Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/521d6971-2f1f-324d-b793-8db5d92baafb.roa
File:                     521d6971-2f1f-324d-b793-8db5d92baafb.roa (raw, json)
Hash identifier:          FDT5+6r4dGgihBRw+p/zwuo1ntYH9sf87Z9JHzvGcew=
Subject key identifier:   01:91:13:62:3D:8C:BC:C1:32:3A:01:B4:11:DC:F8:8D:0A:49:40:AC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0CFF79E51A59BC0B2F400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/521d6971-2f1f-324d-b793-8db5d92baafb.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.196.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:cf:f7:9e:51:a5:9b:c0:b2:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=daa613a0-ee5f-4c28-852e-d8f81a373ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:cd:54:3b:66:2d:d2:9d:e2:ce:d4:48:54:
                    ce:d2:71:c6:a7:d3:60:69:05:c4:07:ea:0c:f0:47:
                    ef:b4:1b:14:dd:c3:87:1d:ac:b7:2e:0d:e8:0c:76:
                    22:79:93:02:c7:ba:d5:25:fa:07:88:a7:4d:c1:a2:
                    fa:7f:dd:0d:52:49:35:db:4a:bb:bc:a5:a8:a5:c2:
                    7c:80:6d:db:8a:ce:a5:34:0f:6c:a7:03:76:f2:f7:
                    19:de:40:ed:c2:b9:de:c1:30:07:11:8b:98:9d:ae:
                    4f:0b:4e:39:42:80:c2:08:18:fd:be:a4:17:18:e5:
                    a4:6a:d2:bc:23:22:ae:5b:1c:98:47:a9:9d:02:e3:
                    74:1d:b3:1a:14:e1:12:5b:d1:53:ed:19:74:9e:65:
                    ca:82:16:97:57:c3:19:b8:74:93:73:17:d6:04:e7:
                    24:c7:e5:29:f1:b1:fa:34:8b:ab:2c:52:a6:84:1a:
                    2e:d4:b8:9f:36:eb:2a:0a:63:44:df:c9:7d:df:cf:
                    96:f4:fe:0d:39:d9:c5:0f:47:06:41:2d:fd:c7:be:
                    ee:ff:7b:ea:0f:8f:13:52:70:1a:5b:4b:35:96:91:
                    19:2c:12:33:cb:9d:e3:41:90:a3:17:9a:c4:2e:9a:
                    f7:d7:a8:19:66:b8:c9:23:ae:8c:70:e4:68:72:c6:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:91:13:62:3D:8C:BC:C1:32:3A:01:B4:11:DC:F8:8D:0A:49:40:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/521d6971-2f1f-324d-b793-8db5d92baafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.196.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a0:4c:70:e1:21:43:fd:70:85:c0:90:50:4e:2d:1c:bb:08:
         ca:de:46:c4:ed:af:81:c0:76:32:0a:0b:8d:cb:56:62:a6:72:
         92:1e:02:5e:2a:b3:b1:f3:54:dd:6a:c7:b8:48:8b:3c:00:66:
         d4:77:30:8c:1d:b5:cb:3d:fd:37:34:cf:81:e7:34:1e:bd:20:
         f5:55:3b:8a:14:32:69:fc:a3:30:44:42:d4:9b:dd:5e:9e:bf:
         cc:32:47:fb:04:1d:37:a1:68:2d:32:3d:12:16:93:66:d4:3c:
         5e:ba:8b:df:8f:40:23:d1:2c:63:45:ff:83:ea:73:a7:90:19:
         b5:32:48:69:4c:0d:1c:aa:f7:8d:8f:92:33:42:67:50:65:9e:
         b2:aa:bd:17:bf:77:b1:42:67:03:f4:fc:e9:e1:95:00:fb:84:
         8e:cf:75:51:3b:f9:cb:17:b6:47:69:ee:d1:bd:c0:b0:59:a7:
         61:09:af:a7:81:aa:fa:c2:c0:1e:c9:17:76:e5:6b:32:9b:1f:
         c5:85:12:24:f7:5f:80:b1:3a:33:4b:e9:19:a9:c4:32:84:96:
         6b:97:fd:8d:ac:7d:1d:52:8d:ac:36:a7:4e:8d:5f:e9:70:17:
         e7:b1:15:8b:40:33:f1:73:d9:7d:cd:2c:c7:6f:46:b9:fa:f6:
         cd:4d:3e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:08 2024 by rpki-client on console-fra.rpki-client.org