Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5ac214e9-136c-37f1-bc5f-a2e3b9363e60.roa
File:                     5ac214e9-136c-37f1-bc5f-a2e3b9363e60.roa (raw, json)
Hash identifier:          EePgcLGCYwT9zjnEa33p2XZwvOsxdQ2T627sNMOU244=
Subject key identifier:   75:38:5A:33:55:87:E9:5B:4E:A4:0D:B7:12:6D:40:87:B2:82:FF:C9
Certificate issuer:       /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Certificate serial:       010D0C9F4328584511B590BB8BD803D6D9C77F80
Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5ac214e9-136c-37f1-bc5f-a2e3b9363e60.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     400136
IP address blocks:        24.149.32.0/24 maxlen: 24
                          24.149.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:90:bb:8b:d8:03:d6:d9:c7:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=da8889f2-b967-45e9-bf3b-c06e9d89d6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:13:a8:7d:d0:53:d6:8a:66:2b:1e:69:de:
                    be:64:0c:26:96:99:ea:f6:02:d8:45:f4:89:aa:c4:
                    fd:9d:8e:26:9e:18:47:82:2c:16:a5:da:73:e2:28:
                    e0:2e:7c:42:67:52:9b:d3:8f:f1:80:d3:77:f6:1e:
                    17:f0:d1:f0:1f:ab:40:ec:09:a1:f1:16:f2:19:fe:
                    a4:99:20:63:a8:ba:97:d2:2b:bb:01:9f:f2:9e:d7:
                    de:1c:d1:fa:da:da:d3:9e:94:bc:98:db:9b:dc:b3:
                    4d:7f:5a:38:ab:96:c6:6e:b3:92:76:1e:35:d8:41:
                    64:89:b5:e7:04:d4:72:58:77:19:da:2c:26:cd:1d:
                    67:d9:c9:f9:87:1f:81:c9:54:21:13:05:01:00:c3:
                    2f:ef:c9:7d:5a:a7:b6:83:ea:ea:6e:1e:1a:e1:fc:
                    b4:53:d0:c1:21:05:a2:78:84:db:45:50:04:4c:47:
                    53:49:fc:c1:66:75:e0:c1:7d:dd:61:ff:f8:52:95:
                    00:c6:1f:1f:3d:19:61:1b:42:da:a4:61:58:48:47:
                    fc:60:5d:6a:22:f9:52:8a:0f:de:48:fc:23:c7:01:
                    02:49:79:a4:dd:e8:8b:94:7d:2b:41:10:c9:eb:24:
                    45:8d:6e:44:ee:04:5a:cb:f1:01:c8:24:87:80:96:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:38:5A:33:55:87:E9:5B:4E:A4:0D:B7:12:6D:40:87:B2:82:FF:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5ac214e9-136c-37f1-bc5f-a2e3b9363e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl

            X509v3 Authority Key Identifier:
                keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c3:68:0f:c4:dd:c6:88:5c:96:34:c9:fb:bd:ec:ff:5d:da:
         2f:6d:d6:01:dc:f3:fe:1a:a7:a8:65:59:31:7a:12:a6:2f:b8:
         25:ee:47:d3:ea:2a:21:84:80:54:5f:2c:4d:2e:60:bb:7a:d2:
         9e:40:4d:39:fb:dc:3f:11:55:5a:11:f4:77:69:5a:d1:bc:42:
         20:23:12:6b:a9:66:00:ab:8c:28:c3:43:2b:bd:f9:52:85:13:
         27:15:b0:f7:15:39:00:79:0a:2f:58:12:9e:d8:0e:22:cd:3a:
         0c:6e:4e:cb:2f:2e:8f:55:fc:33:bc:fb:bc:66:cb:a8:4c:78:
         a8:6c:4b:11:0b:65:9f:30:1a:80:7b:50:ee:3b:a8:85:84:b3:
         8b:25:65:20:41:b4:76:53:cb:aa:42:dc:f8:46:77:9d:95:60:
         08:87:45:02:36:d8:55:4d:66:1c:73:a4:1f:b3:a4:77:96:e9:
         d4:4f:a1:5b:fa:ba:a9:1b:25:48:d8:ca:b7:0e:d2:6d:0e:12:
         2a:f6:6d:46:df:fa:5d:92:fd:13:a8:df:19:a9:05:a1:10:8b:
         45:a2:63:a8:91:38:60:f1:3c:28:99:5d:b3:71:55:f2:5a:05:
         17:f0:09:f3:35:20:a7:2b:f0:13:90:3f:46:ba:ec:d7:03:73:
         5a:f4:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:48:51 2024 by rpki-client on console-fra.rpki-client.org