Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9f174c7d-060c-3a7d-a2a0-d12a2e8b1f1c.roa
File:                     9f174c7d-060c-3a7d-a2a0-d12a2e8b1f1c.roa (raw, json)
Hash identifier:          3UYhI8U4UZtJiY98IRN59U2S1MGrvP62OKCvBNVRpRE=
Subject key identifier:   C9:50:A1:52:87:53:BC:A5:DB:BD:76:3E:28:19:87:08:D1:97:47:04
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17324C404A4
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9f174c7d-060c-3a7d-a2a0-d12a2e8b1f1c.roa
Signing time:             Mon 06 Jul 2020 15:34:52 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Sun 10 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:c4:04:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Mar 10 05:00:00 2030 GMT
        Subject: CN=25f9bb28-4bfb-4980-9f7d-a7609576ba0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:4e:c3:02:cb:aa:cb:41:dd:ae:bb:16:96:
                    93:4d:cd:c3:c2:d2:5d:18:82:e6:5b:45:7f:0e:c9:
                    05:74:cc:1c:14:e6:df:a7:97:2f:ad:66:61:7e:68:
                    85:2c:ac:79:fc:8d:c1:d8:f7:68:48:4b:e7:1f:29:
                    1d:04:e5:e0:aa:b1:18:35:46:5f:52:43:d6:7a:dc:
                    27:56:c0:ff:55:fa:d6:f7:df:02:5f:cc:c3:b5:25:
                    24:ad:fa:ac:e1:e5:b2:6a:56:e1:8f:c1:ca:51:cb:
                    46:3e:6e:83:ba:9a:c8:94:52:6f:7e:c2:95:d3:ef:
                    bb:26:28:45:b3:19:6c:13:a1:49:9f:15:55:a2:1a:
                    97:4a:51:d1:e0:fb:bd:ea:9a:fe:08:47:88:57:69:
                    32:f1:82:61:c5:37:9a:a9:c0:b2:00:33:87:87:51:
                    6b:a3:1a:76:6f:19:4e:ad:4d:28:14:80:f8:86:3c:
                    5d:67:ad:39:f3:39:53:5d:a5:89:9e:07:7d:d3:e1:
                    01:21:f2:03:71:73:3b:bb:55:b7:79:41:60:ce:15:
                    18:dd:2f:39:ee:b0:a4:c0:d3:e1:a0:4b:d7:ea:8b:
                    db:c2:7e:9b:1a:0a:c7:8e:a1:f0:6b:5d:86:5e:b5:
                    2f:b9:47:c0:7b:8d:48:5a:d5:a1:e9:0e:85:56:1f:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:50:A1:52:87:53:BC:A5:DB:BD:76:3E:28:19:87:08:D1:97:47:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9f174c7d-060c-3a7d-a2a0-d12a2e8b1f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:0d:80:34:09:49:00:56:fb:95:4d:0a:67:97:69:44:5c:
         e4:51:f8:05:65:4e:83:d5:19:06:99:d1:fb:28:3a:3c:d3:09:
         75:54:1b:14:4c:77:ba:e4:c9:7c:ab:33:f8:05:8f:5c:d5:5a:
         94:99:c8:01:8b:be:61:d6:00:b2:d9:fd:83:22:e3:77:57:51:
         e6:7f:ec:aa:79:84:e4:55:0a:e6:ae:f5:96:a7:37:bb:a3:bf:
         3b:a8:6c:de:bc:98:53:df:15:78:f6:e3:96:87:79:2b:ad:67:
         46:20:f3:c9:09:38:a6:3d:05:e7:d0:a8:1b:18:70:0e:94:49:
         29:14:87:35:2e:f9:9e:d6:a5:b3:1d:5f:a8:56:be:1c:8c:1d:
         b9:26:ca:12:06:9d:41:e4:cc:52:47:e4:78:6b:b7:4d:d9:ef:
         ad:64:67:a7:c7:81:0c:4e:9d:6b:38:85:6d:df:79:d0:eb:44:
         2b:62:fd:f1:96:c0:67:5e:c8:fa:b2:3b:65:e1:95:ae:29:9f:
         40:0d:a8:17:28:64:bd:7f:cf:9d:3f:61:c3:e2:c8:5f:82:2e:
         25:57:f9:03:2e:5d:a3:f3:55:de:72:54:79:85:9f:99:33:b7:
         f6:e2:84:14:c2:db:ef:af:43:d5:51:eb:e3:0f:ae:49:1b:a2:
         7b:76:be:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:50 2024 by rpki-client on console-fra.rpki-client.org