Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c74c06b-d5e0-3b6b-88ea-330efbd0f036.roa
File:                     8c74c06b-d5e0-3b6b-88ea-330efbd0f036.roa (raw, json)
Hash identifier:          PTUP2q/VMfs/HljBwBvvZ8xkSR3svYH5X+lu84DOLLE=
Subject key identifier:   25:E9:23:9E:D2:BB:54:B1:AF:67:36:DA:AA:E8:AD:61:EA:62:FF:C2
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858402939245EFD51CD281EFA1B40
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c74c06b-d5e0-3b6b-88ea-330efbd0f036.roa
Signing time:             Tue 06 Dec 2022 12:00:00 +0000
ROA not before:           Tue 06 Dec 2022 12:00:00 +0000
ROA not after:            Sat 16 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.157.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:29:39:24:5e:fd:51:cd:28:1e:fa:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Dec  6 12:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2030 GMT
        Subject: CN=67819f9c-3ca6-479f-a42b-4734bb315b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2e:a4:02:81:09:1f:15:8d:b0:6a:27:51:5d:
                    c9:79:fc:8a:0a:9e:20:10:43:4a:e6:46:4d:c8:22:
                    7c:f6:67:1a:8c:65:5b:93:e4:c6:c1:56:da:e8:c3:
                    60:a4:60:fd:9b:91:a7:ee:10:be:06:94:96:13:f0:
                    54:36:8b:36:60:df:3c:f9:d0:0f:79:13:6b:c0:e3:
                    b6:83:80:21:7d:f7:e1:aa:46:7b:64:d5:32:ba:0c:
                    c3:f4:df:c7:be:33:ac:fe:8d:e4:a6:6e:d9:d0:07:
                    c5:3e:b2:ab:7b:d4:7e:5b:5c:6a:e0:5d:1c:27:2c:
                    fa:7e:8f:33:9d:8a:d5:e9:60:2d:a3:28:26:7c:f8:
                    a7:01:2d:c8:e9:a0:40:96:c7:a6:ab:c1:3d:dd:af:
                    7b:c4:d6:07:42:43:64:85:f3:49:9a:6b:72:f1:4c:
                    82:97:15:19:a4:5d:c6:45:e7:3e:fc:ef:e2:a9:38:
                    36:c0:23:94:21:c4:60:01:c1:a0:99:52:b4:e8:5d:
                    c7:09:37:23:be:dc:ec:84:12:b3:c9:a5:fe:a7:53:
                    98:55:0f:56:e7:c6:65:ba:12:8b:66:9e:ad:73:3e:
                    79:cb:9c:dd:4d:fc:3f:09:25:db:7b:f0:3d:5e:a6:
                    3e:35:4e:2a:5b:37:1c:dd:8c:ea:7a:16:78:12:29:
                    46:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E9:23:9E:D2:BB:54:B1:AF:67:36:DA:AA:E8:AD:61:EA:62:FF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c74c06b-d5e0-3b6b-88ea-330efbd0f036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a3:b3:3b:b3:6d:56:b5:11:bf:cd:e0:e2:69:50:a2:b8:70:
         93:26:c5:08:98:e7:4b:07:ce:12:f7:a5:f1:a9:b4:91:a8:c9:
         5f:72:62:65:30:d1:eb:91:af:a3:dd:66:8f:96:04:64:8a:74:
         c1:78:ba:ed:66:1a:85:1a:5f:b6:5a:41:0c:b7:cc:96:a3:c6:
         dc:70:5d:6f:a7:bf:0a:e4:c6:9d:be:e5:5e:25:c3:49:6b:c1:
         b2:57:b0:b2:30:c7:c9:e6:a4:fe:5e:bb:f1:45:00:73:a1:7c:
         f2:cf:87:b0:e7:5a:82:c5:c7:a7:dc:57:df:1e:47:e6:f5:4c:
         02:7b:95:f7:da:01:c6:7a:65:2c:9f:d7:ea:7f:76:23:e4:b2:
         14:cb:c9:bb:9d:18:23:a7:23:ba:df:1e:a2:7e:9b:14:1f:12:
         7b:05:6d:65:d2:37:e5:b6:46:8e:d1:0e:63:59:6e:8e:ea:03:
         3c:b0:36:f7:46:ae:7f:24:8a:88:42:03:f3:f4:76:a8:7b:8b:
         91:f8:e5:9a:cd:5f:b3:c8:a0:8f:6e:2b:66:76:d4:06:fd:13:
         3a:39:f8:24:d8:12:dc:29:f4:e5:b0:e3:93:0b:45:11:76:44:
         da:dd:40:72:ba:45:5b:16:30:0e:e2:ec:b2:47:1d:85:d1:8b:
         bc:29:cf:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEApOSRe/VHNKB76G0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTIyMTIwNjEyMDAwMFoXDTMwMDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk
Njc4MTlmOWMtM2NhNi00NzlmLWE0MmItNDczNGJiMzE1YjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS6kAoEJHxWNsGonUV3JefyKCp4gEENK5kZN
yCJ89mcajGVbk+TGwVba6MNgpGD9m5Gn7hC+BpSWE/BUNos2YN88+dAPeRNrwOO2
g4AhfffhqkZ7ZNUyugzD9N/HvjOs/o3kpm7Z0AfFPrKre9R+W1xq4F0cJyz6fo8z
nYrV6WAtoygmfPinAS3I6aBAlsemq8E93a97xNYHQkNkhfNJmmty8UyClxUZpF3G
Rec+/O/iqTg2wCOUIcRgAcGgmVK06F3HCTcjvtzshBKzyaX+p1OYVQ9W58ZluhKL
Zp6tcz55y5zdTfw/CSXbe/A9XqY+NU4qWzcc3YzqehZ4EilGnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCXpI57Su1Sxr2c22qrorWHqYv/CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGM3NGMwNmItZDVlMC0z
YjZiLTg4ZWEtMzMwZWZiZDBmMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ34MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyjszuzbVa1Eb/N4OJpUKK4cJMmxQiY50sHzhL3pfGptJGoyV9yYmUw
0euRr6PdZo+WBGSKdMF4uu1mGoUaX7ZaQQy3zJajxtxwXW+nvwrkxp2+5V4lw0lr
wbJXsLIwx8nmpP5eu/FFAHOhfPLPh7DnWoLFx6fcV98eR+b1TAJ7lffaAcZ6ZSyf
1+p/diPkshTLybudGCOnI7rfHqJ+mxQfEnsFbWXSN+W2Ro7RDmNZbo7qAzywNvdG
rn8kiohCA/P0dqh7i5H45ZrNX7PIoI9uK2Z21Ab9Ezo5+CTYEtwp9OWw45MLRRF2
RNrdQHK6RVsWMA7i7LJHHYXRi7wpzzY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:12 2024 by rpki-client on console-fra.rpki-client.org