Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa
File:                     5889b020-d1dc-309e-a3d6-83b0d8a04571.roa (raw, json)
Hash identifier:          0GgofWdv6b228qrarmz+N5/Js09b0tTp4iJAYkSIU58=
Subject key identifier:   2E:35:09:C1:15:E4:DD:E6:65:77:2C:02:8E:AC:B8:DB:EA:39:87:8B
Certificate issuer:       /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Certificate serial:       010D0C9F432858472405BA83B638CDCEB0825880
Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     400136
IP address blocks:        24.149.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:ba:83:b6:38:cd:ce:b0:82:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=ccbb19cc-f53c-43b5-ae6a-11c8e7f05053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:32:64:ca:dd:1f:6b:f5:e5:00:80:aa:f6:
                    25:56:20:4b:1c:26:4f:84:63:7b:2e:5b:d2:7a:c4:
                    81:c5:4c:4a:b7:15:4b:4b:e4:c6:7c:aa:b9:2e:87:
                    6d:73:b4:41:5e:87:7c:5d:4d:0f:95:6c:5c:e0:f1:
                    66:3c:19:6f:0f:1e:01:62:92:aa:43:c2:ef:29:f0:
                    4f:45:f8:ed:d3:f7:15:5e:de:7e:a2:90:0e:98:17:
                    a8:cf:c7:dd:d9:39:15:08:81:90:d9:69:f8:65:71:
                    7e:12:d7:6b:69:fa:83:29:bc:38:ed:2f:c1:92:34:
                    e0:eb:c2:b4:5c:02:46:12:2b:c7:0c:b0:e1:d7:69:
                    db:00:1b:ed:14:3d:d4:ba:6d:02:ba:9d:e9:ef:74:
                    a7:e8:01:59:fe:ce:a6:62:be:19:fe:4a:35:64:f1:
                    ea:e0:60:39:12:33:9e:93:95:5b:24:76:84:b3:cd:
                    83:bc:aa:8b:03:d2:5f:9b:4b:85:4a:84:54:36:fc:
                    ea:cf:4c:37:41:eb:38:bc:b9:50:95:c5:e4:32:5c:
                    e6:c6:28:c4:ce:86:85:0f:79:42:fa:82:e5:87:3b:
                    76:c2:eb:dc:79:cf:69:22:81:a3:f3:be:09:43:55:
                    3b:3b:db:0d:6b:31:60:89:9a:b3:da:e9:bd:f6:49:
                    13:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:09:C1:15:E4:DD:E6:65:77:2C:02:8E:AC:B8:DB:EA:39:87:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl

            X509v3 Authority Key Identifier:
                keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:7c:fc:75:30:28:36:ee:50:e6:5f:94:88:df:f2:d8:cf:
         6f:19:13:d2:79:c0:8a:15:65:03:22:61:b4:5d:19:bc:7c:35:
         f7:9c:44:06:ab:ba:88:23:9a:31:2f:5d:00:a8:cd:a4:0a:a3:
         f7:d9:6f:67:50:50:a1:3e:5c:93:c0:a4:12:67:23:0e:0d:69:
         17:68:1a:ac:31:10:32:f7:9e:94:70:c0:4a:1d:75:44:d5:76:
         b9:bd:87:72:5e:bd:10:dd:d4:ce:c3:18:b1:81:ce:06:c0:79:
         30:32:5e:41:75:b5:84:b9:d9:c4:80:e6:c9:f1:2b:65:d4:b1:
         4b:9f:74:e5:0e:0a:d5:85:6d:b5:d5:8a:aa:c7:40:6d:29:b3:
         36:98:64:e5:0c:6b:76:e5:aa:1b:30:5b:73:79:46:04:d3:e1:
         8c:6e:81:bd:66:5c:f9:c2:2d:09:ed:25:a2:a3:2c:f0:8d:3f:
         bd:47:57:99:0b:b2:de:7f:ab:13:af:c0:95:3b:80:05:4b:1d:
         27:a0:73:f4:fd:72:03:28:c6:e8:77:22:85:b5:82:3c:19:45:
         47:84:be:46:7d:13:fe:c3:62:28:07:de:a7:f2:90:2e:b6:dc:
         d9:16:0b:09:7a:ba:ae:35:ac:11:df:7d:a3:b4:44:f5:53:d3:
         98:ed:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:47 2024 by rpki-client on console-fra.rpki-client.org