Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9439ee36-8767-3249-9e3a-0be4383187bf.roa
File:                     9439ee36-8767-3249-9e3a-0be4383187bf.roa (raw, json)
Hash identifier:          Qcxi/NGuPyKymXhnzwE7f0WSA4dLpjzxoMrgKXD+Mdg=
Subject key identifier:   BA:78:42:AC:B1:0C:33:52:1B:58:6B:0D:A6:43:81:14:BF:96:5F:91
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A16A9F6D1CD34510EEB400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9439ee36-8767-3249-9e3a-0be4383187bf.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.181.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:6a:9f:6d:1c:d3:45:10:ee:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=be7b70da-52f8-49aa-88e8-1ef0039d77e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:38:2d:7e:b6:27:bc:53:8f:32:52:c0:3d:
                    b9:c7:79:58:a9:3a:de:d0:93:2f:d2:e1:51:8c:fb:
                    41:92:13:57:f3:fc:66:0d:b3:63:25:ea:df:01:58:
                    f5:a2:fb:70:60:f4:59:96:eb:cb:e4:f6:ad:d6:6b:
                    7d:c0:5b:c2:ed:94:ef:d2:50:65:d3:56:5c:17:62:
                    97:60:72:a4:3e:3c:59:12:8d:bf:70:f5:2f:99:28:
                    cb:64:df:2a:13:78:ce:f0:61:ca:0d:91:13:bd:e2:
                    0b:82:ea:4a:ce:03:b2:d0:0e:62:9e:22:41:4e:38:
                    e9:d7:71:a2:a5:a0:95:58:62:d1:b3:b9:0f:59:af:
                    4d:04:01:bc:15:a8:9b:dc:03:3b:b5:3a:81:dd:dc:
                    70:db:dc:05:85:97:c0:3e:19:b7:8c:e5:b5:72:68:
                    61:8f:53:d0:a2:cc:b0:6c:94:67:9e:93:f9:b5:49:
                    52:a8:0a:ad:27:25:c1:6e:c6:46:5c:ce:f8:0c:25:
                    eb:c2:3c:06:af:e7:b7:27:18:67:31:ba:3e:0f:3f:
                    84:62:b5:a6:17:a6:9a:6c:c4:dc:3c:7a:fc:fa:cb:
                    8d:11:13:f1:e9:c2:54:f9:91:ac:20:c8:34:d8:66:
                    67:34:60:fd:44:4d:36:e6:c6:6f:4e:d4:a7:a7:ae:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:78:42:AC:B1:0C:33:52:1B:58:6B:0D:A6:43:81:14:BF:96:5F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9439ee36-8767-3249-9e3a-0be4383187bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.181.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:5c:e5:d0:df:ac:8c:d2:b4:6e:10:cf:66:e6:c9:7f:11:b0:
         b0:95:38:83:ac:e6:f9:40:d6:51:70:9b:3e:30:b8:73:d3:8b:
         df:91:c2:bf:fb:ca:28:5d:d0:2c:42:96:e8:18:70:06:b1:39:
         17:80:82:45:78:02:ac:b3:31:81:b0:54:6e:f2:65:fd:77:bb:
         0e:7d:e3:7e:ad:27:30:73:f2:c7:48:f7:8e:aa:07:69:e8:91:
         d2:04:96:e9:1f:04:8c:36:be:0f:5c:90:e7:f5:e1:45:19:76:
         92:2f:28:8f:8d:22:a4:3b:e8:fd:39:ab:97:9a:44:2b:b3:b8:
         71:4c:d5:db:91:09:1e:ea:3d:6c:70:65:37:91:6d:56:62:ba:
         53:35:9c:03:d6:17:6b:79:06:78:a4:ad:c5:26:70:db:4f:78:
         7c:37:35:92:60:5a:11:2e:7c:6c:d7:00:7d:e2:f5:8e:77:fc:
         2b:b4:3d:3a:95:f5:d7:ef:94:1d:49:ff:5c:f1:0b:ef:5f:fa:
         ac:e3:98:fd:06:46:ee:71:c7:7a:48:ce:3c:99:bd:11:91:79:
         7c:1f:27:83:93:8a:93:d3:81:34:8b:04:fe:dc:26:1f:97:84:
         18:1a:7d:2e:92:66:4e:93:aa:0d:9f:05:1a:e7:74:a4:ea:05:
         5f:75:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:50 2024 by rpki-client on console-ams.rpki-client.org