Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1c851d91-96de-3ff0-b249-0cc376a69f4a.roa
File:                     1c851d91-96de-3ff0-b249-0cc376a69f4a.roa (raw, json)
Hash identifier:          AQiI+sHGzJhMAZjvpocHFU59cpp2RHFGtPIv3j6KXJ0=
Subject key identifier:   31:F4:FC:08:4E:5E:6E:43:B1:05:6E:8A:26:32:14:13:53:57:AB:CA
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17324D33B15
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1c851d91-96de-3ff0-b249-0cc376a69f4a.roa
Signing time:             Mon 06 Jul 2020 15:51:29 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Wed 13 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:d3:3b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Mar 13 04:00:00 2030 GMT
        Subject: CN=68c5b484-f6a7-4bb6-97db-7b9c6df9aa47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8c:44:f3:4e:5f:81:e0:4c:6e:f1:66:1d:44:
                    ba:a0:29:52:7e:96:56:51:03:ef:a1:a0:d2:93:24:
                    e0:6e:ba:41:54:fd:2a:81:e8:a8:5c:6a:50:98:77:
                    c7:48:63:31:e8:38:0c:ab:e2:c8:33:81:f5:09:35:
                    ab:3e:cb:3f:4e:7f:7d:88:33:78:82:10:9c:35:63:
                    b0:28:92:92:53:6d:b1:40:a1:6d:5a:02:ac:8b:96:
                    36:dd:94:5a:47:62:5a:b0:e5:60:31:50:e0:17:11:
                    5b:aa:f1:25:0b:a6:14:4c:45:cc:21:34:ce:ad:a8:
                    f6:4a:9f:97:44:a9:94:e0:6b:d0:23:2a:3d:89:d2:
                    c0:ef:77:61:e1:d3:a1:aa:80:66:f6:dc:fa:f4:69:
                    7b:ed:6f:84:3d:a3:0a:10:3d:1b:6d:94:c8:53:76:
                    43:b1:7f:a0:59:63:fa:33:55:3d:8d:6a:10:87:b2:
                    b0:b1:57:50:54:79:66:a8:9c:a2:e1:91:3a:b3:a5:
                    59:da:f9:c6:41:c4:66:d1:37:e4:be:a8:56:26:88:
                    3f:83:da:4d:0e:b4:50:85:ef:15:a8:95:5f:05:b0:
                    24:0e:8c:03:5e:e2:54:20:71:2f:94:84:e6:81:7b:
                    1e:a7:62:24:3f:4e:b3:8e:94:ba:42:e4:e9:70:82:
                    91:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:FC:08:4E:5E:6E:43:B1:05:6E:8A:26:32:14:13:53:57:AB:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1c851d91-96de-3ff0-b249-0cc376a69f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:80:ad:2d:8c:7b:2a:de:57:f5:61:8d:44:4a:8f:5e:62:7a:
         ab:8e:16:79:7d:0e:59:1a:f4:3c:e0:7d:ec:d1:70:6e:77:68:
         8c:2f:67:20:99:c5:3a:47:a1:c6:b0:8c:10:3c:84:59:3b:ac:
         5f:55:fb:58:59:6b:a8:92:7e:9f:aa:48:15:c3:41:f3:67:52:
         f2:8b:17:19:31:cb:84:32:7c:9a:78:ab:f3:bd:e1:85:dc:57:
         f1:a4:31:28:aa:8e:13:d7:af:c9:10:b3:8a:8c:70:7f:3d:e0:
         76:02:f5:15:fe:a2:c7:24:62:f8:bd:61:5b:b0:65:73:03:52:
         8d:d0:c3:50:94:68:db:84:cb:ab:85:50:22:ac:d4:85:b6:7a:
         e7:bc:59:7a:e5:c7:39:4d:8a:f7:89:b6:2c:7f:67:22:01:c6:
         d7:4d:08:d7:58:03:00:e5:1a:d7:fd:ea:81:44:1d:5f:b6:d6:
         2e:29:12:51:72:1a:d9:66:06:18:d1:48:47:7a:cc:7a:63:95:
         e1:a7:79:46:6e:ee:ed:58:83:b7:fe:59:8e:32:d4:22:26:c9:
         77:6f:20:6a:34:5e:59:04:da:54:d4:95:cc:2f:79:5c:7a:ff:
         7c:13:83:fd:de:42:ad:18:bb:ab:12:02:23:45:55:45:76:40:
         ce:ff:25:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:05 2024 by rpki-client on console-ams.rpki-client.org