Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa
File:                     8dea440f-3599-3031-bd25-4f82936b64f4.roa (raw, json)
Hash identifier:          yI446aSoy8DuHJq853LSLY6YsZoWYpUnVv8xqcvmbXw=
Subject key identifier:   14:E7:9A:5B:D2:A8:B4:A8:2A:5A:53:FD:5A:4D:EA:5F:C3:AE:C7:A8
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584776610AF211CA3BE9CDD13B00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     8069
IP address blocks:        20.157.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:0a:f2:11:ca:3b:e9:cd:d1:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=d9db481b-fc78-41e8-a19c-196d3171a764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d8:3f:66:3d:4c:f4:fe:41:7b:e5:bb:7b:a1:
                    3e:9d:78:39:47:59:98:43:5c:3f:2e:30:8b:f5:4c:
                    37:c7:31:3a:25:a3:4e:76:47:28:89:ba:48:26:0a:
                    2a:e3:f2:80:30:2b:0f:34:b7:56:b0:f0:db:a8:6a:
                    ad:66:45:c3:bc:c6:9a:74:e8:1d:fb:36:f5:ee:7a:
                    be:21:89:1b:63:4b:e7:87:84:72:d0:f9:e3:bf:ba:
                    39:b0:4c:81:0b:ab:7d:ab:d6:a3:9f:a4:c3:30:c7:
                    83:dc:98:3a:e7:57:6b:e1:c4:e4:03:21:78:87:5e:
                    76:e0:52:25:2b:1c:61:00:36:0f:e8:1d:bd:c6:04:
                    21:1d:a9:d9:b6:b1:03:96:bb:b1:2c:92:ad:a9:48:
                    bb:6a:17:34:6a:f6:10:03:38:a2:2c:7c:3f:03:fd:
                    8c:8c:da:45:2a:60:45:a5:70:0b:f8:57:81:24:29:
                    8c:d4:ba:15:e0:22:cc:ac:7b:d9:8d:01:3b:d3:7e:
                    ad:d9:72:a6:54:94:0a:c3:d6:d3:f7:82:8d:13:ed:
                    e1:12:bc:0f:28:a3:6a:10:88:b8:0d:66:bf:de:0b:
                    bc:b7:41:24:7c:24:b1:63:5b:2b:15:6a:14:0e:29:
                    f4:a9:31:9e:6b:ef:39:71:72:dd:2c:78:35:66:0f:
                    1d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E7:9A:5B:D2:A8:B4:A8:2A:5A:53:FD:5A:4D:EA:5F:C3:AE:C7:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:86:64:6b:87:ff:85:95:1e:f1:14:2d:08:37:d3:2c:e9:32:
         10:38:cf:d3:41:33:57:3d:a0:a0:51:34:6a:e8:7d:75:0d:cb:
         11:38:f2:2d:4c:c7:a3:11:db:cb:db:2d:75:74:3d:de:d7:6d:
         ec:f0:c7:98:49:6a:72:b7:66:4d:59:e2:ee:e5:bc:95:e3:5b:
         d0:93:c6:18:81:5c:a2:cb:59:11:57:e2:9d:86:2c:52:07:9b:
         7b:c3:ab:16:95:e5:15:df:b4:e5:f0:39:8d:9a:46:ca:fa:c0:
         41:1c:10:a9:b9:31:02:a8:0c:d5:81:e0:61:59:fb:b8:3a:cf:
         28:dd:7f:66:06:f8:65:42:11:07:86:0d:07:b7:04:cf:5b:d2:
         e6:85:08:50:62:a4:2c:a3:50:8f:bc:14:de:6b:f0:89:83:9a:
         96:f2:17:e7:5f:b9:e5:44:fc:ad:c0:93:31:87:4f:25:ef:63:
         3e:0b:a8:34:d0:03:ee:4a:d0:22:6d:89:2e:0e:58:83:9f:10:
         14:73:d7:eb:05:60:72:6b:fd:5f:ad:45:0c:62:27:dd:96:c4:
         2e:7c:3b:3c:9c:e5:4f:d8:9f:4b:c7:5d:bb:96:80:f0:e7:3d:
         52:de:35:30:40:58:6f:ef:7b:67:c2:df:ba:ae:c8:2f:bb:7f:
         42:bc:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:24 2024 by rpki-client on console-ams.rpki-client.org