Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/542782ca-7bd1-3c02-8744-bb771ffc00e2.roa
File:                     542782ca-7bd1-3c02-8744-bb771ffc00e2.roa (raw, json)
Hash identifier:          2dH0zejdGi4A0vHvOecgR6Rk4Z2LRqOI1b31tBZa1Zw=
Subject key identifier:   38:32:E6:7D:35:72:1F:1A:F7:71:DC:D4:2A:1D:1E:B1:2D:08:3C:60
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0AF51E
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/542782ca-7bd1-3c02-8744-bb771ffc00e2.roa
Signing time:             Sat 13 Jun 2020 18:57:10 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Thu 18 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0a:f5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Apr 18 04:00:00 2030 GMT
        Subject: CN=def8290d-548a-47e2-8292-97d6f1ba3935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:26:9b:fd:ee:6a:b4:50:95:e3:84:b0:06:9b:
                    71:ff:f9:91:d0:c1:dd:e4:c4:cc:09:1d:c9:1a:70:
                    f9:e5:91:3b:db:8a:8a:f8:4f:74:d4:88:be:2a:3d:
                    19:62:27:99:f7:98:79:96:bc:88:2f:22:5c:10:ee:
                    7b:16:bd:91:f6:9b:93:20:76:ae:01:bb:5f:c8:2d:
                    ef:84:29:0a:b0:7b:ae:49:f4:6a:0e:b1:49:10:07:
                    c1:2e:9d:56:bc:31:15:3c:b4:b3:a1:31:46:8e:86:
                    af:9c:d4:55:eb:50:f5:f4:40:74:0b:8a:44:20:7c:
                    75:ad:79:49:3d:4b:b5:e1:92:29:25:22:5c:8e:2e:
                    ff:28:d7:51:29:8e:34:07:d2:14:ae:48:38:e1:86:
                    61:44:a7:9a:6a:8c:1b:29:fb:ff:9f:05:5c:70:3f:
                    a5:5b:95:67:db:27:4d:92:97:2a:0f:ff:0e:c5:0c:
                    9a:77:99:63:45:d5:3b:76:f0:43:4f:cd:7d:8f:e5:
                    a7:ec:43:8f:0d:7a:25:6e:65:e0:b0:5e:17:49:d8:
                    1c:1f:04:e5:56:d1:e7:9d:9f:24:20:9f:c0:9d:fb:
                    a5:44:4a:e6:b2:0c:23:7e:ee:c9:6f:9e:aa:4c:9d:
                    a6:22:c5:7d:89:b7:1b:55:7e:36:22:d7:2a:11:06:
                    94:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:32:E6:7D:35:72:1F:1A:F7:71:DC:D4:2A:1D:1E:B1:2D:08:3C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/542782ca-7bd1-3c02-8744-bb771ffc00e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:48:b1:ba:84:c5:17:c4:9b:ce:93:2c:09:d3:be:8d:f6:76:
         3c:ab:7b:02:ca:fd:08:4e:df:5a:b3:32:44:96:5b:a7:81:02:
         85:45:dd:53:5d:e8:54:72:c3:06:56:40:aa:42:b6:45:79:6e:
         14:ca:c3:6e:1a:b3:7f:a9:18:c4:0a:7b:f1:48:79:0a:c3:bd:
         f4:89:73:14:93:a6:d6:75:e1:f3:b9:03:2e:ab:0d:d6:13:a3:
         f1:f2:03:24:5c:e8:76:09:08:e9:b5:52:76:af:17:cc:21:01:
         7a:63:6f:a1:12:97:52:7e:7e:fc:c0:69:3f:56:73:be:c8:0b:
         c7:e9:fa:e5:cb:fe:c0:56:06:90:a4:c9:13:51:3e:67:b8:04:
         79:62:5b:7e:89:99:76:a8:34:9b:97:8f:1e:e3:45:62:7e:98:
         99:82:fa:64:4d:15:b6:62:b3:8b:3e:9a:56:92:7b:45:6d:f0:
         c3:8f:3c:af:a5:08:f7:d7:c5:03:87:7a:15:b6:e6:e4:bc:b2:
         9c:85:55:21:74:b3:ae:28:0c:24:dc:50:4b:76:78:c3:76:d8:
         dd:95:b8:ca:d0:82:1c:3e:83:ca:9e:94:39:6f:c7:2b:e2:8d:
         3a:bf:2c:1c:3d:57:64:eb:95:e2:34:a0:16:3a:c5:a0:d7:7b:
         b9:92:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org