Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/708fa623-c18f-3557-8050-ec3ce5684921.roa
File:                     708fa623-c18f-3557-8050-ec3ce5684921.roa (raw, json)
Hash identifier:          3314FwqOi+lR3t6H+YpDmIPEakvBTZoTsBUkYn7CI3Q=
Subject key identifier:   33:88:34:B8:42:16:D2:6D:05:08:6A:26:AF:39:3A:47:72:D0:8F:FF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583934D1C89D548B5B9F4B5D9600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/708fa623-c18f-3557-8050-ec3ce5684921.roa
Signing time:             Wed 10 Mar 2021 05:00:00 +0000
ROA not before:           Wed 10 Mar 2021 05:00:00 +0000
ROA not after:            Wed 03 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        24.177.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:34:d1:c8:9d:54:8b:5b:9f:4b:5d:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 10 05:00:00 2021 GMT
            Not After : Mar  3 05:00:00 2027 GMT
        Subject: CN=284b4d8b-8f4b-491f-bc1b-2580a74f348d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:98:db:3d:f6:77:fd:fc:d1:d0:69:89:da:82:
                    50:b8:db:e5:a9:1c:1a:90:4a:a2:cf:d3:04:fa:64:
                    c7:23:c1:50:ab:5a:71:d0:6c:80:c4:55:76:db:87:
                    3e:fd:13:73:d6:a4:5c:08:d7:71:a7:09:13:d1:ac:
                    81:1d:72:37:0f:73:83:3f:4a:82:96:dc:9c:e1:f9:
                    5c:29:ae:06:bc:6c:b2:18:30:05:c4:34:58:bc:1b:
                    4f:a7:4d:d7:17:2d:f2:dd:12:13:43:a8:6b:9f:77:
                    14:42:cd:39:7c:da:28:1d:cc:36:6d:e5:c9:c3:22:
                    df:34:37:24:41:75:fc:04:eb:74:c5:f5:1c:2b:8f:
                    69:f0:a5:13:7a:f0:36:97:88:38:90:91:e2:79:c6:
                    82:07:f4:d3:e2:5e:72:93:b0:21:ae:86:bc:09:53:
                    95:0d:65:30:80:1c:a6:08:20:72:20:b5:85:fc:e0:
                    b3:10:19:2f:4e:5e:b1:57:80:00:36:c3:34:97:30:
                    22:8a:92:24:7f:20:c0:e6:0c:6f:af:54:72:c0:8d:
                    00:6b:51:3a:0f:c7:cb:c1:d5:0b:97:62:bb:fb:0c:
                    4f:58:39:78:68:f6:cd:7a:1b:69:b8:06:e7:27:34:
                    ef:c7:51:f8:b8:c7:c2:bb:38:7a:40:a9:64:ee:d0:
                    4b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:88:34:B8:42:16:D2:6D:05:08:6A:26:AF:39:3A:47:72:D0:8F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/708fa623-c18f-3557-8050-ec3ce5684921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.177.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7f:fc:57:3d:38:5f:97:f2:b3:54:45:f2:f8:0b:d0:ad:c1:
         56:da:cf:3a:b8:f5:7d:9d:e6:d6:f3:e9:9c:01:49:dc:bc:a8:
         5a:b3:c7:08:c4:13:c9:f8:ed:56:b7:01:33:e1:d7:56:6b:d3:
         cd:44:3f:d1:f8:8d:a7:cd:3f:24:44:45:c2:e8:7a:18:dc:ff:
         04:9c:e5:45:41:09:4f:08:91:83:4e:96:09:13:64:ce:dc:0b:
         ef:76:c7:28:47:ac:29:cf:9d:95:70:db:74:ca:81:6e:23:6e:
         db:5a:52:d0:77:7a:a9:5e:b9:6b:26:b0:ce:1e:e3:c3:9f:34:
         64:88:c0:bb:16:54:f7:9e:4d:2f:7e:d2:39:26:86:92:ac:46:
         50:d5:90:b4:c4:4b:e8:74:72:54:3d:68:61:18:77:2d:40:e5:
         59:62:60:27:90:87:5d:42:0b:81:0b:5a:ad:26:cd:01:ea:e9:
         69:61:81:43:1e:75:62:32:16:31:fa:4b:6c:22:7f:24:9a:6e:
         a1:ca:b9:30:ea:f8:43:a6:9c:8d:c9:b6:95:87:05:e0:c3:47:
         37:f3:dd:2b:f0:e8:fa:e2:b3:9d:64:e9:e2:fb:4f:46:01:a5:
         5d:27:32:9d:ad:f3:c0:74:b5:c0:a4:57:a2:e2:c2:d2:cc:1a:
         bf:c7:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:11 2024 by rpki-client on console-fra.rpki-client.org