Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3b08b588-27ba-3090-956a-02dd399a4771.roa
File:                     3b08b588-27ba-3090-956a-02dd399a4771.roa (raw, json)
Hash identifier:          Bu2osIDW3FziYkzK01KvoUxVT541zyJ6Mq4TbxjT978=
Subject key identifier:   8E:4B:E9:EB:71:54:C6:D1:F9:B8:DD:D9:74:23:8B:24:19:55:5D:F4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A16504FECCD46C5EB42220
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3b08b588-27ba-3090-956a-02dd399a4771.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.177.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:65:04:fe:cc:d4:6c:5e:b4:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=ab1df567-9321-40ba-a5db-dfee48928c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2a:01:95:db:65:8f:43:40:92:60:59:c9:53:
                    7c:fc:a3:2d:4a:16:55:71:36:3c:4e:d7:7e:79:60:
                    0c:67:a1:3c:88:c3:74:b1:2c:ff:39:e6:47:67:d2:
                    80:31:8d:c2:00:35:20:8a:f9:d8:cb:4f:55:d2:79:
                    da:9e:5e:bd:9a:be:72:7b:35:ac:b1:1f:54:7d:f9:
                    7d:e3:ca:20:15:d6:8d:02:36:73:0b:3c:66:fb:48:
                    96:fd:49:a8:29:0b:4e:c2:ee:c2:a2:78:96:b1:29:
                    13:2d:f8:a5:c8:3c:40:cb:0d:b9:8e:d2:98:c8:1b:
                    9c:66:e5:d8:5d:3e:ab:6b:58:f8:32:77:74:7b:c1:
                    e6:0a:9c:0b:38:0b:99:65:cd:f7:a7:90:ae:70:70:
                    55:48:d8:67:fb:84:26:2a:6a:b0:69:35:9e:ee:c9:
                    37:79:c4:75:b5:00:30:d7:05:c9:a4:5d:88:1a:b9:
                    40:4d:a1:31:30:a8:96:d3:0a:87:76:3f:3d:1c:7d:
                    33:62:5b:e9:28:1d:77:91:d1:00:15:1d:e3:77:20:
                    27:bb:69:9c:20:18:11:1a:c3:a4:76:be:20:9e:00:
                    94:c9:9e:58:f6:31:d7:10:3e:6c:78:de:a0:67:ef:
                    e4:97:82:bc:d7:d7:3b:93:44:e1:eb:cb:c9:61:bb:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4B:E9:EB:71:54:C6:D1:F9:B8:DD:D9:74:23:8B:24:19:55:5D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3b08b588-27ba-3090-956a-02dd399a4771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.177.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:0d:a0:ee:03:1f:fc:f7:5b:a4:b5:04:c0:2f:98:6c:97:87:
         a5:8a:d6:b8:91:4b:d3:15:7f:8d:f6:a4:5f:90:21:71:b0:bb:
         09:31:a6:c3:d1:93:48:1f:5c:0a:0f:15:61:08:a4:67:74:6d:
         44:ee:65:a7:b8:e1:76:5b:27:67:a2:db:bc:7b:d6:d5:58:44:
         0f:c7:66:9c:65:8f:30:09:bb:80:3e:e2:fb:5e:23:bd:d4:c9:
         d2:15:82:2d:c8:eb:53:1a:48:b0:a4:08:3b:9a:1f:b9:5e:d9:
         17:79:1a:e6:0a:a6:85:39:89:f8:18:44:b4:2b:53:26:68:00:
         d9:84:16:09:59:bb:05:02:12:bb:af:21:c7:64:18:d2:4a:20:
         cb:a9:2b:9b:73:bf:5e:91:25:06:da:1b:6f:e5:4c:c2:a0:f1:
         b0:fb:11:3f:e7:62:55:d4:a6:be:86:a0:3e:ce:e3:ef:99:cd:
         79:ac:92:54:26:e9:e6:88:34:3c:08:e3:3d:f8:c2:6b:04:e5:
         b4:5a:1b:8d:69:0f:c6:38:c9:27:2e:8f:09:ff:e4:47:a5:b5:
         a0:7e:29:9a:cf:cc:e8:e2:c7:2d:cd:4c:2d:e5:26:8c:14:f6:
         11:38:99:e7:fe:2f:97:f1:94:00:db:77:47:3a:21:f8:d4:49:
         3f:8a:8a:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioWUE/szUbF60IiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
YWIxZGY1NjctOTMyMS00MGJhLWE1ZGItZGZlZTQ4OTI4YzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCoBldtlj0NAkmBZyVN8/KMtShZVcTY8Ttd+
eWAMZ6E8iMN0sSz/OeZHZ9KAMY3CADUgivnYy09V0nnanl69mr5yezWssR9Uffl9
48ogFdaNAjZzCzxm+0iW/UmoKQtOwu7ConiWsSkTLfilyDxAyw25jtKYyBucZuXY
XT6ra1j4Mnd0e8HmCpwLOAuZZc33p5CucHBVSNhn+4QmKmqwaTWe7sk3ecR1tQAw
1wXJpF2IGrlATaExMKiW0wqHdj89HH0zYlvpKB13kdEAFR3jdyAnu2mcIBgRGsOk
dr4gngCUyZ5Y9jHXED5seN6gZ+/kl4K819c7k0Th68vJYbttMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI5L6etxVMbR+bjd2XQjiyQZVV30MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2IwOGI1ODgtMjdiYS0z
MDkwLTk1NmEtMDJkZDM5OWE0NzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGLEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKsNoO4DH/z3W6S1BMAvmGyXh6WK1riRS9MVf432pF+QIXGwuwkxpsPR
k0gfXAoPFWEIpGd0bUTuZae44XZbJ2ei27x71tVYRA/HZpxljzAJu4A+4vteI73U
ydIVgi3I61MaSLCkCDuaH7le2Rd5GuYKpoU5ifgYRLQrUyZoANmEFglZuwUCEruv
IcdkGNJKIMupK5tzv16RJQbaG2/lTMKg8bD7ET/nYlXUpr6GoD7O4++ZzXmsklQm
6eaINDwI4z34wmsE5bRaG41pD8Y4yScujwn/5EeltaB+KZrPzOjixy3NTC3lJowU
9hE4mef+L5fxlADbd0c6IfjUST+KivE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:33 2024 by rpki-client on console-ams.rpki-client.org