Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/880d7411-f0a8-3331-9c09-c7c4dc7a509b.roa
File:                     880d7411-f0a8-3331-9c09-c7c4dc7a509b.roa (raw, json)
Hash identifier:          cgb0WXIxj4L4AHPwQRH8Mn82uQE4i0EA2dveu8ZkLpU=
Subject key identifier:   13:FA:E8:51:BE:51:4E:29:71:89:92:FF:6E:C0:AF:1B:2F:D6:85:1B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0D1FC370BFA8E79448280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/880d7411-f0a8-3331-9c09-c7c4dc7a509b.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.247.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:d1:fc:37:0b:fa:8e:79:44:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=c5e38a4c-2a00-4bd8-b84d-8a03fd8c70f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:c1:e7:6a:15:ef:e3:a2:6b:bb:7f:71:92:
                    7d:41:0a:e1:d1:e8:d1:f8:25:cf:4d:d8:27:97:46:
                    99:91:53:f1:ef:cd:d6:01:47:c3:e9:3a:71:68:51:
                    ea:3e:3c:a5:29:04:e4:2f:59:2d:de:3b:53:c7:a3:
                    76:98:28:51:cc:9d:92:77:8f:56:66:d0:4b:18:af:
                    67:82:f0:f8:51:85:37:fa:0d:83:b3:cc:51:ba:b1:
                    ec:34:47:7d:2b:ea:04:6e:03:cd:78:b0:81:47:3b:
                    be:90:e4:85:db:ac:5d:ee:6e:8a:99:9e:78:07:c9:
                    47:c9:a7:ed:3e:10:ff:1b:fb:9d:d6:29:9a:48:02:
                    05:c7:d8:96:9a:9a:ff:bd:98:a7:42:0b:78:8a:ea:
                    c4:ca:96:32:c6:02:1c:4c:87:35:98:f4:9a:85:61:
                    1d:b0:9c:d9:f3:f3:61:80:1d:43:7f:ee:bf:dc:40:
                    2b:75:fc:c9:fc:ad:39:20:8b:82:54:f3:db:71:74:
                    27:47:11:8c:41:6d:f7:f7:67:65:a7:56:aa:a1:73:
                    70:eb:b1:5b:f3:c5:50:41:01:79:e8:7b:43:42:e8:
                    b1:20:c7:9d:f6:dd:78:7b:3f:e8:f2:33:ed:2e:23:
                    5f:1a:d0:3a:b4:57:5e:86:3e:b0:51:86:cc:3e:de:
                    79:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FA:E8:51:BE:51:4E:29:71:89:92:FF:6E:C0:AF:1B:2F:D6:85:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/880d7411-f0a8-3331-9c09-c7c4dc7a509b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.247.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:7d:57:fc:be:b7:94:ff:76:18:78:ea:69:95:5e:89:95:98:
         ea:6f:1d:1d:95:ea:4e:8c:e2:30:09:71:70:a4:80:04:47:eb:
         91:c7:6d:0a:3b:5d:5d:62:de:87:51:93:7a:a8:b9:97:42:21:
         7e:33:11:46:ad:5a:a8:9d:12:ad:f3:01:eb:39:c7:77:88:f8:
         3c:02:7a:58:49:9a:40:ee:46:0f:47:cb:ff:ce:fb:28:92:4f:
         d6:22:1e:e7:9e:a7:33:af:f6:70:77:5e:2f:73:8b:3a:3e:ba:
         9d:62:66:15:20:e9:89:1b:50:5e:f4:d0:5d:72:c0:25:3c:2a:
         3b:f6:4e:df:84:9f:a3:f4:aa:cf:1c:59:30:80:33:6d:59:d7:
         af:33:13:14:9d:08:b2:86:ed:51:eb:f9:06:94:ec:9b:31:e7:
         bb:2c:89:83:25:b5:0e:28:12:c0:52:f4:5a:22:85:37:47:8a:
         8f:85:b3:d0:c9:7c:8c:2e:1e:4b:31:67:f0:e2:df:9a:8a:fb:
         61:1e:41:f6:c2:5c:9d:56:34:38:ca:0f:2d:99:f6:78:8d:cd:
         95:a2:73:3c:41:eb:f9:f1:b2:bd:4e:5a:ad:27:e8:7a:4c:ed:
         d5:fe:41:34:2e:c6:b7:9e:61:56:2f:bb:84:8b:9c:51:1e:25:
         2d:19:01:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:49 2024 by rpki-client on console-ams.rpki-client.org