Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17787705-b5db-3c4c-87dd-3d9fec2c8514.roa
File:                     17787705-b5db-3c4c-87dd-3d9fec2c8514.roa (raw, json)
Hash identifier:          NzC5ZIzFMowG6daFyIJpZIXMNN5Hrv1S9oygzXUmpVw=
Subject key identifier:   2E:18:14:78:90:28:17:3A:58:33:30:2C:BA:43:F7:67:D5:0A:0F:BC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A167BAEA685F2272D2BB80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17787705-b5db-3c4c-87dd-3d9fec2c8514.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.158.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:67:ba:ea:68:5f:22:72:d2:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=d9c1a66e-3b0b-46c0-abe4-64f7d93d1cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e2:a1:4a:8e:12:f5:db:d5:4a:ea:31:10:04:
                    77:d0:e6:23:36:67:aa:59:fd:ce:96:b9:0c:12:39:
                    f2:3a:68:87:31:60:1e:03:05:a5:b6:b8:c1:4c:9e:
                    b8:30:c3:50:67:9f:82:7e:fe:56:ed:f2:4a:3d:42:
                    af:48:a6:a3:f0:e4:c8:a5:e3:3e:ee:06:f5:eb:ee:
                    45:a4:4a:3e:86:5a:2f:45:c6:fc:1e:14:2f:a0:69:
                    f3:8e:63:e9:79:28:93:69:e8:24:4d:bf:30:11:3f:
                    6b:78:20:0d:10:55:9a:dc:61:2d:e2:73:5d:ee:d7:
                    f3:1f:6a:d6:c4:f4:9e:a6:ab:e7:7f:9d:d2:78:a3:
                    42:de:0a:ec:f1:04:59:74:8d:43:a2:31:e9:78:c9:
                    71:75:00:21:98:16:40:89:f1:ad:27:1c:f6:dd:5e:
                    95:64:71:29:ea:d5:a3:22:2c:ef:ec:f7:2a:50:4e:
                    d1:e3:ef:75:61:37:61:8d:45:2b:a7:d4:a5:84:5d:
                    5b:96:9f:b5:42:1a:d1:5d:3c:79:39:91:6d:52:63:
                    23:55:68:26:fa:b5:ba:06:f6:0c:34:33:8a:a7:2a:
                    87:fb:e5:3e:3d:ce:2b:38:61:10:ee:1f:9e:0d:f6:
                    6f:10:c2:bf:2d:75:f7:1f:28:a4:b7:d0:f5:68:e4:
                    b5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:18:14:78:90:28:17:3A:58:33:30:2C:BA:43:F7:67:D5:0A:0F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17787705-b5db-3c4c-87dd-3d9fec2c8514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.158.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e2:b2:55:b4:1c:55:ee:dd:c9:82:d6:10:9f:6a:84:99:49:
         f4:34:4d:48:b9:16:52:4b:be:e6:42:c0:30:5f:bd:7f:27:74:
         2b:a9:f8:24:8c:cd:d8:1e:68:19:25:ed:47:f3:af:8e:fa:ef:
         48:41:b7:a1:6a:10:5b:c7:86:bf:74:0b:22:fd:34:74:d6:b6:
         6f:1c:53:58:00:36:44:12:6e:a4:84:25:8c:14:5a:a9:19:22:
         c6:6f:77:8a:ac:d5:89:7e:b5:59:56:fd:d7:7c:e0:7b:68:ad:
         89:bd:43:48:c5:8b:bc:ec:c0:4b:74:73:5a:5d:fd:fe:62:75:
         a2:01:5c:97:c9:a9:c7:20:e0:88:f6:45:ed:92:9d:a4:86:15:
         50:fe:9b:c6:76:b2:1e:c9:de:bf:75:45:b2:09:e6:b8:37:a9:
         97:6e:af:39:87:a7:c4:10:ab:6d:0e:cc:83:fe:17:fd:d7:83:
         4c:21:f2:82:69:25:2e:53:ca:5a:35:e4:ab:40:b9:72:06:60:
         af:b7:d9:8e:2e:63:82:cf:77:80:59:97:4a:17:57:a4:7c:41:
         80:0b:6a:86:4a:94:e0:51:58:4e:67:13:10:c8:5e:ec:a9:cc:
         49:cb:6b:a9:5c:75:22:2f:7c:75:d8:65:c2:d3:4a:8b:e5:19:
         e4:34:9c:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioWe66mhfInLSu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZDljMWE2NmUtM2IwYi00NmMwLWFiZTQtNjRmN2Q5M2QxY2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+KhSo4S9dvVSuoxEAR30OYjNmeqWf3OlrkM
EjnyOmiHMWAeAwWltrjBTJ64MMNQZ5+Cfv5W7fJKPUKvSKaj8OTIpeM+7gb16+5F
pEo+hlovRcb8HhQvoGnzjmPpeSiTaegkTb8wET9reCANEFWa3GEt4nNd7tfzH2rW
xPSepqvnf53SeKNC3grs8QRZdI1DojHpeMlxdQAhmBZAifGtJxz23V6VZHEp6tWj
Iizv7PcqUE7R4+91YTdhjUUrp9SlhF1blp+1QhrRXTx5OZFtUmMjVWgm+rW6BvYM
NDOKpyqH++U+Pc4rOGEQ7h+eDfZvEMK/LXX3Hyikt9D1aOS11wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4YFHiQKBc6WDMwLLpD92fVCg+8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMTc3ODc3MDUtYjVkYi0z
YzRjLTg3ZGQtM2Q5ZmVjMmM4NTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGJ4gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/islW0HFXu3cmC1hCfaoSZSfQ0TUi5FlJLvuZCwDBfvX8ndCup+CSM
zdgeaBkl7Ufzr47670hBt6FqEFvHhr90CyL9NHTWtm8cU1gANkQSbqSEJYwUWqkZ
IsZvd4qs1Yl+tVlW/dd84HtorYm9Q0jFi7zswEt0c1pd/f5idaIBXJfJqccg4Ij2
Re2SnaSGFVD+m8Z2sh7J3r91RbIJ5rg3qZdurzmHp8QQq20OzIP+F/3Xg0wh8oJp
JS5Tylo15KtAuXIGYK+32Y4uY4LPd4BZl0oXV6R8QYALaoZKlOBRWE5nExDIXuyp
zEnLa6lcdSIvfHXYZcLTSovlGeQ0nLQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:30 2024 by rpki-client on console-ams.rpki-client.org