Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a08ef1a0-dada-3225-8131-b18bb9394d18.roa
File:                     a08ef1a0-dada-3225-8131-b18bb9394d18.roa (raw, json)
Hash identifier:          L18wV9FDZ37jI2PHIJ04hT4MQXL4IKuDVIXlWN0jTGA=
Subject key identifier:   A8:AE:9D:2B:48:A4:16:8D:96:53:65:43:7D:87:F5:2E:EC:F0:C2:BF
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328583DBF5421D7E0FE01A9D9C36C80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a08ef1a0-dada-3225-8131-b18bb9394d18.roa
Signing time:             Fri 29 Apr 2022 12:00:00 +0000
ROA not before:           Fri 29 Apr 2022 12:00:00 +0000
ROA not after:            Tue 26 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.157.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:bf:54:21:d7:e0:fe:01:a9:d9:c3:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 29 12:00:00 2022 GMT
            Not After : Mar 26 04:00:00 2030 GMT
        Subject: CN=90d79eec-1cdb-48be-aaff-8187ace3cdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:e1:96:86:14:3b:32:85:7c:ec:98:c5:30:
                    50:fe:09:f6:c3:3d:fe:fb:63:04:c0:fc:0b:f9:7e:
                    f7:17:99:6e:11:23:9b:92:fa:56:cd:59:fd:df:bc:
                    da:df:00:e8:e0:50:78:64:5f:38:db:66:60:8f:f1:
                    38:31:ec:53:65:31:dc:2d:2d:41:40:37:a3:df:e8:
                    b1:72:a5:13:dd:95:b0:b5:92:ee:fb:2e:9d:c8:cb:
                    ce:0d:7f:76:8d:f9:85:b6:cb:ef:22:14:a7:41:34:
                    08:4b:3f:89:94:63:14:bc:ff:3e:76:84:49:24:0a:
                    7c:07:b2:78:2a:9a:49:8f:5c:48:96:26:06:e1:01:
                    84:50:f4:13:3c:c7:b1:ed:69:26:e6:21:87:52:df:
                    25:b8:52:97:c7:de:d6:1e:a5:56:85:37:f6:8e:da:
                    3f:d8:42:74:e7:20:f7:fe:7e:bb:bc:f7:9b:a2:b3:
                    d9:ab:7b:fa:e8:23:2d:5a:8b:2f:54:96:2b:c3:f3:
                    6b:59:ab:9f:5a:36:d3:bc:6c:9e:e2:b0:29:0a:07:
                    d6:f6:db:3d:22:32:07:6e:4b:c2:e6:dd:3e:c9:6b:
                    18:e1:2c:3e:6d:28:85:12:59:00:95:13:00:3d:a2:
                    b1:c6:60:ea:ec:4f:82:f1:fe:48:09:d7:f4:41:b4:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AE:9D:2B:48:A4:16:8D:96:53:65:43:7D:87:F5:2E:EC:F0:C2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a08ef1a0-dada-3225-8131-b18bb9394d18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:de:10:08:bc:3b:dd:7e:0f:d6:ee:11:58:36:6c:84:4b:c8:
         6e:c1:0a:91:32:73:c0:66:c2:38:37:97:62:f2:5c:a0:67:12:
         65:01:45:42:d0:5b:93:ac:f9:c7:6a:44:c7:4e:a3:0e:75:2d:
         ba:01:b5:14:0e:07:33:16:9d:f0:3d:87:33:15:7e:03:ea:49:
         18:46:a6:df:7b:2e:bc:8a:fc:29:11:74:f8:ae:cb:d5:ea:ea:
         88:09:85:99:5f:3d:3a:63:75:c5:76:27:49:3f:88:11:af:53:
         0c:11:88:af:42:5e:d4:8d:4d:32:57:01:e8:05:e1:fa:b0:ee:
         ea:a5:a9:36:13:0e:c1:46:b7:77:d2:a0:3c:f4:5e:d4:9e:3e:
         82:84:75:df:e8:f5:dc:b9:e8:8b:f8:69:f0:f7:23:51:11:4b:
         45:bd:74:6c:c9:a4:14:e3:4a:6d:49:20:eb:56:19:75:71:50:
         c6:e8:95:bb:98:3c:35:d8:49:87:f0:36:e1:d7:3a:b5:42:40:
         af:59:f7:75:fd:68:72:ca:ce:c7:2e:d3:01:9f:57:e3:00:21:
         2d:bf:5a:d0:89:cf:51:49:76:9c:67:f9:6f:fe:86:d2:6c:e0:
         11:d1:15:0c:18:b0:e2:19:fd:f6:78:8a:ae:4d:b5:07:0e:97:
         91:ca:b0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:50 2024 by rpki-client on console-fra.rpki-client.org