Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa
File:                     22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa (raw, json)
Hash identifier:          Vvi5rpzNO1kn/VIQGg4Uh55E0jcnGHQKn16i3B24V2Q=
Subject key identifier:   55:BE:05:34:31:F9:DB:56:86:32:93:B1:01:CA:F8:D5:B7:7C:31:62
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858481F6539C6FA8676F144A3B268
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     8069
IP address blocks:        20.157.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:39:c6:fa:86:76:f1:44:a3:b2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=f0ec6cb3-8441-4d23-a477-514f09b4a995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:72:ef:ff:84:2a:b8:1d:d8:83:5c:73:a2:b9:
                    7a:36:52:3e:e6:51:13:ab:ea:eb:36:11:bb:bb:9a:
                    92:7c:17:6f:f1:73:3c:41:00:e7:89:bd:71:c9:56:
                    02:74:42:ba:eb:9b:9e:b3:45:3b:b2:c9:3e:61:00:
                    a9:15:b1:a3:72:af:cc:57:fa:4b:33:bb:d6:fe:96:
                    10:e2:a0:8f:af:ff:13:34:5d:73:18:a9:c1:4e:2f:
                    b7:6b:fb:07:94:92:36:40:1e:60:58:41:77:65:08:
                    50:47:58:6d:59:af:54:47:60:51:94:c1:07:93:58:
                    5d:98:ed:a6:fc:97:cf:2a:09:e6:4a:4a:63:88:d6:
                    31:4c:c6:b8:37:f9:fe:62:ad:02:2c:84:f9:3a:15:
                    b3:c3:f9:26:e3:45:08:ec:ad:82:cd:1c:7a:7e:d9:
                    7c:48:fb:a4:68:bb:e7:8f:33:01:c3:7c:4e:08:a7:
                    16:69:af:fc:21:54:7b:63:8a:42:40:8c:07:ea:85:
                    0e:7a:8d:08:5b:89:2c:6d:d8:25:79:f4:e3:e2:3c:
                    13:99:a8:83:4f:8a:40:3f:7c:5e:41:dd:a7:41:03:
                    8f:ab:76:bf:8a:a5:e2:93:14:df:08:d6:eb:3b:02:
                    25:ed:3c:bf:03:ad:d9:a2:42:1f:86:7a:6e:80:41:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BE:05:34:31:F9:DB:56:86:32:93:B1:01:CA:F8:D5:B7:7C:31:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:da:08:67:79:95:1e:a6:82:c7:ac:04:90:da:0f:0a:1e:bf:
         07:a7:bf:5c:fd:0f:e8:f8:4d:66:1b:c6:d2:d5:7e:b9:bc:71:
         7f:a0:ab:38:69:b4:9b:3f:0e:21:d6:32:fa:46:a2:e6:4a:d0:
         8b:94:1a:e4:63:80:47:24:3c:02:fa:95:ce:1e:ea:49:e8:f9:
         32:4c:8c:60:02:f0:bc:38:17:68:dc:05:f2:0e:a8:39:8e:98:
         b8:09:79:bf:28:a9:95:bb:33:10:23:64:3f:6d:11:ed:01:ec:
         ef:57:62:49:ff:56:93:f2:6c:e3:f8:f3:26:85:d3:5c:41:c7:
         d8:ec:45:c0:d5:fd:a5:f0:06:5a:ad:6b:dc:40:af:4a:91:5b:
         bf:27:e2:ad:2b:04:74:51:25:88:29:e0:7b:5d:a7:33:ff:34:
         6b:1e:94:53:ef:6c:94:ce:98:a0:82:ec:0c:c1:eb:b1:d4:2b:
         6f:ce:65:ca:f5:da:5a:b3:74:f3:d6:47:e6:cc:33:68:20:8b:
         2e:05:b2:a4:09:a5:31:97:c1:21:fb:93:06:2a:41:09:18:77:
         41:03:bf:15:c8:a4:d6:70:2f:e2:87:7e:31:89:5c:79:a5:ad:
         51:bc:a0:44:6d:27:2b:db:e8:b0:54:5d:2d:4b:e5:8c:f6:13:
         60:81:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:14 2025 by rpki-client