Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea66c79d-55be-3d21-a5d8-fd6353bd0ec7.roa
File:                     ea66c79d-55be-3d21-a5d8-fd6353bd0ec7.roa (raw, json)
Hash identifier:          EeOZz05Ro5c7ORNccknkRAvxv3iwTs15fas+mgyCWkQ=
Subject key identifier:   D0:D5:A9:A5:D0:B1:18:50:18:2A:C8:57:B0:B8:F7:E0:C6:03:DC:BD
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732F621D2D
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea66c79d-55be-3d21-a5d8-fd6353bd0ec7.roa
Signing time:             Wed 08 Jul 2020 17:03:45 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Mon 04 Mar 2030 05:00:00 +0000
asID:                     8075
IP address blocks:        20.37.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:62:1d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Mar  4 05:00:00 2030 GMT
        Subject: CN=a0048de5-5492-4627-b413-d13c89a6db9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:aa:76:5c:01:35:32:5c:9b:62:75:59:e4:
                    57:18:a2:33:8e:a1:5c:de:7c:4d:4e:05:0c:31:ff:
                    24:86:cc:4f:21:45:a9:1f:a0:50:61:cc:ee:a7:0f:
                    1c:68:4f:81:02:05:aa:38:a4:5a:27:04:6c:1e:42:
                    12:15:23:ee:59:d6:71:9d:22:5b:eb:25:f6:09:f7:
                    cf:8b:8d:07:4e:f1:ad:de:85:a5:2d:f3:3a:c1:b5:
                    fe:b0:9b:04:c1:6c:b5:9a:5c:14:50:0b:86:f1:ce:
                    8b:f5:21:40:34:12:ad:94:d4:21:7f:4d:f3:94:98:
                    d8:12:99:6c:d6:88:de:e3:90:fb:92:1d:0c:0e:4e:
                    c5:45:51:2d:65:f3:25:9f:c6:67:3f:04:cf:cd:c8:
                    12:7c:15:44:70:c4:cd:0c:94:d5:68:27:b3:0b:2d:
                    4d:77:b8:9e:bb:0b:24:16:75:a3:64:92:2e:28:64:
                    d8:fc:4e:c8:9e:b1:08:3c:a7:86:52:ec:12:e7:d5:
                    fa:69:6a:61:ed:50:71:0a:24:5f:f0:2a:18:e8:f2:
                    79:87:45:4f:61:ea:a3:69:43:0e:d4:30:bc:86:41:
                    bb:af:c9:5e:9f:b2:20:6a:f2:58:71:0f:3c:64:e2:
                    cf:b1:f4:c9:70:eb:b6:8b:8d:a2:dc:ab:95:bf:da:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D5:A9:A5:D0:B1:18:50:18:2A:C8:57:B0:B8:F7:E0:C6:03:DC:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea66c79d-55be-3d21-a5d8-fd6353bd0ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.37.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:80:a5:86:3c:e2:00:ed:a2:8a:a4:c4:5f:67:ee:dd:e3:
         17:d4:fe:b7:b3:59:6a:67:5d:f5:1e:38:6c:c9:cf:c0:db:c6:
         b2:96:b4:95:09:e2:9c:a7:ae:12:ee:91:b6:f3:26:65:87:58:
         fe:f4:d8:80:13:e0:ea:45:c9:a2:e8:9b:25:38:ee:cc:b0:96:
         05:dc:38:0b:66:ff:9a:ff:c1:26:b6:6d:44:31:bb:fb:cd:17:
         27:7c:a5:cb:b8:56:13:60:e7:60:a4:14:9e:4e:32:62:2e:0f:
         3d:30:68:ef:b4:fd:a4:ef:51:8b:11:da:67:47:59:c5:d9:9b:
         6a:cc:c9:56:66:0e:43:e9:79:de:0e:20:b0:df:9e:1c:5d:c0:
         01:50:cc:dc:36:66:f5:17:7d:42:46:db:28:70:4a:4c:48:cb:
         73:b2:a0:d7:fc:ee:41:2f:2e:08:98:d6:19:a1:f5:e5:67:3c:
         bd:b9:f9:7d:f8:0b:2e:a3:74:32:9e:13:1b:c9:b5:ea:ef:2f:
         42:18:8f:b2:d5:c5:1c:b2:3f:3a:34:34:a7:5a:e0:91:52:83:
         f5:d5:3b:f0:31:6f:c0:67:6c:20:c0:2d:5b:05:e4:cf:a1:04:
         09:a5:9d:ed:a2:f6:44:db:38:ad:0f:8b:43:10:5a:55:10:9b:
         f3:cc:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:23:13 2024 by rpki-client on console-fra.rpki-client.org