Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/591731c0-a732-3614-9e4c-6aeec3a00d3c.roa
File:                     591731c0-a732-3614-9e4c-6aeec3a00d3c.roa (raw, json)
Hash identifier:          6H9Q+VNRC8L2hcv1N01FFzn6YUev0y2K42R/Qozu8z0=
Subject key identifier:   9F:A2:9B:6F:A7:5C:2C:58:3A:02:C9:0B:FC:62:9C:31:47:F5:A2:A0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583934D1244F2178477040E28800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/591731c0-a732-3614-9e4c-6aeec3a00d3c.roa
Signing time:             Wed 10 Mar 2021 05:00:00 +0000
ROA not before:           Wed 10 Mar 2021 05:00:00 +0000
ROA not after:            Wed 03 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        24.179.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:34:d1:24:4f:21:78:47:70:40:e2:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 10 05:00:00 2021 GMT
            Not After : Mar  3 05:00:00 2027 GMT
        Subject: CN=b8592e58-6bdc-4560-982d-49c297df9411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1a:c2:49:85:1b:74:61:ab:53:3c:84:1c:09:
                    79:79:f8:b8:50:a0:f7:83:f8:8b:a4:cc:9e:71:c8:
                    d9:7f:5b:a7:b2:7a:78:3d:07:63:de:e5:4b:1a:79:
                    98:75:4a:07:9f:1d:ae:38:19:a1:a9:53:3b:74:0c:
                    74:70:65:aa:4c:d0:49:b5:77:c3:82:e3:03:b4:a1:
                    33:14:a3:d5:42:d9:e6:1d:0f:1d:f5:a2:b0:97:4c:
                    78:52:b7:b0:80:52:65:32:b7:e0:69:ea:36:81:88:
                    b2:15:5d:45:25:5e:eb:93:4f:3a:ce:28:bc:cf:36:
                    8d:41:f5:d7:a6:73:ce:21:56:58:09:16:9d:88:ad:
                    8f:af:b5:00:e5:6c:c2:91:2e:b0:c8:81:54:d7:d7:
                    af:c4:bd:86:c6:31:15:60:24:65:83:64:ec:b0:1d:
                    74:4d:02:b0:6b:60:ee:27:33:f7:15:0b:ae:7d:a7:
                    93:0c:9f:c9:2c:fb:5e:3c:c9:b3:a4:cd:5c:85:3a:
                    42:cd:c5:81:8b:49:75:e5:09:62:a1:ba:84:f3:9e:
                    a0:3b:5d:4d:4c:64:e3:ee:23:8b:c4:55:83:81:3f:
                    e6:a2:eb:f1:56:99:90:10:11:f1:3a:e4:1e:6e:c0:
                    6e:17:05:92:c4:f3:1b:72:44:52:42:80:b0:a8:a9:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A2:9B:6F:A7:5C:2C:58:3A:02:C9:0B:FC:62:9C:31:47:F5:A2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/591731c0-a732-3614-9e4c-6aeec3a00d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.179.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:68:65:cb:f9:86:2d:2b:54:8b:1e:94:e3:09:b7:b6:8f:0c:
         32:68:b2:5a:f5:48:ed:f5:9d:4c:21:cb:02:e7:f9:1c:0b:32:
         93:f8:80:a4:ce:0c:d2:08:ff:f6:04:72:d9:54:28:64:af:d8:
         67:a8:f5:24:8d:ec:8f:c3:04:10:c9:e1:8f:fa:c5:d0:ad:8d:
         19:16:db:b8:ab:1f:db:f8:77:9f:89:da:33:40:d7:88:bc:ee:
         e1:03:d8:8a:53:d3:96:18:cf:b6:4e:84:fb:8a:71:36:78:66:
         51:b4:48:51:25:e8:21:9a:4c:cb:a3:b1:a2:8f:08:b4:ee:c6:
         6c:36:85:d9:cf:53:bc:b5:fb:d8:91:a2:38:0d:61:3d:19:ff:
         83:a4:ba:71:88:b9:6b:4d:60:cc:0e:a8:39:1f:14:c2:3c:d0:
         18:05:92:df:9e:2e:0c:c9:68:7d:1f:24:17:7a:a9:47:ae:5a:
         e3:05:8b:86:07:4b:4f:82:f6:64:c9:a1:ca:2b:8c:9c:36:9e:
         c3:f4:a8:a0:3b:7a:8d:c1:1f:a1:3c:8a:d9:41:60:b0:9b:89:
         96:c9:d2:49:46:dd:44:66:ea:3a:41:16:10:5d:9c:87:d7:40:
         e8:e0:5b:ee:bf:9e:02:1f:3f:d4:5d:1d:6a:a7:71:96:1b:52:
         14:17:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:09 2024 by rpki-client on console-fra.rpki-client.org