Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9c5dec61-0445-388e-9353-0564fda03bc2.roa
File:                     9c5dec61-0445-388e-9353-0564fda03bc2.roa (raw, json)
Hash identifier:          dEkk2DFS1wemZmjepIBcpGgYrTP/eKVML57HYNwhAYE=
Subject key identifier:   7E:19:B3:93:FF:72:69:12:9D:71:85:F2:73:4C:12:2C:70:5F:F4:4C
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732A0B58D5
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9c5dec61-0445-388e-9353-0564fda03bc2.roa
Signing time:             Tue 07 Jul 2020 16:10:53 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Thu 21 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        20.192.0.0/10 maxlen: 10

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:0b:58:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Mar 21 04:00:00 2030 GMT
        Subject: CN=42a9e466-35f2-4988-b042-a2f7ff5ca197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:c9:35:bd:05:b3:36:82:29:84:08:0b:e1:
                    ee:7d:d7:f9:7d:f9:64:45:ac:5d:84:27:f3:b2:f8:
                    aa:6e:c5:92:a3:ee:56:23:a3:23:19:43:ef:c8:01:
                    27:99:ae:f4:ce:5d:5e:1b:63:9c:83:b7:1d:1f:fc:
                    f6:36:17:63:cc:c0:3b:c7:65:c5:d3:b8:f7:ca:77:
                    10:a7:48:22:08:74:49:56:0b:09:d8:31:33:ff:e1:
                    d3:7b:c9:5e:20:07:74:56:d6:6b:e1:65:9d:9d:b2:
                    50:ce:1d:a9:70:54:4b:1b:7c:00:80:1b:0d:ab:22:
                    f5:92:94:cc:70:14:40:f7:32:96:a4:e7:43:9d:10:
                    54:e4:44:5c:85:32:41:33:da:e8:cd:fa:9f:f9:b7:
                    71:ce:fb:4e:1e:da:10:c1:56:e5:bd:14:7b:93:b9:
                    b9:89:2a:50:1e:18:0c:dd:45:23:fa:3b:a7:f4:7e:
                    5a:cd:d2:fe:4b:ef:9d:56:f8:c6:da:f7:f7:b6:d3:
                    bd:f7:5c:aa:c0:51:dd:52:2c:cf:d7:1e:5f:3c:8f:
                    4d:62:f5:a5:e4:be:ab:8f:bf:78:da:8d:7e:f2:fa:
                    2c:ae:13:f0:26:87:3c:69:e8:78:86:25:0a:63:b5:
                    77:93:de:11:11:38:26:84:90:0e:0d:5f:4e:25:d5:
                    ee:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:19:B3:93:FF:72:69:12:9D:71:85:F2:73:4C:12:2C:70:5F:F4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9c5dec61-0445-388e-9353-0564fda03bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.192.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:cc:b8:85:ae:2c:8b:5c:60:45:12:08:f9:51:aa:dc:23:
         85:46:fe:e8:3d:80:c3:63:bc:79:59:91:b7:50:d5:cf:66:c4:
         a5:60:37:41:c6:3b:c2:e1:e5:09:d7:da:2f:c6:bc:3d:6b:f8:
         ea:f3:2b:3f:d6:9c:54:ac:56:02:06:f6:b6:d8:98:e5:fa:c8:
         ce:d7:ba:21:2c:5c:be:d7:05:82:b8:1e:31:8a:d1:39:f8:91:
         70:22:7c:27:4a:5e:79:a9:9a:f3:5f:4a:f1:fb:b8:38:29:40:
         d2:ab:e1:7b:f8:47:ef:c4:5e:db:8c:98:3b:ad:31:2e:99:aa:
         9a:be:a7:ef:5d:ed:f5:c1:e0:66:70:85:88:44:8c:cd:f9:62:
         c4:7a:55:ed:f4:63:ec:38:21:10:ae:28:a2:f3:c9:fb:71:72:
         52:49:6c:9b:cd:e4:10:80:e2:b2:a7:9c:e8:d9:3c:23:7f:87:
         d3:a4:1c:9e:b6:b5:ef:64:ce:27:d1:9d:99:c9:b7:10:bd:f5:
         45:6b:23:e0:21:1c:71:17:db:1c:8c:ab:45:ad:fd:81:1e:5d:
         0b:5f:22:0a:a6:6d:f1:2c:3a:d4:78:5e:67:42:b9:fc:0f:df:
         b1:88:9b:0c:a9:87:3c:7b:5a:61:22:22:7b:d9:50:26:6a:ec:
         ac:36:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:12 2024 by rpki-client on console-fra.rpki-client.org