Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3af76ada-ee22-3277-84d3-4f4e99fd3777.roa
File:                     3af76ada-ee22-3277-84d3-4f4e99fd3777.roa (raw, json)
Hash identifier:          h8HDNkrMqK5P2nTldbB1KK4g7H72qU1yRmcG92RRyOY=
Subject key identifier:   E4:62:B3:3C:DF:35:4C:45:27:FF:52:1B:AC:A7:B4:32:12:7E:B6:31
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A14FF3AB87343B2B502600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3af76ada-ee22-3277-84d3-4f4e99fd3777.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.240.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:4f:f3:ab:87:34:3b:2b:50:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=d2e8a4d6-fba8-4baa-8bf5-28dc27c2f7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:98:2b:b3:eb:bf:1e:e9:f6:2b:9e:4a:27:
                    47:47:19:87:04:17:74:b6:c5:09:44:83:a4:9c:b1:
                    f0:7f:20:c6:b2:28:f5:d1:35:ce:ef:0c:f9:ae:d2:
                    3e:a7:42:cc:6e:9f:7a:08:44:7a:14:ab:e7:fa:f6:
                    2c:83:b1:35:52:a1:ce:2a:02:40:b3:5c:18:a4:4d:
                    72:ec:7a:66:be:08:f0:9c:3b:81:f6:0a:5a:2f:0d:
                    69:bc:88:34:87:cb:e6:4f:18:45:d6:25:61:6b:2e:
                    24:8f:0c:9a:13:e4:b1:a1:41:2c:41:8b:96:82:f0:
                    f3:15:9d:2c:1b:de:0e:fb:7d:43:9b:86:9b:26:fb:
                    35:9e:5e:b9:a7:27:87:36:81:c2:bf:c2:22:f4:16:
                    86:39:79:70:7a:9b:65:86:e6:8a:d8:22:0c:e8:af:
                    cf:89:05:99:42:a5:60:ca:4a:16:d4:a4:eb:fc:1a:
                    cc:56:c9:b2:a9:ed:a8:bc:91:b5:49:15:b3:d1:b6:
                    9d:e5:71:42:67:86:32:cb:59:ad:a7:6f:60:ca:6e:
                    29:de:c2:6f:27:16:6d:21:87:6d:27:bf:fe:75:2b:
                    7e:48:e5:7c:7f:b1:bb:c1:e4:c5:bd:32:20:2e:56:
                    c5:58:fe:cb:50:29:a2:dc:7f:e2:bf:17:96:3f:9f:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:62:B3:3C:DF:35:4C:45:27:FF:52:1B:AC:A7:B4:32:12:7E:B6:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3af76ada-ee22-3277-84d3-4f4e99fd3777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c6:0c:c9:9b:67:23:a4:3a:cf:8b:f3:5c:02:27:e4:2f:f3:
         66:c5:51:41:6e:bd:9e:b6:b3:cd:14:d6:e4:4b:b4:d9:a1:85:
         c3:fd:11:7c:ac:06:a6:e2:a6:9c:de:ad:53:9d:ad:1c:a9:b4:
         4d:1b:23:6b:9c:f5:65:ef:9e:7e:16:5a:79:fe:af:f0:63:c5:
         72:68:99:6e:24:3d:07:a0:85:5f:58:ac:85:1d:c6:4b:d7:f5:
         24:b0:2f:84:68:f7:38:67:db:e7:69:30:fa:21:11:8a:35:9e:
         f7:ae:33:71:a4:c4:93:ad:91:e4:bb:d4:3a:d9:2d:1d:15:51:
         00:22:46:83:7a:6e:6e:30:8d:da:56:5f:46:05:fa:46:01:13:
         1c:5b:58:b7:34:a7:a9:7c:cd:2b:00:d4:2b:88:26:b4:a0:ad:
         d9:93:4c:47:f6:ca:9e:03:7c:89:9f:9a:4f:d0:f6:b7:67:3c:
         78:27:14:66:cd:a5:bb:05:8a:59:d2:ab:7b:79:21:3b:98:f9:
         c7:ed:6a:eb:90:cb:43:d5:b0:df:65:33:c6:46:97:28:18:c0:
         54:93:f3:15:67:22:49:55:4b:24:f1:40:1c:b3:a1:35:18:67:
         e8:e3:e9:76:00:27:e6:39:d2:7e:85:54:ef:3b:59:ce:e3:7e:
         30:53:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:33 2024 by rpki-client on console-ams.rpki-client.org