Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/740d0767-6a27-3a8e-a82a-5759e2351ab2.roa
File:                     740d0767-6a27-3a8e-a82a-5759e2351ab2.roa (raw, json)
Hash identifier:          bElQ0kISZn9D8M8Oc+yPO0e82s8y8lLAhM6HnvlrhB4=
Subject key identifier:   FE:16:52:27:0A:2F:E6:5C:97:AC:D2:AB:62:EF:18:84:61:99:0C:10
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0C94D9BB39A7031AC4040
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/740d0767-6a27-3a8e-a82a-5759e2351ab2.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20001
IP address blocks:        192.61.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:c9:4d:9b:b3:9a:70:31:ac:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=12494642-08ba-45cf-8725-2e71d6ba47e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:53:3d:90:7f:fb:2f:07:65:d9:79:f9:08:
                    b8:86:5f:fb:6d:89:31:6e:19:1a:d2:ea:fc:68:47:
                    e8:57:37:7e:98:37:c6:77:14:fc:4e:92:fa:80:31:
                    42:58:ed:62:5e:54:08:36:c7:c7:dd:9a:bc:05:2d:
                    95:d5:be:48:47:55:99:7b:c6:6e:60:67:ae:d1:eb:
                    ab:6b:3c:24:28:e1:7f:bb:92:ec:6d:65:37:00:25:
                    0e:2f:10:16:b2:e6:20:da:2d:3a:64:ad:67:f7:2c:
                    c5:fe:c7:d4:0a:02:5d:c5:ab:74:00:95:50:69:33:
                    f4:fe:8d:8b:9d:33:8d:4a:cd:8d:48:f3:2f:66:9e:
                    c4:63:d0:9f:bb:fb:34:b3:e2:80:ea:e2:90:19:2f:
                    d1:34:b5:27:63:a0:3b:1f:59:b7:06:a8:1f:4c:c6:
                    40:1b:bc:b3:9b:ad:44:84:25:78:f0:9c:a6:5f:e8:
                    80:1b:f1:8d:94:e0:2b:96:d6:2b:f8:23:cc:15:c1:
                    10:e2:80:9e:08:87:8c:eb:6e:97:9a:a1:70:a9:4a:
                    09:e5:9c:f7:37:0e:4b:65:65:76:dc:3e:e1:49:6d:
                    ee:02:d7:7f:9d:21:75:2b:e2:65:48:3b:cf:42:8c:
                    87:e2:d6:52:95:0a:b8:40:d2:49:9c:ef:48:85:d2:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:16:52:27:0A:2F:E6:5C:97:AC:D2:AB:62:EF:18:84:61:99:0C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/740d0767-6a27-3a8e-a82a-5759e2351ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.61.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:93:3b:f8:ae:3d:61:9a:7d:81:03:bb:ee:e0:bf:c7:aa:6a:
         78:1a:4b:ba:8a:4a:b9:90:8a:97:62:a1:1c:60:22:72:dd:e9:
         31:d8:de:e1:de:2a:80:23:c5:bf:da:bb:0d:32:dd:98:42:0f:
         bc:3b:ea:aa:86:53:4a:e6:95:6a:cb:9f:27:43:fe:1d:05:73:
         19:04:8b:46:26:3f:b1:14:4e:fb:f5:a7:54:fa:5e:0b:06:3c:
         6a:47:7f:ee:71:1f:e3:40:3f:84:cd:c2:dc:db:6f:e8:ae:3d:
         44:cc:c1:a0:30:ac:92:d4:1b:25:29:ac:89:c6:5e:b1:01:b8:
         be:e8:ac:12:42:d6:d5:8a:65:5d:9c:c3:1f:8f:8b:3e:5c:f9:
         6a:33:0c:f5:5d:86:be:e9:0b:86:80:86:40:d9:84:0a:7c:43:
         ef:81:ae:15:02:94:20:ad:6e:cb:de:1c:7f:52:66:3e:49:cb:
         30:ef:d7:f5:21:c6:75:00:c9:75:c7:59:fd:2a:ed:92:48:e1:
         ad:81:17:cd:6c:2e:66:63:04:be:66:93:02:bb:1b:23:5e:d4:
         34:27:4d:50:7c:6d:dd:d1:23:2e:8e:02:71:d3:22:85:b6:45:
         a1:47:78:5d:b2:88:67:e4:fc:d7:33:13:fc:fd:88:59:72:ca:
         35:e0:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:44 2024 by rpki-client on console-ams.rpki-client.org