Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8dd60ff2-c6a7-3a58-9c7a-04cd57eb3e99.roa
File:                     8dd60ff2-c6a7-3a58-9c7a-04cd57eb3e99.roa (raw, json)
Hash identifier:          dA6XHRIY6TlVHfwGg+dlkI1Wa5hEIEIGbCPhkMiXiDE=
Subject key identifier:   03:62:64:DB:F7:7E:0F:8B:4E:FD:69:B6:54:5B:AD:88:85:B5:A4:87
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E9C10F8FC8E2C463FA580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8dd60ff2-c6a7-3a58-9c7a-04cd57eb3e99.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        24.176.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:9c:10:f8:fc:8e:2c:46:3f:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=f8846ed4-0b24-4a73-a468-77152b6a41e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f9:9c:bc:3b:96:5c:4e:17:60:88:c2:85:60:
                    6e:06:2a:11:87:fa:9e:d5:af:a7:d6:f3:74:c1:cd:
                    cb:1f:b8:1f:d9:ce:66:df:fb:7d:30:ba:9c:3a:e8:
                    8d:c5:44:8f:9e:19:cb:20:7a:76:f2:dd:8c:bb:26:
                    14:cd:9b:57:13:14:39:aa:da:a7:6f:95:34:d9:de:
                    41:5b:61:73:f9:1b:0b:4b:53:04:ff:06:36:bb:b5:
                    45:13:94:fb:db:83:f6:89:a3:7d:04:c9:f3:c8:53:
                    37:c5:0f:c5:ff:62:bc:1d:66:d4:c6:99:99:e3:c4:
                    79:7f:db:a1:59:08:34:90:e5:59:a8:c7:39:0f:95:
                    51:cc:c6:36:2d:10:8c:ef:79:86:40:a4:59:43:61:
                    0a:2b:df:a9:e3:b5:54:58:b4:04:79:b7:c0:f1:79:
                    b6:81:e8:63:71:f8:5d:5d:92:b9:80:64:f5:f8:c5:
                    03:4c:80:83:a3:89:b2:c6:dd:49:e3:35:81:3d:cc:
                    e3:b2:df:bd:21:ab:23:ba:b0:b2:68:c9:fb:33:ac:
                    46:08:79:06:91:da:ca:fd:82:65:22:24:fd:d5:7a:
                    8c:0c:c5:42:6d:a7:71:6e:2c:6e:45:f6:ec:ec:09:
                    fb:9e:a8:85:19:76:3e:10:80:cc:81:6b:a6:67:e3:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:62:64:DB:F7:7E:0F:8B:4E:FD:69:B6:54:5B:AD:88:85:B5:A4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8dd60ff2-c6a7-3a58-9c7a-04cd57eb3e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.176.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:18:22:61:01:c3:c4:8b:ab:a8:3b:e6:ab:62:6f:06:bb:85:
         8f:58:2f:07:2c:44:33:47:d2:1d:56:8b:be:53:76:8c:b0:be:
         bc:fc:d1:3d:cb:8d:34:42:16:f0:18:55:9f:7e:ff:70:4c:be:
         16:27:56:54:ae:c5:02:8f:67:92:8e:14:46:6a:31:1d:8f:c3:
         dc:73:66:ee:e4:96:9a:f6:79:d0:99:2c:75:cd:3e:0e:2f:28:
         f1:f5:fd:e3:53:d5:be:8b:da:08:33:92:81:09:a5:64:48:d8:
         44:2c:b2:20:25:e7:c9:8f:47:32:ed:b7:13:14:a0:31:46:74:
         14:69:c4:f3:ed:ec:b2:fe:cb:57:b4:6d:3f:75:3c:b7:7f:a8:
         4a:9d:e8:76:0b:f6:25:fb:75:6f:ab:ef:0b:ce:9d:b0:37:db:
         33:81:a9:ac:37:74:cd:d8:cf:7d:5b:f0:4f:4d:1a:2b:66:d1:
         6d:3b:27:6f:65:59:59:f7:dc:1b:26:e8:85:a0:e0:e2:d0:b7:
         cb:59:21:6c:2e:e6:49:c3:ef:55:3a:5f:b7:52:90:9a:e6:2b:
         58:37:5a:9a:53:d4:bb:ee:f6:0f:03:6b:48:92:2b:e5:d5:a3:
         13:97:63:f6:d7:4e:3a:dd:f4:74:d4:f3:8f:b2:d6:c4:c3:e9:
         82:04:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:43:16 2024 by rpki-client on console-ams.rpki-client.org