Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d0a033d-23e1-31c2-88ed-ca643c0f3813.roa
File:                     2d0a033d-23e1-31c2-88ed-ca643c0f3813.roa (raw, json)
Hash identifier:          NR5dP46AHXF4SGcf/RriCeKDJwsux8FkN0T5mueXfLU=
Subject key identifier:   10:68:B8:A9:9B:C4:21:A0:2E:C4:92:CB:26:29:89:B7:43:CC:5C:9E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858385B10EF05A52127D3E7828E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d0a033d-23e1-31c2-88ed-ca643c0f3813.roa
Signing time:             Tue 22 Dec 2020 05:00:00 +0000
ROA not before:           Tue 22 Dec 2020 05:00:00 +0000
ROA not after:            Tue 15 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        24.158.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:5b:10:ef:05:a5:21:27:d3:e7:82:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 22 05:00:00 2020 GMT
            Not After : Dec 15 05:00:00 2026 GMT
        Subject: CN=ca1eb567-a074-4bd3-9cf9-c4d1013c2de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:52:1f:e6:e9:06:d5:a4:ae:5d:72:84:ad:41:
                    77:66:2d:c3:aa:29:6a:bb:6d:dd:de:45:9b:9a:bb:
                    d3:0b:7c:91:27:a5:81:e1:b3:7e:cd:f0:ae:6d:f7:
                    9f:05:d5:23:43:9e:6f:94:59:ee:5f:64:88:0f:3e:
                    e1:37:27:3f:1a:4d:d8:df:7a:80:4a:db:58:fa:89:
                    fd:5b:f2:ba:8e:54:b5:4c:b5:d2:aa:72:6b:3d:1b:
                    d2:0a:e3:87:f3:40:d2:e7:41:73:1c:5f:f0:69:ae:
                    04:8f:46:99:d7:27:8b:9f:7e:ce:95:8a:5d:fa:d9:
                    0f:79:16:4c:d3:c8:c1:77:61:ea:76:a3:27:43:82:
                    1f:7f:91:24:00:c8:9e:f7:6d:15:d8:06:02:24:89:
                    0d:da:fe:86:da:72:20:81:7d:ae:36:48:ab:09:46:
                    5b:99:57:68:33:f0:a8:75:bf:f9:36:57:b3:fa:5f:
                    ae:c6:be:a7:42:78:31:2c:d4:f7:a8:61:b6:5b:e7:
                    9f:84:d7:5d:34:2d:db:91:49:53:38:ff:a7:49:db:
                    cd:a7:e1:4e:95:95:84:2c:65:c2:5b:93:94:c6:0e:
                    13:ff:a6:68:c7:b0:b8:cf:56:67:5c:0e:ef:00:52:
                    ee:00:4f:3e:12:fb:ae:31:d2:08:3e:8b:ca:8f:85:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:B8:A9:9B:C4:21:A0:2E:C4:92:CB:26:29:89:B7:43:CC:5C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d0a033d-23e1-31c2-88ed-ca643c0f3813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.158.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:9c:7d:8f:cc:64:38:13:16:a2:92:3e:6f:0f:22:35:fb:25:
         5f:e0:40:77:2b:5d:0b:84:b6:9c:81:51:57:b8:4e:c0:20:cc:
         87:f3:92:cc:aa:b0:33:9f:72:e9:31:59:5e:b7:c6:01:dc:30:
         15:70:95:c5:cf:96:66:25:6e:96:41:27:01:20:e7:40:7e:a9:
         29:81:85:b8:01:1b:34:1d:ce:32:51:d5:01:82:23:19:a6:d6:
         48:61:e4:86:8f:12:fa:82:b9:98:38:a7:92:c7:64:a8:66:91:
         23:76:ae:59:93:ec:6a:97:26:31:67:56:6e:84:d8:ed:2e:17:
         fb:17:7e:c4:54:7f:7c:83:a6:d1:8c:29:d3:be:d9:c4:47:c1:
         04:bf:7d:12:10:11:56:fe:29:d9:9d:c2:b7:67:a8:36:c1:e8:
         f5:be:e7:d9:9e:bc:59:98:9e:a0:65:75:73:69:5e:8b:41:e0:
         ed:5a:41:5e:ca:1d:6c:a1:dc:14:a2:0a:cb:01:e5:5d:f2:71:
         6a:42:d4:ec:3b:c2:2b:d7:ea:01:d6:92:7d:8a:69:4f:32:0f:
         af:e2:eb:78:e2:90:e6:c5:97:13:5d:5f:2e:e8:c3:4a:6e:67:
         9b:ef:e4:c1:13:cc:20:65:6a:d3:36:04:4c:ee:ef:0b:60:45:
         a5:99:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:25:27 2024 by rpki-client on console-ams.rpki-client.org