Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/520efb5e-5752-3e44-a36c-d1a7f75d4330.roa
File:                     520efb5e-5752-3e44-a36c-d1a7f75d4330.roa (raw, json)
Hash identifier:          wss43sS8QqJLiDEzGZtxbz84QE6s/ErWruNPjI9J2u8=
Subject key identifier:   52:39:1F:00:E9:46:C6:79:C8:95:BC:88:98:A1:4A:AD:4F:E5:6A:1F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838398C57B5E53892D7AB02F7CC
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/520efb5e-5752-3e44-a36c-d1a7f75d4330.roa
Signing time:             Thu 10 Dec 2020 05:00:00 +0000
ROA not before:           Thu 10 Dec 2020 05:00:00 +0000
ROA not after:            Thu 03 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        192.219.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:39:8c:57:b5:e5:38:92:d7:ab:02:f7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 10 05:00:00 2020 GMT
            Not After : Dec  3 05:00:00 2026 GMT
        Subject: CN=07fc8d26-bb1a-469a-9075-70e4aab9a402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:c4:22:1a:e5:36:49:cc:36:3a:94:d4:58:
                    16:a1:79:8e:19:d9:89:33:cd:7b:ab:69:80:4c:4d:
                    30:e9:74:51:03:86:5f:b8:b1:37:86:70:e3:91:35:
                    1c:e7:b1:00:77:a1:3c:df:9c:64:57:0f:78:99:93:
                    50:7b:6f:20:9b:04:6a:36:c5:dc:f5:ae:95:8a:db:
                    e0:68:9f:b5:0b:b7:58:fa:85:e8:4d:81:88:24:2b:
                    ca:dc:4b:03:be:2e:4c:d8:8e:4d:2c:e7:7b:e0:fb:
                    a8:93:48:de:40:9c:d6:a3:4b:e1:b7:6c:1c:30:9b:
                    a8:9e:ff:fb:18:23:a8:6b:77:ad:51:41:f2:f1:a2:
                    8c:d5:1a:5b:fd:4f:54:6c:4d:d8:95:3b:db:11:f7:
                    54:b9:60:de:54:0e:fb:c8:6a:84:17:1a:76:d5:9f:
                    5e:67:39:7d:2c:7f:5f:e1:7e:4e:e5:ae:8b:6d:a3:
                    a7:d4:5b:bb:bf:1f:c6:d1:49:4e:66:b0:3c:d5:39:
                    aa:17:5c:0b:8c:e2:d2:a0:18:69:9d:e7:90:b6:94:
                    fa:63:87:4d:31:97:3f:0e:5a:73:83:90:37:ee:42:
                    b5:21:55:c8:c6:d9:70:3f:3d:29:ca:51:5e:0c:f8:
                    78:46:cd:9e:34:51:9f:25:c7:fd:d8:42:63:f0:f8:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:39:1F:00:E9:46:C6:79:C8:95:BC:88:98:A1:4A:AD:4F:E5:6A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/520efb5e-5752-3e44-a36c-d1a7f75d4330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:56:00:13:80:20:39:a0:ea:2e:0c:37:ed:ba:c9:e4:c9:ea:
         fd:40:6c:13:4b:1a:16:5f:71:ef:07:a5:d3:2f:ce:c1:10:6a:
         30:f2:fc:5c:45:a5:41:2c:a2:01:2a:f3:85:24:37:d7:da:56:
         75:2e:e8:ad:2a:b6:cd:00:8e:9b:f9:f7:7e:3a:ab:97:5a:17:
         a6:60:fc:c6:13:1c:e6:83:34:53:cb:78:a1:ee:d2:98:8c:96:
         ab:9d:52:30:d7:49:46:fe:78:b8:f4:ee:c1:c8:fa:c1:97:8b:
         07:3b:31:3e:8e:24:4a:de:00:5c:ff:12:69:05:6a:f8:97:ab:
         f7:33:9a:6c:0f:a4:e9:fb:67:a2:9d:b8:e4:b4:59:8a:aa:63:
         71:8f:2e:d2:08:59:d7:28:76:7b:7e:25:f3:f1:12:05:42:53:
         ba:ba:e5:0c:c3:a5:10:e3:4b:ee:77:ab:3b:2b:5d:10:9a:c2:
         9f:57:08:4d:e5:9e:ee:e1:2f:bc:c3:94:cc:c6:a7:cd:c4:55:
         88:db:e9:9e:45:d9:3c:4f:42:32:ba:ce:93:cb:10:7e:5d:48:
         d5:a5:e6:8c:14:48:c6:8c:57:7f:0d:18:56:21:52:34:50:2b:
         90:49:b0:d7:d2:52:73:a0:04:23:d5:ff:d3:a6:32:b4:83:ac:
         5c:08:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:05:01 2024 by rpki-client on console-fra.rpki-client.org