Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72c091f4-a79c-3004-9893-20e0e94a04b3.roa
File:                     72c091f4-a79c-3004-9893-20e0e94a04b3.roa (raw, json)
Hash identifier:          UzDYQouo8MCVUtsm0JbDdcU3nvQ/k6//3+an0d3JGUI=
Subject key identifier:   05:73:42:C0:52:40:71:C7:BD:FF:7A:E9:48:B5:2B:11:EE:C3:0D:65
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AEFA5DC6
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72c091f4-a79c-3004-9893-20e0e94a04b3.roa
Signing time:             Sat 13 Jun 2020 18:39:03 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Wed 13 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:ae:fa:5d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar 13 04:00:00 2030 GMT
        Subject: CN=f16ed210-283a-4783-b9d1-d53a918d32ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:98:e0:66:75:f5:1f:ef:cc:a9:73:d4:3e:
                    41:7f:98:66:94:6d:12:7d:11:68:b3:48:bb:3d:58:
                    4b:7e:88:37:38:57:7a:23:23:01:8d:d5:eb:af:ca:
                    e4:8f:f6:86:ef:d7:ca:c1:29:7d:81:c7:87:01:5b:
                    67:9b:37:0b:62:f9:98:42:86:77:4d:e1:fc:f6:39:
                    25:4a:59:37:7b:25:9f:78:e7:b3:37:46:7e:8d:f4:
                    e3:c8:bc:2e:a7:5d:29:00:52:35:51:a0:4f:55:3f:
                    8b:a6:64:e6:43:72:67:fe:5b:81:a6:49:9f:d9:4c:
                    0f:54:c2:81:ea:7a:fd:32:ef:cb:cf:d5:1e:2e:ba:
                    9d:85:11:8f:48:c8:a8:34:92:70:99:c5:28:88:98:
                    6d:47:be:3a:f0:e8:cc:f5:90:41:59:20:16:3c:13:
                    62:8d:01:db:2b:51:94:f6:a4:97:39:2b:08:e6:14:
                    10:af:52:d5:ef:dd:9b:16:f8:47:f4:a4:e1:76:1b:
                    10:1b:dc:a3:98:81:87:e1:4a:e2:cf:b1:16:a2:1c:
                    82:23:7d:46:52:83:ff:87:3f:08:72:8b:0f:ee:58:
                    13:a2:bd:ff:c9:fe:e8:0a:47:b7:89:45:a8:94:c3:
                    0a:65:0b:4c:a6:e9:73:cb:39:2f:e3:4d:de:1d:36:
                    a8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:73:42:C0:52:40:71:C7:BD:FF:7A:E9:48:B5:2B:11:EE:C3:0D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72c091f4-a79c-3004-9893-20e0e94a04b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:45:e1:a9:c9:b2:24:5a:5c:75:3e:48:30:a9:b6:aa:91:6c:
         a2:86:41:d6:46:01:09:a9:8f:a1:d6:36:b7:5e:6a:3f:c5:8e:
         69:dc:89:b6:3d:9d:f5:f3:49:3b:9e:ba:cc:4c:e0:78:b0:94:
         59:fd:7b:86:29:13:50:89:c7:a8:44:9c:9c:de:2b:7c:e2:58:
         0d:6d:d2:16:4e:aa:33:62:f3:b4:18:8d:24:1d:13:d7:1c:e9:
         34:39:f4:85:4d:20:29:e9:e7:73:6c:02:55:37:ae:38:7d:90:
         7c:bc:68:f1:01:a2:2e:1e:70:55:6c:39:ae:3e:38:b2:d2:95:
         85:c3:8a:7d:93:10:48:90:0e:db:d9:64:8d:6a:b5:b6:df:48:
         14:74:46:86:be:5a:59:ac:17:78:e0:30:8b:c9:dc:d0:fd:95:
         1b:f1:e9:ad:80:63:2c:b1:98:03:a6:6e:86:6c:39:5b:7e:2b:
         c3:af:94:83:10:b7:ae:e2:b3:75:3d:d3:e9:c7:9b:d8:ca:cc:
         07:0f:be:ff:34:c0:c2:35:e8:78:87:15:dc:cb:62:64:b2:58:
         26:aa:e2:25:b0:23:06:4a:1d:49:06:f2:ea:31:89:3d:a6:c5:
         9f:4c:0d:b4:81:b0:69:21:b3:a7:0b:dd:88:0a:0e:a5:3a:d5:
         81:f1:24:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:50 2024 by rpki-client on console-fra.rpki-client.org