Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/557bd45e-1389-36db-83d0-ce6cba515412.roa
File:                     557bd45e-1389-36db-83d0-ce6cba515412.roa (raw, json)
Hash identifier:          Q4hiNrGra8ovLneUMWsPqkZUHycNtaJZX+CC2yT+/0k=
Subject key identifier:   43:A5:81:4F:57:89:60:99:BA:B0:35:95:6E:48:DA:7D:63:71:86:A4
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0BBDA5
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/557bd45e-1389-36db-83d0-ce6cba515412.roa
Signing time:             Sat 13 Jun 2020 18:58:01 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Tue 05 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0b:bd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar  5 05:00:00 2030 GMT
        Subject: CN=62b9420d-3ce3-40ea-b12e-4cf9e766b5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:39:16:be:15:59:e0:72:c8:64:4f:30:e5:
                    6d:20:97:0b:43:05:6d:d3:fd:ac:8d:29:e5:56:f5:
                    c2:9d:79:79:07:dc:e7:be:cf:3d:8b:65:04:d4:4e:
                    02:71:0d:7f:6f:90:40:d6:ae:a3:91:c7:e1:30:e8:
                    6b:eb:cd:ed:d9:ac:64:66:c7:f3:ae:0e:2f:38:8e:
                    36:fb:c4:57:b6:62:68:42:48:71:37:9e:dd:4d:ba:
                    fc:b2:99:b2:bc:2e:93:b2:e1:a8:9d:1b:50:7b:a3:
                    1b:af:5d:d1:44:7d:ed:5b:83:44:d4:20:ac:07:f7:
                    66:35:01:bc:16:66:5e:47:9c:e1:b0:5f:f0:bb:bb:
                    62:4d:eb:50:74:69:2c:5e:55:27:37:e5:bf:ab:b0:
                    8b:3a:a3:c5:34:1c:d7:5c:d5:93:a9:eb:e9:1b:ae:
                    a9:a8:59:18:be:30:2c:46:35:eb:ef:92:30:07:5c:
                    d1:3f:ad:ff:29:e8:3b:d7:2c:a2:66:26:96:9f:86:
                    6d:69:e6:7e:ea:6a:00:df:c3:90:d3:02:c8:f8:7c:
                    a9:f1:ba:64:de:3f:52:7b:90:6d:09:36:44:a3:35:
                    43:9e:16:4a:fd:66:c8:af:0e:af:8a:8f:93:d4:4a:
                    08:e4:fc:6d:90:2a:1f:e2:21:85:af:78:19:bf:26:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A5:81:4F:57:89:60:99:BA:B0:35:95:6E:48:DA:7D:63:71:86:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/557bd45e-1389-36db-83d0-ce6cba515412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:4e:44:5b:78:fd:b0:9a:3a:86:b0:23:a8:2c:19:b3:28:
         1d:9b:7d:17:eb:00:9b:46:40:bb:cc:35:ab:e9:f6:bc:fb:b4:
         f3:e0:15:dc:70:67:b0:28:d3:a8:75:8d:8b:f9:82:92:50:4e:
         db:5b:44:f1:1d:a4:9b:fc:dd:37:41:9e:00:1e:fb:cf:03:68:
         70:b9:3b:42:a3:69:f5:3d:3e:21:76:b0:a4:cf:63:8b:84:ab:
         ec:84:dd:f3:85:9d:56:fa:d2:26:da:ea:c8:eb:3f:32:a1:ed:
         41:a8:b1:7b:25:7e:e3:ff:98:66:50:ab:a7:a0:91:67:16:2a:
         9c:2f:c7:9d:f2:4d:2b:96:d2:97:03:a9:0f:b2:f6:18:05:a4:
         78:12:ad:97:49:bd:d9:9a:4c:ed:68:07:c1:07:09:28:ea:f8:
         6c:83:cc:80:1a:04:d9:6a:f6:bf:eb:1d:cc:c8:e8:ca:22:35:
         db:3e:7b:47:a3:5d:6b:60:3c:c1:b1:f8:5d:b5:b3:3f:10:e2:
         b4:ca:7c:54:56:f2:2b:ad:e1:0a:85:60:76:5f:63:73:98:d1:
         4c:86:b5:bd:32:f0:78:81:b7:26:af:d0:43:48:98:16:0e:19:
         0e:fa:9e:47:ae:f7:aa:c7:db:0d:f3:8a:9f:68:4f:0b:09:8f:
         d1:33:d8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:49 2024 by rpki-client on console-fra.rpki-client.org