Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b5c9f8e-f63e-3b0e-ae7f-d8463d5784bc.roa
File:                     8b5c9f8e-f63e-3b0e-ae7f-d8463d5784bc.roa (raw, json)
Hash identifier:          9Ayuer5kWS+feQCy+Kcwd+yy/SVBNVwxkPK0PWX4I7A=
Subject key identifier:   52:EB:23:A1:09:84:C6:40:60:F8:42:02:B6:26:AC:D4:A2:DB:BD:C8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EA27135E8D141119D3640
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b5c9f8e-f63e-3b0e-ae7f-d8463d5784bc.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        24.196.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:a2:71:35:e8:d1:41:11:9d:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=43916e05-423c-4c90-8b3e-47ee1a2d5cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:6e:0c:f4:56:58:d4:d2:90:50:3b:65:63:
                    ee:24:f8:cf:39:c7:ef:c8:23:88:9d:b0:aa:2f:94:
                    d8:8e:90:24:7b:45:09:39:62:4d:71:54:0f:76:2d:
                    1f:b8:41:30:18:4e:75:1c:44:e5:26:cd:2d:9d:12:
                    46:9f:66:53:e3:0b:24:60:65:07:cb:5e:cb:84:86:
                    5f:48:40:a8:92:59:fa:83:e1:6e:3d:c9:cb:de:63:
                    0f:af:b2:8f:d8:af:b2:7c:69:20:01:6a:5b:f6:58:
                    e6:ca:92:c5:0a:33:54:81:40:a7:14:03:5d:8c:86:
                    9b:10:39:ff:c9:2f:d2:bb:31:27:b2:cf:ac:31:99:
                    bd:a5:14:ed:74:ae:ec:7b:b6:2a:08:34:d2:17:f6:
                    7d:b2:c9:9a:20:7f:20:96:d0:8b:b6:97:ff:99:af:
                    ae:fb:9e:d8:1f:9c:87:bb:ed:1e:0d:b9:05:90:c5:
                    83:3e:29:c3:1b:84:b0:48:d3:3d:3b:6f:80:99:af:
                    b7:48:1e:da:95:2e:e0:d6:39:9f:b2:57:21:2f:1e:
                    74:a9:6d:48:c5:7a:ee:cb:63:c6:df:f0:e0:fb:8d:
                    f8:1e:31:5d:20:f4:47:48:e9:0a:07:69:fa:46:54:
                    9d:ed:5c:f8:6c:a0:8d:2c:5b:f1:2d:86:a0:79:b5:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EB:23:A1:09:84:C6:40:60:F8:42:02:B6:26:AC:D4:A2:DB:BD:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b5c9f8e-f63e-3b0e-ae7f-d8463d5784bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.196.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:16:2d:c3:ec:18:07:10:c1:fb:f5:30:6a:f1:9c:be:80:87:
         e8:54:ff:58:c0:2e:7f:a9:8e:8d:c9:7f:97:bf:d6:04:f7:c7:
         70:8b:b8:be:87:4b:5c:a9:a7:cf:19:90:52:f2:da:90:24:d2:
         8a:40:27:79:16:19:1f:8f:b2:75:d6:b3:ea:c8:69:89:7c:d2:
         15:02:80:c2:9c:34:10:3c:43:89:cb:67:18:c0:d4:03:9f:d8:
         61:30:6f:4e:dc:03:a4:eb:dd:8a:09:69:b5:2e:df:d7:05:7d:
         af:8d:f0:fe:9b:9b:60:31:7b:6d:ac:b6:ac:5d:e7:e4:fc:51:
         a1:6a:ae:f9:a4:ff:04:cb:2f:66:84:b9:30:3c:d5:1f:a3:56:
         4d:dd:14:84:85:f8:f3:ff:ae:55:bf:b2:14:ad:a9:7d:44:86:
         b4:77:24:79:bb:a1:34:aa:3e:4c:14:f3:e2:c3:7a:db:2a:fb:
         22:08:17:8a:2a:7f:35:45:0f:6b:ae:11:bf:65:e9:08:f9:2f:
         ab:a6:f1:09:2c:a1:ca:ca:36:b9:b3:fb:a4:c1:d6:c9:45:57:
         22:1b:6b:f2:8c:e6:42:c2:d6:7d:bb:92:8d:9c:27:2b:ce:ec:
         b8:30:54:9a:1f:ac:af:78:26:b3:04:a6:12:fc:1e:50:fd:88:
         f9:37:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:55:08 2024 by rpki-client on console-ams.rpki-client.org