Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dab934c0-ce20-3a4d-af1f-b4178e3a1e61.roa
File:                     dab934c0-ce20-3a4d-af1f-b4178e3a1e61.roa (raw, json)
Hash identifier:          ZZsVURwwwVsLSPklblUiy1DATI2XFdalet+gaH1jbUo=
Subject key identifier:   F9:56:4C:71:CD:32:C5:3B:FB:4B:BC:43:FD:ED:86:93:18:94:65:7F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0D4008
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dab934c0-ce20-3a4d-af1f-b4178e3a1e61.roa
Signing time:             Sat 13 Jun 2020 18:59:40 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Sat 09 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0d:40:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar  9 05:00:00 2030 GMT
        Subject: CN=990df6f0-746a-4642-b50c-2db79a9f1e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:48:31:e3:72:a6:7f:87:04:58:d3:45:6b:
                    4b:7e:1d:f0:62:47:15:03:ec:29:5d:8e:5f:89:62:
                    51:1d:9f:a1:30:f2:62:48:5e:c3:e6:aa:31:5a:99:
                    63:f5:62:0a:b0:94:3d:cc:40:04:51:ef:30:62:8c:
                    6d:ca:95:64:ee:5c:77:cc:66:ae:b9:07:a9:0e:41:
                    5e:10:aa:fd:84:54:00:e2:8b:ca:6b:63:a3:26:69:
                    a3:b5:04:e9:76:d6:b6:51:a7:3a:25:d4:93:eb:42:
                    5e:db:fe:ff:97:30:20:b8:8b:18:28:6d:9c:ae:f2:
                    41:28:2f:40:6d:8d:b4:10:be:22:4d:02:93:fc:11:
                    fe:ba:0f:89:13:0b:f8:26:e7:e1:d4:e1:82:a4:b2:
                    e4:7a:30:16:25:b9:a8:80:ee:25:36:c7:b3:81:06:
                    eb:ee:4a:41:c0:0d:39:12:db:ba:ad:31:60:83:6b:
                    68:5c:d0:86:d8:b0:c4:96:19:3a:41:09:f9:a3:d4:
                    d3:b0:99:15:ce:47:1d:76:95:24:f2:db:19:36:fd:
                    d3:46:bb:22:14:6f:7b:25:81:f9:e9:36:cc:7c:92:
                    7d:1c:e7:34:af:4b:54:f6:da:cd:cb:32:27:92:d4:
                    2a:36:3e:4a:23:b8:d6:13:fd:88:6f:16:2b:a9:e6:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:56:4C:71:CD:32:C5:3B:FB:4B:BC:43:FD:ED:86:93:18:94:65:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dab934c0-ce20-3a4d-af1f-b4178e3a1e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5b:85:ec:75:4a:37:4c:91:52:49:05:dd:41:00:ae:96:8f:
         1e:3f:3b:12:44:25:88:f0:fb:0f:32:22:f1:51:2e:8d:fb:33:
         e5:ad:1d:77:63:db:8b:a9:20:40:c0:fa:44:21:e9:2d:9a:ad:
         a8:f1:fc:f5:54:ea:22:f6:9f:e9:2c:bd:9b:4e:46:d6:46:67:
         bf:e8:df:47:56:a0:4d:ac:1e:a3:63:a8:4c:8a:fa:94:10:26:
         50:d9:63:b8:a7:03:8d:fa:e6:14:72:00:90:dc:3a:ff:64:1f:
         4e:2e:58:39:d2:01:a5:4f:52:fa:2c:8d:2a:33:2e:bc:48:af:
         a8:8d:ae:1b:a7:15:8d:b2:f6:48:17:51:ec:cc:b9:3f:65:f8:
         4f:55:99:c6:e5:90:b8:d6:81:7b:36:82:9e:b5:56:cd:ad:13:
         8d:81:75:52:7d:5b:26:20:d6:db:7c:90:83:8f:fe:f4:56:23:
         81:f3:f9:d0:ec:18:6e:3d:17:5b:c0:55:64:aa:dc:f4:d1:58:
         cc:56:5c:63:33:b3:3a:70:05:f6:24:56:f7:ae:10:99:52:98:
         ab:7c:8f:55:0b:53:d4:53:60:13:2d:cf:a0:58:f2:06:ec:3d:
         64:9c:8e:59:4a:2a:1d:56:e0:5b:d9:86:6a:57:88:1c:9f:b6:
         35:2f:ba:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:13 2024 by rpki-client on console-fra.rpki-client.org