Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/92133d82-152b-3039-a6bd-a275dc5a8c29.roa
File:                     92133d82-152b-3039-a6bd-a275dc5a8c29.roa (raw, json)
Hash identifier:          SgACI+PV6rHOTUxlu8etEffyJ5O5iQ5dmrWEOQr1IzQ=
Subject key identifier:   B2:A5:DC:17:03:14:A3:FE:51:BB:BA:30:37:F7:E5:EC:0D:4E:23:0A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17324D35374
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/92133d82-152b-3039-a6bd-a275dc5a8c29.roa
Signing time:             Mon 06 Jul 2020 15:51:36 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Wed 27 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:d3:53:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Mar 27 04:00:00 2030 GMT
        Subject: CN=17f4f3a5-9199-4a96-9593-0552d3928fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:0d:1b:d5:2a:c5:89:39:a0:68:b5:5e:be:
                    25:cf:bb:a4:ed:44:5b:61:da:06:66:03:42:69:3c:
                    bc:20:a8:41:98:4b:ec:05:a3:09:d6:b9:e7:24:2e:
                    20:3f:4d:ef:e2:41:71:f7:5f:a1:ec:4f:11:68:9b:
                    d5:c8:1b:dc:d3:31:fa:e9:5c:03:86:e8:9f:4c:2e:
                    38:24:16:4c:15:34:c0:f2:1b:43:2e:38:4c:32:4f:
                    0f:fc:b8:6d:45:e0:9b:43:cc:3f:93:3a:1c:d5:9e:
                    f1:28:57:4b:7c:eb:22:b6:bd:88:7b:d2:c9:65:a8:
                    ec:a2:03:2d:52:c9:f7:df:7f:c5:30:1c:a8:22:3c:
                    94:d1:b7:d6:1d:2d:23:bc:a5:ca:db:12:ba:b6:07:
                    bd:c6:ee:fc:e2:7b:47:97:92:b8:cd:d7:40:60:d9:
                    4b:18:93:a9:6f:12:de:b5:4d:d5:e6:f4:85:8f:17:
                    ef:39:cc:31:ce:ce:46:67:c3:f9:ab:94:60:0f:a6:
                    41:d0:ea:8a:fe:70:30:2e:c6:21:b3:30:44:2f:1a:
                    9b:e7:f1:be:ae:42:a0:59:c2:9f:be:0a:f4:cd:5e:
                    24:98:bc:4e:4c:a9:2b:94:aa:cb:d7:16:f0:29:07:
                    16:4f:6c:90:4c:e9:ee:2c:2e:ad:be:83:b8:24:66:
                    f4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A5:DC:17:03:14:A3:FE:51:BB:BA:30:37:F7:E5:EC:0D:4E:23:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/92133d82-152b-3039-a6bd-a275dc5a8c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e7:96:d4:71:14:dc:24:54:fc:bc:d9:22:98:b8:7c:79:94:
         ce:03:92:0e:70:56:3d:88:4f:f9:a9:ad:20:c6:f7:7b:c2:00:
         94:f0:e0:c0:cb:ff:db:b6:5e:28:2b:0e:19:ce:85:81:cb:ea:
         36:78:cb:fa:18:4e:45:1a:dc:7e:a7:81:f6:d5:53:19:98:e0:
         a7:33:d6:1b:3f:de:dc:fe:c9:52:c7:d2:75:a5:38:a8:8f:2b:
         89:16:91:4d:bb:1f:c6:b2:d0:d5:5d:64:be:f4:93:5c:11:6b:
         f7:ad:f8:e3:74:7b:59:ce:83:27:cc:4b:10:bb:b4:7c:8c:71:
         a6:3e:d9:bc:67:e6:9d:f5:8b:19:11:0b:66:9d:de:51:9c:48:
         53:a2:6d:0a:92:aa:f6:2c:85:96:2b:44:9f:6e:2b:ee:c4:51:
         17:98:70:8e:57:a5:4d:b9:50:4d:fc:1b:e0:e1:9f:1f:f9:db:
         7e:71:03:52:d7:9e:e9:66:42:8e:21:e9:24:36:96:76:45:1e:
         c4:18:da:6c:42:71:8f:40:d6:3e:1e:de:78:06:ae:a3:06:78:
         4f:9e:d4:6e:18:13:46:a2:29:9e:e1:b1:88:8c:8d:ac:85:4a:
         66:fb:38:74:d3:b8:0f:10:7c:5d:3f:5a:cb:43:1c:21:96:cf:
         80:6b:cd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:24 2024 by rpki-client on console-ams.rpki-client.org