Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78a70b7a-b69b-31b6-80e6-bf94728ea34d.roa
File:                     78a70b7a-b69b-31b6-80e6-bf94728ea34d.roa (raw, json)
Hash identifier:          6fJq4ApjJ/WEnbtXs2HLnAFfQog8RZKZZ56XiGtfOgM=
Subject key identifier:   DC:00:F4:2C:53:5A:C7:DD:33:E3:09:08:77:45:E8:ED:B4:7B:E7:FF
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732F624C11
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78a70b7a-b69b-31b6-80e6-bf94728ea34d.roa
Signing time:             Wed 08 Jul 2020 17:03:57 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Thu 28 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        20.46.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:62:4c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Mar 28 04:00:00 2030 GMT
        Subject: CN=adb93d08-323c-49ea-ba82-fbef34640cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:74:74:be:78:40:bb:62:80:c6:3a:e5:5d:
                    bc:18:e5:15:83:06:98:5b:f5:cd:9a:a6:c9:5b:ba:
                    37:53:9d:47:92:34:4f:09:1e:b2:70:1f:34:af:c9:
                    ce:8a:57:8e:3c:2e:fe:51:70:79:ba:93:0d:9c:ed:
                    06:a7:3b:fe:b1:50:4a:0f:ef:7c:3e:4d:02:5b:10:
                    7a:a8:6a:38:a8:a0:0e:7a:61:ec:f8:55:b6:32:6e:
                    d5:37:8f:b0:9f:fa:6d:b6:dd:63:07:7f:ca:11:30:
                    75:f4:e2:95:a6:a8:96:61:81:de:7c:fa:39:0d:f4:
                    a1:58:96:d8:dd:c4:98:aa:9d:a0:74:1f:db:4c:d3:
                    ea:05:ed:a4:0f:33:64:a1:5e:74:76:db:48:79:53:
                    35:e2:2f:e7:d2:d1:fd:19:df:6a:a2:c8:e9:ec:d4:
                    16:13:7d:f2:98:db:cb:3c:ad:22:f6:ab:fd:e6:ab:
                    a2:5d:50:df:45:74:a4:37:22:a0:f3:c8:0b:60:bb:
                    d5:22:78:7c:1e:25:45:1e:69:1d:a4:e3:f0:2b:e2:
                    2c:eb:7e:4b:c8:53:fb:6b:28:20:45:2f:95:4c:b0:
                    e5:7d:83:49:2b:0f:c3:2f:0f:e7:e0:29:48:ce:20:
                    d0:e1:3f:f4:73:ac:da:d6:27:6d:d0:9a:02:ee:b0:
                    a5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:00:F4:2C:53:5A:C7:DD:33:E3:09:08:77:45:E8:ED:B4:7B:E7:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78a70b7a-b69b-31b6-80e6-bf94728ea34d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.46.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:58:ed:a1:64:61:0b:d6:0c:ae:76:12:83:a8:4a:0d:96:
         ff:11:0d:26:b1:86:91:06:31:b5:5e:d9:bd:1c:98:df:37:df:
         b4:44:8b:43:90:ea:4e:df:e5:30:04:98:b6:35:35:50:e2:cf:
         b6:19:b4:24:46:b3:6c:44:00:0c:16:68:5a:98:3b:ca:a3:d2:
         16:45:e5:4c:81:18:2b:bd:d4:3d:b1:95:a2:4e:a9:6d:02:5b:
         07:fd:0f:87:a0:ab:9e:84:77:fb:45:ac:90:b3:14:8d:62:3f:
         75:d0:c0:0a:15:03:5a:b2:32:97:b3:40:81:17:9f:50:ee:44:
         82:3f:bb:01:f1:16:35:bd:f7:06:e6:cc:b6:84:db:69:91:20:
         6f:9e:d9:24:02:10:3c:71:c1:82:f6:82:d4:53:0e:6b:8d:c2:
         56:58:26:f5:4c:95:e5:3b:a9:6b:ec:61:7d:72:fa:d9:41:51:
         c8:89:3c:16:cd:3e:64:4e:c7:82:0f:68:2d:83:84:a3:cf:f2:
         29:63:89:36:6f:c6:2c:10:a1:c6:7f:af:3c:52:53:12:49:16:
         31:2e:57:2c:74:4e:cc:79:fd:d5:34:0b:53:d5:b9:35:7b:af:
         16:f5:36:48:a7:00:31:a5:c3:b4:54:70:24:4e:4f:f5:ad:9d:
         1c:c1:60:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:12 2024 by rpki-client on console-fra.rpki-client.org