Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c2f241f2-95cc-3485-b15c-49c68315a9ed.roa
File:                     c2f241f2-95cc-3485-b15c-49c68315a9ed.roa (raw, json)
Hash identifier:          aYSJwDOFJC+G4Mlh6wpWbapMWXtLZHPSCp1EM08eiCQ=
Subject key identifier:   B4:9A:A2:A3:0B:68:57:72:15:F6:0D:6B:E4:1B:D6:BF:1C:D7:87:3D
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0B1A24
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c2f241f2-95cc-3485-b15c-49c68315a9ed.roa
Signing time:             Sat 13 Jun 2020 18:57:19 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Mon 04 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0b:1a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar  4 05:00:00 2030 GMT
        Subject: CN=b85015e6-1b48-4ce3-91c1-8bfa63eaac65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:aa:0a:1c:fd:ac:8a:c4:3f:31:d6:f7:2a:
                    6a:84:87:41:67:e8:5b:8e:8e:d4:08:f5:ab:ec:a1:
                    c1:1c:d6:35:e5:3b:41:a1:fe:a1:e8:fb:1b:c5:79:
                    79:75:25:d2:fe:75:6a:41:43:18:33:7c:ab:c8:bb:
                    e8:4b:fd:7c:3c:24:57:e2:5f:c9:91:df:13:f2:27:
                    2d:4f:e6:8b:32:bc:0f:c0:6c:9b:ab:38:09:90:5b:
                    75:38:32:e9:f1:0d:4a:27:df:06:cb:c9:3c:ac:38:
                    7c:16:38:00:e1:d7:38:30:69:21:23:11:22:b6:27:
                    59:1e:89:59:23:d9:33:de:eb:61:d9:74:63:2c:94:
                    14:18:da:3b:87:3b:93:23:d1:ba:ec:1e:20:51:fb:
                    c7:28:82:65:b9:ed:8e:7a:4c:a8:67:f9:43:a4:80:
                    29:ac:f6:06:09:b8:36:84:a9:e4:49:ca:55:91:f0:
                    99:6f:9f:8d:06:d2:45:30:06:ac:16:96:87:48:d4:
                    31:0b:b9:9b:62:eb:6a:75:dc:11:7c:79:2b:6f:3b:
                    37:50:7e:93:6d:e3:e6:8d:4b:b0:88:e7:0f:de:e8:
                    f9:29:f0:e9:24:22:ba:93:75:5b:13:cc:94:5d:a0:
                    d3:4d:8d:51:42:79:2e:c1:e5:51:61:33:1e:04:5f:
                    00:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9A:A2:A3:0B:68:57:72:15:F6:0D:6B:E4:1B:D6:BF:1C:D7:87:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c2f241f2-95cc-3485-b15c-49c68315a9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:3b:fb:c2:6c:ee:4d:8c:2d:b0:98:0c:5e:79:45:bb:68:18:
         ab:bc:63:17:d7:0b:48:a4:f3:5d:cb:49:3a:96:b2:4f:1d:b1:
         90:b4:cb:97:c4:de:ae:c4:cc:fa:7c:ce:df:45:36:c1:14:10:
         c8:19:20:e1:a1:65:4f:a8:59:4e:c0:45:8b:37:9e:1e:b2:20:
         b4:9a:04:e9:0d:bc:de:ad:c1:6a:bf:9f:4c:27:eb:72:56:1a:
         c4:9e:e5:e4:80:5a:ac:44:10:c6:c4:a9:d4:11:2f:85:b3:d1:
         31:92:4b:ae:91:62:2c:45:09:15:b4:bb:e7:b8:ee:f8:88:b9:
         d3:89:3a:76:11:48:e7:d5:2d:ea:da:0f:9d:63:01:29:22:4d:
         c8:34:bb:6b:d8:c6:99:6c:74:bb:7b:e9:70:dd:b0:52:a0:c8:
         bc:38:14:9a:7f:7b:28:60:bd:54:db:25:2b:fe:b7:9c:71:ee:
         d1:c1:b8:fd:8e:a1:37:8b:c0:76:ef:7f:11:c1:6e:84:75:3a:
         24:dd:5c:9e:ed:93:5b:84:a0:5a:7d:30:28:24:1d:af:cf:14:
         e1:1b:32:ce:f8:7a:48:f6:33:1f:95:c3:09:23:33:cc:f7:96:
         5e:7c:80:8b:d7:ac:13:0b:7e:3e:d9:08:c1:1b:0a:47:b3:72:
         d6:2b:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:07 2024 by rpki-client on console-ams.rpki-client.org