Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d0b9663-3794-34c8-a57e-c0507eafae7d.roa
File:                     2d0b9663-3794-34c8-a57e-c0507eafae7d.roa (raw, json)
Hash identifier:          sBoPFaWEMvPerRxxBT+02yckD/scoeAcuAajj8zXeN8=
Subject key identifier:   00:95:B7:F8:96:FB:0C:5E:A7:9B:33:7B:42:B7:96:36:D1:4E:7E:98
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF08971C
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d0b9663-3794-34c8-a57e-c0507eafae7d.roa
Signing time:             Sat 13 Jun 2020 18:54:35 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Sat 02 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:08:97:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar  2 05:00:00 2030 GMT
        Subject: CN=e69e4d76-c112-4ea5-b1fc-48420fe4ce56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:d2:7d:7b:44:41:89:8c:c9:e3:2d:e7:ba:
                    b4:0f:96:52:bd:be:45:4c:6e:82:3f:1e:e3:09:0d:
                    28:f9:c2:48:73:ba:b2:a3:55:2b:d1:ff:47:19:04:
                    99:19:2e:4b:df:30:0e:3e:d1:fc:d2:0b:ff:97:6e:
                    b8:24:b8:95:f6:fe:ee:4c:b0:84:61:2c:43:c3:86:
                    84:5f:75:53:70:a5:db:ac:9c:8f:07:4f:e6:79:55:
                    e7:bf:f8:40:3a:45:02:8a:85:a6:7e:2f:61:69:ed:
                    ae:4c:de:2f:46:56:52:50:c4:94:55:2c:55:ef:5a:
                    f2:6a:8a:cd:c5:d4:93:07:9b:50:b5:d0:7f:81:48:
                    8c:9b:2f:53:77:e2:05:1b:a5:af:d3:82:c4:cb:10:
                    42:22:41:5b:c6:eb:40:83:4d:09:6b:2c:45:18:79:
                    97:b0:43:d6:09:9f:08:24:56:fd:33:76:01:a9:1c:
                    33:d5:da:eb:69:8d:e4:a2:d6:a0:25:b6:8a:aa:d4:
                    35:96:de:56:60:13:a5:a5:c8:22:cc:85:91:76:25:
                    bb:10:e5:87:1f:07:b6:57:0d:a6:13:57:45:e2:1c:
                    a3:bb:7d:4e:c7:4c:60:6f:50:7e:a8:45:fc:01:73:
                    94:2f:7f:3c:14:53:13:3a:dc:66:17:fe:8f:e5:a1:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:95:B7:F8:96:FB:0C:5E:A7:9B:33:7B:42:B7:96:36:D1:4E:7E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d0b9663-3794-34c8-a57e-c0507eafae7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:25:d3:a1:c9:67:b6:f6:9c:54:9e:7c:75:69:fb:de:32:ac:
         65:8f:7b:37:1f:36:fc:b0:a4:06:6b:d1:a6:e3:36:8b:b9:73:
         72:71:05:2a:9b:ca:09:be:50:97:cd:4c:f9:c8:d0:a7:af:08:
         10:50:e5:3c:df:3a:37:ca:fb:2a:84:3c:5f:82:8b:8e:c9:25:
         87:72:54:40:a5:df:2d:2e:8d:d0:4f:3e:56:49:4d:a2:df:da:
         ea:e3:12:9e:34:3e:b8:3e:ed:82:c9:8b:c1:eb:4e:be:c0:32:
         a7:af:fc:b5:a4:60:7c:85:ae:29:27:d0:60:7f:b2:7a:c3:71:
         34:89:4c:fb:19:b9:77:34:d8:57:f4:a2:a6:ed:7e:4e:b1:1c:
         21:81:0d:23:43:63:e1:cd:61:7a:3f:1e:60:58:df:39:2f:c3:
         ba:ab:06:79:0e:6b:b4:ba:98:e3:d0:81:ef:33:59:7d:a8:99:
         f6:47:ca:51:53:b4:9b:da:42:52:86:76:bc:a6:9c:d1:f7:0e:
         a7:c4:82:18:fd:a9:af:d6:26:6f:ad:38:f3:6a:bf:3b:53:c9:
         74:28:e8:2b:54:e0:0a:9a:6a:57:ed:d1:7a:c6:d7:10:33:93:
         7b:76:16:26:0f:1c:e9:9d:32:54:51:8f:0c:8c:e5:98:c3:7f:
         b3:a0:44:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:23 2024 by rpki-client on console-ams.rpki-client.org