Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e65ce42-4563-3cf4-a3ac-0386f932b478.roa
File:                     4e65ce42-4563-3cf4-a3ac-0386f932b478.roa (raw, json)
Hash identifier:          hCwo4Fn8ZvcXoyTFMENAdHQ4hJagOYfqhnrAlqOLUN4=
Subject key identifier:   A6:6D:97:05:3F:5D:50:08:28:49:63:E6:9F:99:F2:3F:7B:D3:9A:90
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF09B88B
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e65ce42-4563-3cf4-a3ac-0386f932b478.roa
Signing time:             Sat 13 Jun 2020 18:55:49 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Tue 19 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:09:b8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar 19 04:00:00 2030 GMT
        Subject: CN=c037abfc-f4db-4b8d-9986-daf2b0d48a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6b:d1:58:97:f1:04:07:d3:53:47:15:15:b8:
                    02:68:16:ad:d7:2a:67:94:26:e8:12:bb:e2:65:36:
                    ca:3f:57:e9:3f:fd:aa:9f:96:4e:9c:dd:d2:aa:60:
                    b4:5f:76:6d:52:10:42:49:bc:22:81:6f:d3:fd:19:
                    dd:00:5f:56:21:3e:84:39:aa:be:43:2d:d2:d6:1d:
                    40:1f:d4:fe:7f:0c:15:1d:53:42:b7:81:8d:d5:29:
                    01:e3:4a:58:f6:d9:9e:e7:c6:8f:65:cc:cd:51:24:
                    97:f1:92:79:45:7c:a0:49:42:b9:d6:e7:45:82:18:
                    f4:70:02:9f:f3:da:8c:31:64:69:24:8a:a1:b4:db:
                    c4:e7:57:4a:12:97:00:99:5d:d6:bf:f9:05:46:22:
                    4e:f5:fd:e7:ef:29:cf:87:40:37:9d:31:7d:a7:04:
                    3a:4b:8e:0d:98:f3:f4:51:50:93:7d:10:9e:df:44:
                    72:0b:8a:a2:98:ad:17:5e:28:52:8e:b1:b9:a7:95:
                    7c:bd:d2:d2:16:04:c7:8d:46:98:fc:45:f8:7b:23:
                    fb:74:0f:d1:80:4e:c1:0c:33:e2:c1:6c:11:cd:d8:
                    99:e2:e7:b2:62:e8:69:d7:2e:32:a0:6c:04:48:83:
                    f4:36:7b:4b:e6:93:36:47:7a:b1:c3:6a:16:dd:ee:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6D:97:05:3F:5D:50:08:28:49:63:E6:9F:99:F2:3F:7B:D3:9A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e65ce42-4563-3cf4-a3ac-0386f932b478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:90:36:e7:72:13:32:3d:0a:13:13:fe:2f:34:66:c5:0e:db:
         20:4e:d5:68:af:63:a9:96:e2:e2:77:eb:5f:dd:f3:d3:fa:4b:
         5a:08:6c:96:8d:2c:33:1f:eb:83:e7:a6:7e:f7:bf:97:a8:d2:
         76:12:cc:a5:b5:bd:01:05:ef:6a:6a:65:d4:b0:9e:79:0a:22:
         82:30:fd:d6:32:7c:e5:d8:47:0d:4a:a9:ae:87:9c:6b:3f:ec:
         81:7e:2c:ac:8c:c1:f5:c8:0d:13:b0:b1:08:e2:20:83:3c:e5:
         5c:2d:3a:23:85:31:4b:db:cf:72:0e:33:95:48:28:00:ad:1a:
         a3:58:f1:ec:0f:a8:65:d2:a6:72:bf:bc:2b:28:e1:27:bd:0d:
         59:17:68:6c:d9:7f:b2:8c:ca:f7:38:fe:0f:2d:12:fa:54:d4:
         78:c0:9f:00:1e:00:56:68:10:d2:fd:76:91:a5:14:fd:b0:8b:
         1f:ea:e4:5f:e3:8e:23:f3:a1:2c:95:f8:4e:7d:a7:fd:1e:92:
         21:6a:52:cb:1d:e9:7f:41:05:78:0e:4b:52:84:bf:48:cc:6c:
         5c:da:d5:01:f7:02:2d:68:36:66:53:2a:0f:4c:74:14:83:19:
         41:38:8a:80:23:0a:cd:13:95:b3:c1:11:e6:eb:3b:7b:f4:d2:
         43:a6:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:05 2024 by rpki-client on console-ams.rpki-client.org