Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c45ad0a-e6d5-3e5b-b68b-66c25d1bc494.roa
File:                     8c45ad0a-e6d5-3e5b-b68b-66c25d1bc494.roa (raw, json)
Hash identifier:          papgJ33qA24Bo9t43A3q+EET+uxWSnKnrpFMt8cPVeo=
Subject key identifier:   3D:AA:6F:40:99:F3:98:77:BB:C4:8E:2B:DE:6B:57:1A:B3:98:DC:0E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EB902F039C6E66EA8A3C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c45ad0a-e6d5-3e5b-b68b-66c25d1bc494.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        96.36.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:b9:02:f0:39:c6:e6:6e:a8:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=aa448b5b-0d62-4913-9462-a302700a6419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:8e:9d:94:a7:2b:ea:66:a5:d3:f6:8b:04:
                    57:b2:57:16:4a:98:4a:41:52:a2:88:eb:25:24:50:
                    d3:f1:cf:60:7b:aa:a2:a2:04:8a:ec:b6:01:56:bc:
                    2b:93:d2:37:92:39:cb:16:2e:4e:5a:b3:38:f1:53:
                    10:1b:e6:bb:74:42:76:98:68:d8:5f:da:ad:37:13:
                    0b:d7:1c:d5:f5:ba:57:46:0c:3a:89:c6:e2:b2:66:
                    5a:41:9c:be:89:68:b0:2f:2b:91:1d:75:0e:33:5a:
                    01:c7:13:6d:8b:8d:32:a6:e7:a8:29:63:e9:ff:51:
                    1a:24:89:07:02:9f:c4:22:62:bb:48:1a:a1:05:db:
                    b9:d7:07:68:10:44:50:dd:88:55:46:2e:8a:cb:a4:
                    72:59:13:cf:03:84:0f:e3:d0:ec:d5:5f:f1:d0:29:
                    b2:8a:b3:c6:b1:59:04:17:c1:8c:cf:8b:29:ba:ac:
                    6d:36:7b:81:cc:1d:99:6b:5e:ac:14:88:b0:20:0c:
                    35:38:87:10:60:b0:07:c1:8a:02:06:73:c5:b9:65:
                    88:c5:8d:af:8a:97:ce:50:75:41:1f:85:0b:54:08:
                    45:e4:70:80:fe:e7:93:af:d4:1f:bb:fb:e2:dd:cd:
                    da:98:0e:43:e1:c7:d3:e9:76:f6:f5:2f:e6:56:ce:
                    aa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:6F:40:99:F3:98:77:BB:C4:8E:2B:DE:6B:57:1A:B3:98:DC:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c45ad0a-e6d5-3e5b-b68b-66c25d1bc494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.36.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:c6:84:f6:f4:c5:08:b8:ce:d2:ad:64:9b:7d:3f:3a:bd:71:
         5b:c4:c9:d2:ca:bf:7d:5d:dd:ef:a9:14:3a:3d:44:f0:aa:cc:
         d4:75:64:ec:f0:73:aa:52:cf:03:93:11:7b:ef:a1:ca:06:5f:
         61:27:83:7d:2d:87:f0:a2:de:15:7f:1a:2e:9d:2e:00:90:8a:
         c3:d5:c1:9e:60:a6:67:c4:42:f4:67:49:37:c4:e5:5b:3c:21:
         1f:c2:d5:ad:9d:ce:d9:34:c3:c3:dd:80:4f:30:70:8e:51:92:
         63:d3:7c:d2:ab:c3:c5:7a:fa:b5:f8:4e:4b:43:33:60:b0:a1:
         ee:ac:97:6f:13:ec:30:3a:66:ce:00:55:3b:5e:a5:53:2a:9b:
         00:7d:ce:4f:96:a4:f5:56:79:97:19:be:9a:1f:f3:49:e4:19:
         e0:12:64:7e:a9:ac:c3:14:16:1a:c4:78:a9:46:bd:49:ff:84:
         ba:d1:8e:fc:c8:20:da:83:99:54:82:11:82:ec:7a:c4:08:96:
         04:77:9e:fe:f1:f7:69:61:ef:0a:1f:90:4d:86:18:8d:87:8b:
         e4:c7:93:0d:bb:91:1d:7c:32:e2:5d:db:1c:fe:2c:6a:01:99:
         a2:a9:e0:d5:85:d4:59:1a:8f:07:be:27:e6:6c:18:a9:d5:f0:
         18:34:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:05:08 2024 by rpki-client on console-fra.rpki-client.org