Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f3322ec-bc72-37c4-825c-acc7173e2ad1.roa
File:                     1f3322ec-bc72-37c4-825c-acc7173e2ad1.roa (raw, json)
Hash identifier:          SSS+pO4/HVR5cyXFqqm3KfUamXcdbiAUDCfz6qyWJs0=
Subject key identifier:   DD:39:5B:39:08:3D:02:4A:08:B7:B7:3E:C7:EA:2F:D7:4E:E4:62:89
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0DF207ABC2E81813F5700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f3322ec-bc72-37c4-825c-acc7173e2ad1.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.196.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:df:20:7a:bc:2e:81:81:3f:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=5a76da59-b509-45ee-842b-eb2be7f6b692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:f4:c6:ba:9d:dd:d9:45:57:ba:32:76:f9:
                    37:2f:7f:b2:1a:53:e3:84:ff:40:3c:d7:bb:19:7e:
                    ee:07:69:37:4a:91:08:12:99:a1:e5:9c:d6:85:36:
                    a1:a5:be:b0:50:91:c1:d9:e7:f6:16:48:2e:ac:b1:
                    e6:88:7b:97:56:95:fd:f0:5e:1e:9f:b5:a2:cd:94:
                    03:82:7f:02:90:39:c5:6d:66:9b:be:b0:81:68:a5:
                    ea:65:ee:c5:dd:89:77:03:b3:e3:d1:84:a8:39:fb:
                    81:de:f2:a5:36:2c:ba:6e:62:9f:4b:57:4b:ba:7d:
                    9f:a7:d3:97:33:b6:ec:d5:b0:ac:46:b9:7e:e4:53:
                    77:99:67:aa:fc:e8:cd:b0:70:b8:b7:63:8a:b1:47:
                    c0:3d:a8:59:58:ba:e2:c4:1c:02:a0:0e:b0:aa:3e:
                    b0:9f:80:9d:f9:fb:1a:09:51:60:f7:14:74:73:ee:
                    23:11:c8:fd:1a:bd:1e:67:d8:2e:12:a0:29:12:93:
                    ca:49:dc:e5:12:a7:f4:11:32:21:03:3b:e8:15:2a:
                    f3:d8:1c:ed:d2:34:a4:8b:26:11:b4:09:0b:ae:75:
                    50:43:d0:48:c9:49:32:75:67:88:9b:43:fa:04:d5:
                    d1:9f:48:d1:ad:15:d9:92:51:03:92:5d:68:bf:aa:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:39:5B:39:08:3D:02:4A:08:B7:B7:3E:C7:EA:2F:D7:4E:E4:62:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f3322ec-bc72-37c4-825c-acc7173e2ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.196.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ac:0f:d4:9e:f4:8f:57:12:55:75:c0:e4:2a:b2:f2:4e:2c:
         f4:7f:52:4c:c3:f0:71:da:4a:5e:a5:95:9f:c2:e3:c9:64:be:
         1e:50:3b:af:ad:99:e5:9b:44:65:67:93:4a:4d:d2:64:83:4a:
         62:18:a5:57:99:8f:31:ac:3c:1e:14:0d:12:ae:f9:20:7c:a6:
         aa:0a:c5:69:47:02:70:20:0e:dc:92:69:1e:6f:c4:89:2c:c4:
         4b:ff:f7:b2:66:98:ee:35:7c:aa:5c:03:d3:8d:c0:67:21:ab:
         02:c9:86:4c:3e:c1:ba:04:62:53:de:86:31:29:ac:cb:5d:f6:
         f2:be:d5:54:be:1f:f5:3f:d9:ff:09:b9:12:ac:e4:1a:5b:1f:
         76:ed:3f:57:56:69:db:ac:ea:9c:e6:87:c5:f7:a3:79:17:d0:
         29:da:1e:e5:80:ac:85:44:ed:55:b8:07:60:da:a1:8f:1a:bd:
         57:1e:b2:cf:8c:bb:cf:01:8a:e9:9a:b6:38:12:ae:2b:43:27:
         db:2e:8d:68:3d:32:42:97:22:64:5b:3a:d9:18:dc:1f:5e:c4:
         e4:fb:5d:e0:c4:da:36:03:dc:df:94:61:f2:03:5d:a6:02:3e:
         c4:a4:82:85:79:cc:18:62:0a:6a:29:cc:ae:a4:a7:56:d6:16:
         d3:87:43:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioN8gerwugYE/VwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
NWE3NmRhNTktYjUwOS00NWVlLTg0MmItZWIyYmU3ZjZiNjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7H0xrqd3dlFV7oydvk3L3+yGlPjhP9APNe7
GX7uB2k3SpEIEpmh5ZzWhTahpb6wUJHB2ef2FkgurLHmiHuXVpX98F4en7WizZQD
gn8CkDnFbWabvrCBaKXqZe7F3Yl3A7Pj0YSoOfuB3vKlNiy6bmKfS1dLun2fp9OX
M7bs1bCsRrl+5FN3mWeq/OjNsHC4t2OKsUfAPahZWLrixBwCoA6wqj6wn4Cd+fsa
CVFg9xR0c+4jEcj9Gr0eZ9guEqApEpPKSdzlEqf0ETIhAzvoFSrz2Bzt0jSkiyYR
tAkLrnVQQ9BIyUkydWeIm0P6BNXRn0jRrRXZklEDkl1ov6r5AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN05WzkIPQJKCLe3PsfqL9dO5GKJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWYzMzIyZWMtYmM3Mi0z
N2M0LTgyNWMtYWNjNzE3M2UyYWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGMSQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmsD9Se9I9XElV1wOQqsvJOLPR/UkzD8HHaSl6llZ/C48lkvh5QO6+t
meWbRGVnk0pN0mSDSmIYpVeZjzGsPB4UDRKu+SB8pqoKxWlHAnAgDtySaR5vxIks
xEv/97JmmO41fKpcA9ONwGchqwLJhkw+wboEYlPehjEprMtd9vK+1VS+H/U/2f8J
uRKs5BpbH3btP1dWadus6pzmh8X3o3kX0CnaHuWArIVE7VW4B2DaoY8avVcess+M
u88BiumatjgSritDJ9sujWg9MkKXImRbOtkY3B9exOT7XeDE2jYD3N+UYfIDXaYC
PsSkgoV5zBhiCmopzK6kp1bWFtOHQ4M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:31 2024 by rpki-client on console-ams.rpki-client.org