Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa
File:                     0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa (raw, json)
Hash identifier:          sgT86bIF0cLyPMQMTdoSHME99PKKTDmRsHcDTtyhCaE=
Subject key identifier:   1A:A0:2C:B7:3A:31:5B:E0:89:10:85:6E:B5:E2:67:A4:18:61:2F:78
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17324D29700
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa
Signing time:             Mon 06 Jul 2020 15:50:47 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Sun 31 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:d2:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Mar 31 04:00:00 2030 GMT
        Subject: CN=118348c5-b8f9-4ae1-92fb-0c72a36dfc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c9:6a:d2:ef:cb:83:44:d5:7d:ea:76:9f:5e:
                    27:a3:fa:74:a0:ed:24:b9:a6:18:69:38:42:75:76:
                    65:6f:ae:62:83:23:40:3e:c5:c7:31:69:1c:4a:9a:
                    9e:2c:76:c7:df:7c:f7:42:07:80:e4:d4:da:d0:60:
                    ab:cc:bc:fc:cf:c2:f2:61:46:e4:34:1d:d8:f6:32:
                    54:a2:77:26:57:c7:18:e5:33:d3:af:21:bf:78:1c:
                    1f:eb:00:3e:77:51:60:fa:eb:2a:be:87:ad:5d:83:
                    34:17:ae:31:c1:41:11:cc:25:ce:89:4e:94:ec:66:
                    11:b1:b2:e6:c1:be:2e:06:94:14:ad:25:e1:96:f1:
                    29:05:12:58:0b:1a:13:9e:10:62:3f:50:74:00:49:
                    d4:98:22:a5:96:24:db:03:f8:b4:e2:b4:77:70:6d:
                    c9:86:1c:54:d8:c1:b7:67:c1:92:19:be:5c:58:5b:
                    5d:45:7b:12:1a:ab:5f:60:8d:6b:01:71:f2:26:bd:
                    b4:ec:30:41:b2:d8:74:29:89:bd:93:ce:75:2d:21:
                    66:c6:a0:6e:41:73:9e:22:04:ef:da:f4:98:8e:4b:
                    64:fa:11:2e:c3:d0:cf:e7:6a:64:f3:1f:3a:cb:dc:
                    a3:98:52:c7:ee:a6:ec:06:a1:8d:15:67:ed:ba:69:
                    cb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A0:2C:B7:3A:31:5B:E0:89:10:85:6E:B5:E2:67:A4:18:61:2F:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:8c:08:15:c3:7f:2f:9c:bc:4f:93:f3:91:98:58:3d:2f:
         e6:ff:d0:b2:51:55:be:40:c4:b3:ff:e1:89:e4:07:20:2a:54:
         64:45:1f:bd:70:16:8a:86:44:83:05:92:c4:9c:fc:d7:b6:ba:
         ca:1e:cf:4d:8d:0b:ba:e1:b2:01:44:95:16:0b:76:51:96:f2:
         91:0f:31:ba:21:65:d5:34:52:37:ed:fc:f8:ca:3a:ee:07:8f:
         5d:19:76:5c:99:09:6b:ec:4a:e0:5f:e7:1f:75:dd:1d:bc:2f:
         a0:12:af:be:0b:27:fd:a9:a2:e6:b8:25:54:83:47:70:c7:d7:
         cc:47:46:e5:f5:3c:a2:8d:18:a9:74:a8:85:e5:b6:fd:ae:68:
         d2:67:a7:de:df:61:d3:ff:85:52:c7:9d:95:f0:c4:ff:1d:52:
         56:6f:8f:b8:20:8d:b8:b2:2e:bb:63:56:b3:52:a2:8a:45:33:
         e9:a3:bb:b9:7b:c6:24:28:bb:9d:4d:f5:26:d7:28:c9:7f:65:
         ac:0c:2d:54:d5:f1:25:cd:9e:64:29:08:0e:b7:68:17:4c:3d:
         d4:4f:6c:05:6e:16:db:26:f3:e6:03:39:1b:a9:8a:54:3a:95:
         d5:cd:8d:99:f3:68:15:fd:31:b3:cc:65:23:a1:76:d2:c8:02:
         01:17:71:40
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcyTSlwAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA3MDYwNDAwMDBaFw0zMDAzMzEwNDAwMDBaMC8xLTArBgNVBAMTJDEx
ODM0OGM1LWI4ZjktNGFlMS05MmZiLTBjNzJhMzZkZmM0MTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOrJatLvy4NE1X3qdp9eJ6P6dKDtJLmmGGk4QnV2
ZW+uYoMjQD7FxzFpHEqanix2x99890IHgOTU2tBgq8y8/M/C8mFG5DQd2PYyVKJ3
JlfHGOUz068hv3gcH+sAPndRYPrrKr6HrV2DNBeuMcFBEcwlzolOlOxmEbGy5sG+
LgaUFK0l4ZbxKQUSWAsaE54QYj9QdABJ1JgipZYk2wP4tOK0d3BtyYYcVNjBt2fB
khm+XFhbXUV7EhqrX2CNawFx8ia9tOwwQbLYdCmJvZPOdS0hZsagbkFzniIE79r0
mI5LZPoRLsPQz+dqZPMfOsvco5hSx+6m7AahjRVn7bppy9ECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQaoCy3OjFb4IkQhW614mekGGEveDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzBjZTBkY2ZhLTM5ODUtM2U0
OC05OGM4LWU3MzlkNGFmMDg5Ni5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABQvOTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAZ/GMCBXDfy+cvE+T85GYWD0v5v/QslFVvkDEs//hieQHICpUZEUfvXAWioZE
gwWSxJz817a6yh7PTY0LuuGyAUSVFgt2UZbykQ8xuiFl1TRSN+38+Mo67gePXRl2
XJkJa+xK4F/nH3XdHbwvoBKvvgsn/ami5rglVINHcMfXzEdG5fU8oo0YqXSoheW2
/a5o0men3t9h0/+FUsedlfDE/x1SVm+PuCCNuLIuu2NWs1KiikUz6aO7uXvGJCi7
nU31JtcoyX9lrAwtVNXxJc2eZCkIDrdoF0w91E9sBW4W2ybz5gM5G6mKVDqV1c2N
mfNoFf0xs8xlI6F20sgCARdxQA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:04 2024 by rpki-client on console-ams.rpki-client.org