Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/749fd44a-c8a8-393d-a36d-8e8da9d8468b.roa
File:                     749fd44a-c8a8-393d-a36d-8e8da9d8468b.roa (raw, json)
Hash identifier:          aQCOAwTPn0eHvgePALlfKwcgfe1zeum9Em0LxNk2xCM=
Subject key identifier:   50:61:0A:DE:F2:65:40:49:DB:B0:FA:47:99:23:D0:B0:72:FC:0F:78
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584543D802AEA0AB72AEBF97A480
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/749fd44a-c8a8-393d-a36d-8e8da9d8468b.roa
Signing time:             Wed 20 Mar 2024 01:00:24 +0000
ROA not before:           Wed 20 Mar 2024 01:00:24 +0000
ROA not after:            Tue 18 Jun 2024 01:00:24 +0000
asID:                     6079
IP address blocks:        24.42.232.0/21 maxlen: 24
                          24.42.230.0/23 maxlen: 24
                          24.42.240.0/20 maxlen: 24
                          24.42.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:d8:02:ae:a0:ab:72:ae:bf:97:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Mar 20 01:00:24 2024 GMT
            Not After : Jun 18 01:00:24 2024 GMT
        Subject: CN=31fa2c30-48dd-436d-bdab-3ebb126a0504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:5b:9d:9b:a6:84:08:02:67:59:80:2d:38:e1:
                    af:5f:b0:43:e1:58:d4:9c:98:7b:67:84:80:52:27:
                    7e:12:9f:6d:a8:42:97:1c:6c:6c:db:9d:0b:a1:d4:
                    65:b9:80:77:d9:93:36:c8:7e:3b:0e:1e:73:f1:c3:
                    7d:cc:75:23:5a:97:0a:f5:ab:36:6b:5e:5a:47:de:
                    20:32:9f:34:a5:bb:71:08:fa:3e:b2:2e:58:cd:ec:
                    b1:ac:12:c5:de:25:df:34:4d:86:52:84:17:3f:01:
                    b7:06:fc:67:f2:c6:eb:eb:6c:3e:0e:b0:d4:38:60:
                    ff:ad:ec:5b:b2:e7:b7:a3:d2:51:88:64:0f:c2:87:
                    17:90:20:48:53:9d:fe:bd:0c:73:7c:be:57:15:f5:
                    48:38:68:19:21:d7:08:ee:2d:09:34:7e:e8:c5:2a:
                    10:36:a3:eb:b4:ff:c2:e7:1b:88:6a:7c:0f:6f:18:
                    01:44:a5:42:ea:0c:09:b4:18:88:95:b5:1c:5e:ae:
                    0b:18:63:fd:77:80:0e:f1:a0:23:79:1e:8b:65:93:
                    77:3d:58:85:a9:b0:91:01:8c:b8:d8:38:e2:30:b5:
                    77:8d:e9:0a:1d:6d:7d:07:b5:dc:cc:00:8c:81:f3:
                    3d:b5:f1:f6:20:b3:39:96:2d:84:8f:ca:52:13:94:
                    31:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:0A:DE:F2:65:40:49:DB:B0:FA:47:99:23:D0:B0:72:FC:0F:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/749fd44a-c8a8-393d-a36d-8e8da9d8468b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.42.229.0-24.42.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2b:37:02:39:99:c4:15:d2:b2:3f:cb:dd:88:31:29:d3:29:
         e7:de:09:ad:c5:67:56:36:47:b2:31:fb:a0:f2:01:5b:15:cc:
         cb:a9:f0:c0:1f:0f:3e:fd:d0:5a:18:27:a4:4b:32:fa:36:6f:
         c0:21:71:60:39:58:ae:ea:78:f6:77:f3:0a:7a:0a:1b:fd:49:
         01:90:4f:57:40:59:c7:1b:fe:ec:89:64:f8:ff:7b:ed:68:cd:
         bc:c4:cb:ac:27:ba:67:4c:85:07:bc:35:cb:83:7b:c3:4b:36:
         f9:56:93:87:b9:6f:f1:13:fe:9e:0f:77:24:e1:c1:4d:4f:55:
         f3:53:14:f6:83:b5:58:c9:d6:37:58:99:92:70:46:cd:66:77:
         c1:24:b1:45:f1:06:a6:04:f4:e7:64:a2:d9:f3:4a:6e:01:41:
         5e:a1:b2:99:66:7e:bc:8a:d2:99:7d:0c:76:d0:bf:35:80:de:
         48:15:b0:87:06:67:67:a8:6c:98:ff:49:9a:7a:62:b2:d3:ee:
         bc:2c:cd:44:63:60:52:c9:9e:9d:a7:ca:32:8f:67:5f:11:83:
         35:a6:6e:cf:52:98:7d:d0:ea:fa:98:fe:71:ab:06:03:a7:b6:
         0d:47:88:ec:38:d4:33:a9:2d:8b:db:18:35:d2:57:ae:b9:fd:
         a2:e9:a4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 11:57:31 2024 by rpki-client on console-fra.rpki-client.org