Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b7990ec-64d7-3dca-87b5-ed50fec9f0a1.roa
File:                     3b7990ec-64d7-3dca-87b5-ed50fec9f0a1.roa (raw, json)
Hash identifier:          QXK1aihpD4p9iY6NxejOByB6r4ny1KTeiX1MtKJ+uFA=
Subject key identifier:   1C:5D:F0:BA:93:B7:23:DA:F6:E2:41:5E:BB:CD:5A:AB:BF:91:2A:49
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285838BBA154F2852E16651596DC60
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b7990ec-64d7-3dca-87b5-ed50fec9f0a1.roa
Signing time:             Mon 25 Jan 2021 05:00:00 +0000
ROA not before:           Mon 25 Jan 2021 05:00:00 +0000
ROA not after:            Sat 13 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.157.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:bb:a1:54:f2:85:2e:16:65:15:96:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jan 25 05:00:00 2021 GMT
            Not After : Apr 13 04:00:00 2030 GMT
        Subject: CN=3c5c9b30-cdaa-41a7-be40-5bb9e64da9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:51:af:97:3b:de:70:e3:8d:02:bb:ca:b1:
                    f6:9c:e1:4c:d1:4f:62:97:70:05:f7:6b:ea:1b:55:
                    7d:28:db:f9:1f:d2:2e:71:3f:f5:d9:61:4d:12:8c:
                    d6:be:6d:f0:e9:2b:e8:b7:5e:1e:e7:2d:b2:73:2c:
                    d2:da:4a:05:b9:b5:1f:a2:86:26:f9:53:fa:39:37:
                    7b:64:87:ef:96:85:fa:9e:53:b7:9c:0d:d6:f8:49:
                    6f:04:c9:5b:8a:45:7b:b3:d1:9d:1f:9c:cc:f2:d7:
                    94:a9:07:14:aa:c4:f2:6c:68:18:09:05:8d:bb:86:
                    cf:68:e2:52:f4:18:8a:ee:c6:47:21:08:4a:e7:41:
                    98:8a:c9:89:6b:95:b6:ae:f5:67:24:f5:67:1f:f9:
                    0f:c4:2e:ff:cc:a6:c0:86:ef:48:ea:fe:25:04:f8:
                    9e:95:3d:96:66:f2:7c:35:51:a0:ad:dc:18:91:2d:
                    fd:2d:64:0f:df:06:d2:c4:93:46:4d:00:70:3c:f5:
                    42:84:01:6d:c7:7c:05:75:40:27:fe:18:c2:30:c7:
                    7a:ed:e0:1f:c4:4d:18:87:ba:cc:23:10:82:e9:9e:
                    8e:85:b1:c8:71:ed:86:92:ba:d3:0c:e8:40:01:a0:
                    34:8a:af:b2:8f:ad:a3:83:aa:4a:fd:ce:9c:c4:2a:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5D:F0:BA:93:B7:23:DA:F6:E2:41:5E:BB:CD:5A:AB:BF:91:2A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b7990ec-64d7-3dca-87b5-ed50fec9f0a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:cd:e5:ea:06:7e:94:8a:92:51:40:00:37:47:f6:73:2d:c1:
         5c:3c:89:dd:38:25:30:ee:50:f2:b2:92:3d:c9:04:02:99:7a:
         5c:73:17:fc:c0:d7:87:54:90:77:8f:cc:16:93:0a:1c:2f:6f:
         97:6c:ef:8c:e4:89:ff:24:1b:6d:dd:aa:ef:97:54:5b:60:30:
         e2:de:8b:6e:e1:86:4a:53:45:4d:28:de:54:55:89:31:96:e1:
         5d:cf:bd:5f:b6:c6:4a:be:fa:f2:3c:e2:b0:bb:0a:24:03:ed:
         bb:35:0f:88:8f:fe:a9:59:13:0d:d5:1c:6a:e1:5a:92:d1:6f:
         05:cb:0b:92:86:ef:6f:d2:97:91:83:c3:27:43:62:b3:a6:fc:
         7a:a3:b5:4f:53:62:99:47:b8:c5:a8:b9:e2:03:03:bf:78:35:
         59:bd:53:09:de:58:2a:ef:aa:62:11:db:5d:6f:f3:63:d9:be:
         fc:52:cc:2d:eb:0e:78:2a:8d:ab:5d:28:83:ff:b5:82:7c:d1:
         a7:75:87:b5:84:be:9d:44:29:a0:d2:d1:17:a2:5e:05:49:5d:
         57:9f:e9:21:ad:39:94:af:02:7a:d4:2e:88:2e:cf:6a:43:e3:
         6c:9e:85:b9:14:fc:70:7f:86:e5:32:58:73:50:48:35:ad:ed:
         85:65:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:49 2024 by rpki-client on console-fra.rpki-client.org