Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d61fe435-c879-35d5-8bc4-55fa7e31cd5e.roa
File:                     d61fe435-c879-35d5-8bc4-55fa7e31cd5e.roa (raw, json)
Hash identifier:          bivwMWfSzf1qoEILvt+0LHW59GKsWvnAb7ObWPHrEog=
Subject key identifier:   D4:F9:4A:FD:E7:A3:57:FF:94:FB:0D:92:8A:F9:64:26:F1:2F:98:67
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17324C3F753
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d61fe435-c879-35d5-8bc4-55fa7e31cd5e.roa
Signing time:             Mon 06 Jul 2020 15:34:49 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Sun 17 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:24:c3:f7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Mar 17 04:00:00 2030 GMT
        Subject: CN=0867df52-3435-4a59-9af5-c88da0423a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:41:c1:6a:5a:b6:87:70:bf:95:9e:3c:52:
                    07:bf:bc:a1:31:53:ca:77:ab:cc:74:16:41:d4:08:
                    5f:e2:82:25:cb:c5:e1:05:eb:20:e9:39:4b:f7:fd:
                    e0:ea:f3:99:e9:bf:d4:8f:ed:6b:e7:c1:a3:6d:91:
                    03:a1:14:70:49:4a:d8:90:80:19:59:3c:e3:b7:a0:
                    c5:93:fb:25:60:e6:53:5c:cf:da:e6:1e:0b:67:11:
                    91:bc:c7:3c:25:e0:a6:7b:94:07:7f:67:e0:17:df:
                    a3:72:1d:cf:12:3c:05:71:4c:83:e0:0a:ec:fd:c5:
                    e7:10:84:a7:bb:b7:2a:7e:6f:47:17:3b:30:4b:f9:
                    b5:38:ac:9f:7b:81:e4:92:76:db:2d:ad:d4:fb:80:
                    f6:4f:de:8d:e2:04:6e:a4:c7:c9:f6:bb:23:50:fa:
                    33:65:97:ae:8a:1e:57:8d:55:c0:42:db:58:25:ae:
                    8a:a3:2a:85:ff:1c:0f:0e:66:2d:b6:a5:5f:a0:d9:
                    ab:ae:43:98:3e:55:d1:d8:fb:8d:54:4c:2b:11:1b:
                    91:23:fc:89:97:91:f1:28:62:e3:31:2f:ed:86:69:
                    36:bd:47:6e:54:13:4f:65:da:d4:da:a8:06:70:3c:
                    eb:7f:31:ec:11:df:57:69:95:b2:d0:b7:d8:c1:39:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F9:4A:FD:E7:A3:57:FF:94:FB:0D:92:8A:F9:64:26:F1:2F:98:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d61fe435-c879-35d5-8bc4-55fa7e31cd5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:58:18:dc:b2:05:31:8d:f0:d7:43:7b:1d:63:bc:cc:3c:0b:
         ff:e5:14:ed:b1:b4:d1:fc:fa:df:60:63:29:c5:37:af:dd:93:
         7d:e7:9c:42:44:44:38:2e:e1:54:89:ad:f1:32:48:16:ae:55:
         92:4e:37:37:c6:22:9b:db:02:68:9c:13:91:d7:ad:6e:da:30:
         44:e0:b1:97:1f:2f:b3:84:5e:de:f9:57:db:00:b6:78:53:70:
         13:9a:99:8e:51:54:71:16:75:d9:23:cd:ca:07:b1:c5:c7:2e:
         6c:8f:90:7e:c4:37:26:60:1a:98:65:ff:03:c1:59:3e:dd:1b:
         19:71:ea:f5:3a:a3:67:8b:15:41:2c:84:ec:44:60:96:01:10:
         55:de:55:0a:5f:1a:f4:17:84:61:90:0c:0d:97:15:a7:fe:9d:
         d1:60:0c:1d:a1:4f:54:07:68:ed:de:19:ae:2e:7e:b5:20:b1:
         ed:ea:56:07:1b:1d:30:24:f2:7c:63:74:67:a3:1f:93:75:bd:
         c3:7f:e0:0c:38:35:a7:25:88:c0:7b:70:78:6e:e3:df:6b:f9:
         5d:13:01:68:3d:14:7a:57:4f:ad:63:46:3e:77:52:0d:e9:6e:
         2f:15:ff:15:73:66:d5:c5:ff:a5:3e:cb:27:0d:5e:69:46:8f:
         ec:7a:27:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:24 2024 by rpki-client on console-ams.rpki-client.org