4e:0d:47:cf:18:3c:5b:ab:5b:22:d4:a1:
         21:2c:91:02:82:e2:fd:69:bc:8d:96:52:40:b1:3c:60:97:54:
         d4:3b:6e:fd:eb:19:9c:ef:6f:ac:dc:ff:b9:cd:1d:da:97:c8:
         00:94:f4:d0:43:9b:ec:af:b2:c8:27:d7:2c:82:81:2b:4f:1c:
         74:eb:b8:2e:11:a3:b4:51:ae:cd:19:c0:f2:43:d3:1a:b0:ee:
         13:db:60:2e:d1:99:1a:63:b3:8e:a9:75:4a:f8:18:0c:9f:a6:
         bc:97:62:da:ff:02:00:a2:2e:da:86:f2:f9:44:43:b3:93:8f:
         58:f0:f6:90:05:21:0a:dc:71:71:82:d1:71:70:28:e0:b6:d3:
         8e:21:f5:3f:58:fb:ea:f9:30:60:d1:91:7e:bf:0e:8b:7a:be:
         40:d7:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:04 2024 by rpki-client on console-ams.rpki-client.org