Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17aad98a-f178-362d-b701-0b808354d7a2.roa
File:                     17aad98a-f178-362d-b701-0b808354d7a2.roa (raw, json)
Hash identifier:          v39TwKND9n8tpeQditl64J+jfA7b2OuYjH3MLCXwV9o=
Subject key identifier:   7C:44:CD:AB:E1:FC:37:20:E6:DD:C3:6E:4B:3C:36:38:F1:B1:2D:DF
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732A0B1E71
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17aad98a-f178-362d-b701-0b808354d7a2.roa
Signing time:             Tue 07 Jul 2020 16:10:38 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Fri 12 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        20.150.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:0b:1e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Apr 12 04:00:00 2030 GMT
        Subject: CN=b2a0f2b0-a160-4192-a58e-bd3b7a19d520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:38:f6:81:6d:af:d5:a3:71:3f:9e:19:68:
                    a6:9a:60:3b:92:d8:9e:8b:f7:c6:cb:cf:2f:ad:44:
                    a8:3a:79:19:b8:d5:28:fb:07:e4:ef:19:d1:51:31:
                    62:eb:2d:d6:21:3a:7a:e6:dc:98:5e:c6:0e:e3:eb:
                    b3:8d:74:2a:55:de:27:29:38:88:1b:5e:14:0d:e1:
                    81:d9:a6:3c:52:73:cf:c0:6f:0d:80:c1:2f:93:79:
                    3b:22:cd:15:14:6d:ce:4f:72:7c:ba:d5:5e:e1:c0:
                    85:19:28:d2:25:20:87:22:74:b5:2a:74:e5:8e:bb:
                    32:54:57:1f:08:60:70:fc:f1:71:a4:dd:fd:88:0f:
                    ee:1e:40:61:b3:15:9a:bd:92:7a:1e:18:3d:ed:7e:
                    ec:de:2e:9f:d3:d9:d1:c0:aa:3c:5d:cc:02:97:84:
                    5b:72:0f:49:b4:23:f1:a0:6e:9e:c4:56:0b:65:76:
                    bc:3e:da:d9:7d:2e:2d:23:15:d7:8b:b9:96:ab:ad:
                    00:23:b1:62:92:27:ef:d1:38:76:58:ad:5e:91:d7:
                    04:b9:f1:c5:90:8f:7a:14:01:a9:34:d3:53:32:56:
                    ec:6f:12:48:81:cf:91:12:9c:9f:e2:99:ae:0d:56:
                    0d:12:d7:c0:28:0f:36:c8:33:c4:d1:d4:6a:7d:3b:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:44:CD:AB:E1:FC:37:20:E6:DD:C3:6E:4B:3C:36:38:F1:B1:2D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17aad98a-f178-362d-b701-0b808354d7a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.150.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6b:9b:a8:54:a7:c9:51:30:3f:ae:f8:aa:8b:07:81:86:e5:
         34:70:0e:4c:62:39:24:c3:91:e5:0d:27:c7:79:a5:8e:1b:b2:
         b8:ad:be:70:40:a8:1e:83:ca:d6:95:f3:ca:34:97:bf:75:b7:
         17:ca:bb:2d:69:77:7a:7a:c0:7b:0c:e1:76:be:9e:61:83:80:
         bf:18:95:ef:90:68:9e:23:f1:91:f1:17:24:d1:08:86:b6:c8:
         69:01:2a:53:7f:b7:a5:29:ac:91:33:38:f7:ff:4e:dc:13:a9:
         42:d4:d8:a8:f4:43:69:34:a1:77:cc:b0:f4:2a:55:d4:d7:c9:
         6a:ac:5a:d7:45:7f:e5:00:05:db:a6:7b:f8:18:89:01:38:45:
         7c:7e:fb:74:06:68:8f:6b:e7:5a:8d:a7:ef:75:12:dc:89:92:
         7f:f8:8f:c3:92:5d:95:5b:46:2d:95:20:12:08:29:31:89:1f:
         c2:b9:e6:8d:2a:d6:be:21:c7:fb:64:f7:cb:df:4f:23:74:ec:
         b3:78:f1:f0:df:d3:12:39:fb:86:d6:d6:26:5b:eb:82:ec:6a:
         ba:33:d5:8a:0f:ea:40:00:af:7c:6d:29:99:2a:fb:0a:90:4e:
         18:3b:32:8b:84:65:3c:e1:a8:bc:c1:d2:ce:69:ed:d3:af:0b:
         12:64:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:22 2024 by rpki-client on console-ams.rpki-client.org