Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5ac214e9-136c-37f1-bc5f-a2e3b9363e60.roa
File:                     5ac214e9-136c-37f1-bc5f-a2e3b9363e60.roa (raw, json)
Hash identifier:          YHqyN0tpAWY4PGNKmrhdJn4XpClgNdBe5phsfNaEilo=
Subject key identifier:   CA:63:7F:A8:82:70:2C:71:3A:6C:41:9C:E9:B2:86:12:E1:B1:74:32
Certificate issuer:       /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Certificate serial:       010D0C9F43285845F253D7CFC5C78DFD7801C500
Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5ac214e9-136c-37f1-bc5f-a2e3b9363e60.roa
Signing time:             Tue 21 May 2024 13:00:34 +0000
ROA not before:           Tue 21 May 2024 13:00:34 +0000
ROA not after:            Mon 19 Aug 2024 13:00:34 +0000
asID:                     400136
IP address blocks:        24.149.32.0/24 maxlen: 24
                          24.149.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:53:d7:cf:c5:c7:8d:fd:78:01:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
        Validity
            Not Before: May 21 13:00:34 2024 GMT
            Not After : Aug 19 13:00:34 2024 GMT
        Subject: CN=6937b0cf-b6d9-455d-8d58-568f787da714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:d0:8f:e9:88:86:86:44:af:a3:9a:4d:6e:
                    fe:08:70:02:70:52:57:96:03:d4:2a:7d:c5:1b:ae:
                    be:45:0f:d1:69:01:72:14:7c:56:7a:64:2c:96:11:
                    97:39:08:a4:7c:c2:61:b8:e3:14:74:94:a4:33:e9:
                    c7:3b:27:da:45:81:56:ff:5c:98:2d:05:4d:86:3e:
                    24:47:69:da:87:31:35:a0:77:58:27:83:0f:b7:80:
                    4e:4d:2b:b0:35:64:3d:ff:f6:b3:0c:c2:73:6f:72:
                    b7:e9:ce:a2:61:50:7e:9e:1e:71:9a:f6:15:5d:fa:
                    00:57:a3:48:ac:47:bf:b7:1f:30:f4:e5:c2:01:a5:
                    23:51:3c:34:75:9d:6c:93:50:f7:33:61:c0:d5:7e:
                    56:7e:24:33:13:e2:b1:14:02:46:84:82:81:97:af:
                    b7:fa:28:00:8d:98:56:a6:2d:0e:3f:8f:fc:e1:f4:
                    04:92:57:5a:86:a8:7b:36:3e:b3:4a:71:c2:89:70:
                    49:8a:15:92:9c:71:3b:c9:da:d0:f1:23:16:77:46:
                    4a:31:95:5b:17:b3:2e:c3:af:a9:e4:88:a4:be:86:
                    12:e0:a9:7f:bb:51:8f:10:e0:d8:f2:e3:ea:fe:4b:
                    a6:96:57:4e:f1:22:e6:26:eb:64:d5:53:77:5f:5d:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:63:7F:A8:82:70:2C:71:3A:6C:41:9C:E9:B2:86:12:E1:B1:74:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5ac214e9-136c-37f1-bc5f-a2e3b9363e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl

            X509v3 Authority Key Identifier:
                keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:21:1e:e9:6a:71:33:94:87:03:6f:49:d9:b0:b1:e1:bd:c5:
         11:19:1c:32:85:2f:bc:92:53:1f:f2:3f:70:35:6b:b9:08:58:
         a0:e1:2a:38:dc:97:f3:a8:3f:e5:8a:c9:41:d6:a2:b8:5d:10:
         fa:7e:08:23:bd:75:bb:77:7a:e9:e0:cf:08:d5:5c:8a:25:74:
         99:a7:53:d0:5d:ac:f9:90:2e:fc:70:7b:22:67:41:97:74:8b:
         e6:12:5a:a5:33:44:0b:f1:9f:7f:93:b2:07:f3:58:99:b1:82:
         9b:bd:83:5d:4e:82:6c:03:ce:07:af:06:7d:0d:ff:37:73:b4:
         c5:d0:e1:bd:ec:ef:d9:6b:3d:c5:7d:2e:1a:77:e1:d8:35:3b:
         b6:5b:64:6c:43:38:9a:d1:ee:13:53:37:d0:99:df:9c:30:95:
         28:5a:56:47:be:31:0d:c4:5c:84:63:c8:fc:ff:1d:b1:1a:1d:
         d2:ef:37:3e:32:78:df:2e:52:76:fd:e3:e3:f5:72:78:fd:21:
         04:8a:6b:a9:96:74:22:36:f9:83:20:e3:a3:76:2b:71:13:13:
         cd:77:a5:bb:04:9e:92:ad:87:22:bd:72:e9:40:2d:42:3e:8d:
         31:90:67:db:95:01:80:42:c7:53:a7:b9:59:31:d1:fb:9b:36:
         13:b5:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 14:40:21 2024 by rpki-client on console-fra.rpki-client.org