Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13bc15f4-82d1-388f-aabd-7e51eb292042.roa
File:                     13bc15f4-82d1-388f-aabd-7e51eb292042.roa (raw, json)
Hash identifier:          4xBO9MX5LnTyMfyT+Bj/ylK1CKWJeXd364OAFAw8HPM=
Subject key identifier:   7B:67:F3:8C:6E:AF:05:3F:0E:56:DE:68:37:4F:CA:BB:25:3F:6A:91
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328583A4533FFF248B9C46F100E5C1D
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13bc15f4-82d1-388f-aabd-7e51eb292042.roa
Signing time:             Tue 15 Jun 2021 04:00:00 +0000
ROA not before:           Tue 15 Jun 2021 04:00:00 +0000
ROA not after:            Sat 09 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.157.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:45:33:ff:f2:48:b9:c4:6f:10:0e:5c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 15 04:00:00 2021 GMT
            Not After : Mar  9 05:00:00 2030 GMT
        Subject: CN=54fb1ea7-bfde-46df-abb7-92ec54d69ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5e:5f:a9:45:a3:3d:22:d8:d5:e0:a4:fd:d2:
                    f2:0d:05:9d:ce:60:7f:bf:09:48:06:48:54:d1:7d:
                    2f:59:69:1b:fe:1b:d1:f5:15:bc:d9:35:ff:43:40:
                    eb:f0:a6:45:74:9c:dd:66:d6:cb:c5:fa:66:71:5e:
                    dc:f7:0f:62:57:db:65:30:2c:1c:e7:35:12:5a:97:
                    f3:90:00:d3:9d:41:3e:fe:17:7f:d7:d6:27:93:f6:
                    7c:4f:c9:ed:18:2d:fc:f6:f6:44:69:69:32:e2:d8:
                    7e:32:a4:9d:3e:03:ab:e9:ce:34:8a:35:19:e1:d2:
                    61:be:94:56:70:15:70:8e:e4:49:3a:d0:38:50:ab:
                    1a:91:6c:84:78:be:6b:a4:2c:dc:e9:a3:7d:d9:b5:
                    38:14:bb:c0:ac:f6:55:84:bb:82:b6:d1:14:cc:30:
                    60:29:ba:8f:d3:94:4d:1b:1d:f3:e7:5c:a3:e6:00:
                    d2:2e:13:14:2b:d1:9e:90:d2:50:19:eb:02:70:13:
                    35:f9:fc:8a:cb:0f:27:3c:c9:4a:5e:a3:71:ef:c6:
                    c9:a8:85:8b:d0:a4:4c:c9:c8:1d:8d:e8:3f:05:fd:
                    5b:b9:e9:fa:15:d0:30:a9:2f:91:1c:f6:a3:d7:25:
                    00:41:4d:f9:c0:77:61:6e:e6:9e:b4:a9:25:51:27:
                    a9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:67:F3:8C:6E:AF:05:3F:0E:56:DE:68:37:4F:CA:BB:25:3F:6A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13bc15f4-82d1-388f-aabd-7e51eb292042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:14:be:46:d0:5c:9f:f3:a4:07:62:8d:41:79:f2:94:cb:5f:
         44:ba:3a:a2:27:8d:ab:5f:86:69:12:2d:57:96:f6:d7:76:27:
         f4:9a:69:cf:41:78:a7:f7:a1:be:a1:93:a9:fd:fd:f7:cf:6e:
         9e:70:e5:70:07:1c:48:d5:85:45:d4:24:83:36:f4:75:47:4c:
         6c:f3:d5:73:50:33:d5:a9:c9:44:52:3d:b2:3d:39:b8:e9:34:
         67:1b:f3:63:88:3f:e6:7d:d9:3e:af:ad:e7:6a:c9:37:cc:b6:
         d3:4c:ef:58:4f:04:45:ea:48:75:3a:ed:7d:a2:f0:ad:7b:66:
         c4:40:1a:39:12:a3:12:69:c6:11:87:8e:a3:0d:52:02:de:14:
         9a:dd:a9:68:ea:0f:d5:07:c7:d7:2b:9b:29:9e:4d:d9:c8:5b:
         ea:59:47:fb:a1:b4:20:fa:2d:21:df:53:3f:11:9c:e5:c5:66:
         0e:cb:d1:80:a5:86:25:81:1b:32:02:20:5c:ec:a8:3b:55:43:
         e4:22:d7:41:75:41:ad:4f:91:2c:52:47:3e:18:6c:74:e2:47:
         61:af:80:80:c4:17:5e:4c:bc:65:9a:13:c8:cc:88:5d:a6:59:
         55:87:5d:8f:44:ba:55:1d:56:8c:56:bb:b9:a5:92:8a:9f:80:
         19:4c:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:10 2024 by rpki-client on console-fra.rpki-client.org