Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a1368c8-4c53-37eb-9948-6fc61633a959.roa
File:                     9a1368c8-4c53-37eb-9948-6fc61633a959.roa (raw, json)
Hash identifier:          Fj2kVP3513xL/TM/2LInbX6LvBRNwV+DqIyRKVCrCfk=
Subject key identifier:   11:4C:4D:10:39:68:F0:CC:1F:B8:7B:A4:70:FA:8E:A5:64:07:DA:13
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF086419
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a1368c8-4c53-37eb-9948-6fc61633a959.roa
Signing time:             Sat 13 Jun 2020 18:54:22 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Mon 25 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:08:64:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar 25 04:00:00 2030 GMT
        Subject: CN=731b90ed-d765-46b4-b336-2743f01847c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:95:d2:3f:4f:ce:a5:1b:d1:60:04:ff:24:
                    0d:1f:b2:4f:51:46:c2:a7:39:32:34:eb:ae:d8:a4:
                    7c:b0:e4:e1:48:1e:fe:9c:37:db:ba:f2:e2:25:60:
                    87:55:aa:ad:f4:12:99:75:c4:ae:09:ae:52:2d:a3:
                    b5:d4:c4:69:d5:5c:3d:14:a5:87:97:b7:5a:d8:4d:
                    72:7a:9e:c6:08:76:d1:72:7e:fd:6a:06:82:41:c4:
                    bb:74:2c:f7:63:a9:2f:32:4f:8e:e3:13:b8:be:cf:
                    a8:b3:51:e6:ab:2e:a1:3d:4f:d0:9c:33:d6:91:ef:
                    ae:7d:39:d2:f2:89:14:56:63:5b:5e:99:67:84:e2:
                    d8:22:ee:33:40:11:df:f3:92:25:84:0a:90:6e:bb:
                    59:1e:76:df:eb:23:3d:cb:8d:93:7a:90:80:23:9f:
                    67:d2:07:f5:2d:c8:d7:e9:19:e2:ff:26:8f:42:0c:
                    35:35:20:70:ff:f6:c2:5d:74:9d:9e:cf:14:69:b5:
                    1b:cb:bb:c8:a9:5e:e8:05:32:ba:65:6f:af:28:a2:
                    1c:54:d2:6d:64:00:9b:34:ce:be:f5:09:1f:3f:04:
                    45:76:a3:98:df:df:91:80:63:9c:84:be:9f:06:a8:
                    7f:c9:2f:22:41:d3:0a:d7:5a:88:fa:20:10:ac:db:
                    20:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4C:4D:10:39:68:F0:CC:1F:B8:7B:A4:70:FA:8E:A5:64:07:DA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a1368c8-4c53-37eb-9948-6fc61633a959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:26:84:08:40:1e:8a:25:71:32:ed:a3:d2:b9:dd:1b:51:be:
         45:bc:05:f9:31:15:e4:45:4e:3c:88:3a:6d:88:71:c4:bf:1f:
         83:23:25:31:73:8e:a4:b6:ec:3a:4d:3a:a2:cd:49:2c:83:4d:
         d3:95:ac:47:c1:20:77:f3:13:32:03:88:6e:bf:ef:bd:10:f4:
         c8:25:a8:d6:58:ab:41:73:74:d1:cb:5e:ae:a9:6a:d8:41:15:
         31:b6:87:6c:10:a9:84:7d:c5:34:74:a5:75:5b:7b:24:24:bb:
         93:f5:2d:d9:32:0c:78:73:ab:3a:e6:1f:3b:b6:ca:cf:57:0b:
         4f:a6:36:be:c2:38:b5:a8:39:d8:5a:6f:ad:06:fb:c9:37:87:
         22:ee:9c:07:04:01:47:d9:a5:fe:6a:e6:17:bd:50:8f:72:00:
         bb:6b:73:43:49:e7:0c:b6:31:bf:f4:28:46:aa:2f:65:ff:4c:
         57:54:a9:54:97:cb:51:69:3f:41:61:63:a8:70:29:d6:15:fe:
         5d:96:dc:46:bd:c4:6c:ce:58:84:cf:02:aa:d7:af:12:e8:15:
         88:26:5c:29:07:2b:d2:0f:71:23:b0:4b:d8:4c:e9:7c:c1:a1:
         d9:0f:8e:e2:a4:91:4f:57:66:3d:a0:87:52:40:1a:53:3f:61:
         ec:8b:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:50 2024 by rpki-client on console-fra.rpki-client.org