Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b21d7a7-caf9-3826-af33-8abd3e86ff6f.roa
File:                     6b21d7a7-caf9-3826-af33-8abd3e86ff6f.roa (raw, json)
Hash identifier:          4RUXHM5YOreVFM8E2EewVVmcWko8VDLF7Xcv7Q8P1s8=
Subject key identifier:   82:0C:A6:20:B1:75:B6:23:AE:CA:79:A6:95:38:5A:2D:69:31:04:BE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC1144C6D05CDE4EA3EB5600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b21d7a7-caf9-3826-af33-8abd3e86ff6f.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        24.216.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:11:44:c6:d0:5c:de:4e:a3:eb:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=58d74f5a-efb3-4806-a017-c3c30478ae26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:f6:b9:09:48:1a:94:fb:16:b8:70:a1:87:
                    48:bd:64:c1:c4:56:83:90:c6:91:4b:bd:4e:02:08:
                    f6:f9:e1:f7:58:0d:9b:68:43:16:f5:d6:66:fa:e2:
                    52:94:85:c6:3d:dc:5a:6c:59:67:74:0f:94:e4:41:
                    03:f8:0f:1b:5b:81:48:5f:5a:cf:0d:a6:12:ac:f1:
                    f5:a4:0b:1e:e1:5c:c7:37:5e:cf:cc:a5:e3:a7:9e:
                    19:c2:bd:33:43:fd:25:08:7c:04:53:0c:ff:d8:51:
                    42:66:7c:b1:36:0a:6b:cb:d9:e0:b1:00:be:8a:5c:
                    de:30:88:dd:00:24:af:52:ac:c9:74:67:d3:ff:40:
                    fd:c2:43:34:8d:45:d3:80:d9:8a:53:97:21:65:76:
                    88:01:8c:71:dd:52:63:94:79:39:f6:75:9c:d4:04:
                    96:08:13:02:77:84:7e:30:80:f7:af:dc:67:33:d8:
                    3f:6f:ad:b8:74:98:81:3c:7f:ad:32:42:38:6d:3d:
                    8b:e3:4b:bf:52:f0:c9:2c:b0:0f:7f:52:54:4e:4f:
                    be:d1:49:f3:0f:f9:49:8b:3e:65:f7:3d:c9:fd:4b:
                    60:04:fc:a5:38:d1:72:ae:88:36:d3:ec:fc:fc:76:
                    c9:35:f8:06:3e:95:cc:f7:cc:2f:89:11:e3:39:b0:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0C:A6:20:B1:75:B6:23:AE:CA:79:A6:95:38:5A:2D:69:31:04:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b21d7a7-caf9-3826-af33-8abd3e86ff6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.216.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:48:4c:54:37:e7:11:be:91:82:30:fe:b8:a5:f0:17:e5:0d:
         00:17:78:41:df:e6:f4:a4:7b:5f:8c:59:a7:2e:12:f2:a0:4c:
         e2:25:76:e8:95:2d:7f:23:88:4a:f3:4e:9c:9a:1e:c2:77:25:
         54:81:7f:bf:c8:c5:ca:16:4a:85:5b:6c:03:16:36:55:be:be:
         21:c4:c8:0c:e9:46:ce:d6:73:80:d9:12:8e:bd:17:7b:53:ec:
         4b:14:ff:1c:b5:ee:02:8d:c6:9f:cd:66:4e:d0:38:b4:70:4d:
         6f:ba:92:11:82:f7:ee:5e:f4:f5:cf:73:ef:da:59:c9:83:15:
         ee:2d:72:e2:33:ff:09:8a:72:7d:40:b7:15:10:37:13:58:6c:
         9a:3c:57:e9:8b:2a:71:c6:59:0a:5d:22:b2:11:db:67:9f:bf:
         5f:94:b3:a2:91:02:44:63:4f:b0:a4:9d:0c:6e:4f:db:16:0f:
         2a:d2:f0:b8:81:ee:ae:e5:3d:d7:f0:20:b2:63:08:36:78:32:
         29:45:b8:25:12:3d:b3:92:7f:3f:75:86:fe:b5:21:40:9a:e2:
         ef:ef:71:0f:44:eb:9b:6a:62:b3:1b:74:17:7f:4d:8e:76:93:
         ec:e9:ea:c8:d8:6e:76:68:ae:2c:5f:f3:a4:f3:4c:55:39:8c:
         ce:d7:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:45:05 2024 by rpki-client on console-ams.rpki-client.org