Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/356f9e3f-fbc0-31bb-ab9f-46ef7baa9000.roa
File:                     356f9e3f-fbc0-31bb-ab9f-46ef7baa9000.roa (raw, json)
Hash identifier:          x91rs6QwUd7Ke23Vukm1vF+uOleOGXiqPOsOM9jKeKQ=
Subject key identifier:   54:4B:46:2C:27:2B:12:9C:4B:82:29:74:03:95:A5:F5:51:BD:89:D0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0CDBE634EEB759AC1D780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/356f9e3f-fbc0-31bb-ab9f-46ef7baa9000.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.247.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:cd:be:63:4e:eb:75:9a:c1:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=a3dc6329-e66c-489d-8d29-229a4a58e868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:41:35:46:4d:9a:5e:0c:ce:74:f6:45:9a:47:
                    ad:37:d4:82:3e:07:c0:8e:23:0d:ff:1a:aa:9d:7d:
                    7e:e5:88:bb:91:21:45:77:e8:04:c0:ec:48:15:8f:
                    07:13:0e:eb:e6:a0:53:f8:58:ae:1e:d3:ba:4a:d2:
                    44:c5:c9:cf:11:e5:73:e1:d9:a3:78:6a:8f:4c:c9:
                    d4:8e:01:3c:a0:64:fb:16:1c:70:a5:6d:3b:4c:2f:
                    ae:af:8c:99:e0:16:08:f9:7e:43:c8:f7:65:9f:63:
                    e4:e0:84:6f:09:38:3f:36:cf:75:b8:9b:16:1f:d4:
                    a6:cc:9c:67:18:43:96:ad:f7:e6:5c:e6:cf:22:6e:
                    f9:d1:3f:86:36:c0:76:b3:80:f5:19:fd:af:9d:c5:
                    c1:2a:43:31:00:9d:53:ea:ba:49:6a:f6:c7:14:bb:
                    fd:d2:d6:da:4e:19:91:8f:9b:85:ba:d9:47:06:10:
                    2d:39:2a:08:f3:00:ee:93:52:19:f2:86:d0:42:a5:
                    db:cf:2b:1d:cc:ff:02:4e:ef:d5:5e:e7:2c:a5:b0:
                    9c:66:82:23:ab:84:8e:45:c2:01:8c:57:d1:52:ea:
                    d0:f5:6f:08:01:27:83:95:29:97:53:d2:f0:51:22:
                    5f:6d:50:c1:75:f6:18:8c:56:31:a8:9a:62:71:cb:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4B:46:2C:27:2B:12:9C:4B:82:29:74:03:95:A5:F5:51:BD:89:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/356f9e3f-fbc0-31bb-ab9f-46ef7baa9000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.247.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:95:be:4b:5a:25:de:f8:5b:78:d7:b6:78:89:a7:41:8e:c8:
         21:2d:47:07:12:ef:fa:c2:3b:13:40:4f:23:cf:50:8e:fc:59:
         fe:0e:b8:af:68:37:ba:f6:ce:04:88:c7:5a:0e:82:4f:18:15:
         ba:20:e4:40:51:9c:76:e1:4f:09:5f:f4:e9:38:9b:88:99:90:
         12:51:7b:cf:30:5d:9c:7c:67:43:e0:46:3b:71:aa:b8:7f:10:
         96:eb:c1:eb:e5:91:a4:f6:dd:f8:c5:12:1d:a6:11:77:3f:d5:
         72:ab:0d:57:d8:10:be:4a:fe:0a:a2:3d:50:d9:14:d2:50:51:
         00:32:3f:82:36:e5:5d:48:38:a2:22:72:80:9e:e9:b3:2e:ce:
         b8:25:e0:7e:1c:40:d5:42:e6:17:80:ed:1d:5b:22:b7:8f:a6:
         e5:38:94:f2:13:9d:8b:13:63:af:fa:49:49:b8:27:1e:c9:e3:
         f9:f3:35:fc:fb:06:22:dc:4e:b4:97:4e:10:51:8e:ef:27:a4:
         9d:12:a6:33:e1:45:ee:b4:cd:36:a3:d6:1b:63:96:be:66:81:
         ba:29:42:88:9b:bf:9e:3e:30:6a:26:26:c4:b6:68:8a:75:93:
         2f:e5:95:d3:76:20:1f:b6:c6:e3:8b:96:b2:fd:1e:de:c7:7c:
         b2:54:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:05 2024 by rpki-client on console-fra.rpki-client.org