Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa
File:                     948a4eb4-2363-37ae-bcd7-e82c57868f30.roa (raw, json)
Hash identifier:          4nbi1/A2m42mQWzvWfyQAQeFlEokFOL++dcoBj3NmJA=
Subject key identifier:   CD:91:03:5B:E0:57:28:52:92:0D:1F:2C:C0:C9:08:EB:07:09:BD:28
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DFE346260434897B3ADC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        24.159.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:fe:34:62:60:43:48:97:b3:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=0c2f6749-33d0-457f-8b4a-a52ddf077e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f4:73:bd:37:48:d9:18:21:23:a2:cd:3d:fb:
                    4f:02:71:35:d5:85:9b:43:9d:c4:8e:2e:56:a4:f4:
                    6f:38:e9:b6:ac:45:c8:a2:6f:d8:82:67:e5:17:47:
                    25:af:d7:76:af:74:9c:06:39:e3:d6:f0:af:a9:59:
                    f2:64:98:c5:4f:bd:6a:dd:aa:57:fc:75:67:2a:5e:
                    7e:06:dc:10:ba:c2:d2:f0:89:8a:43:3f:b6:9a:c9:
                    15:b1:71:8d:38:de:4b:03:25:42:04:0a:2a:25:5a:
                    60:d6:e3:d3:e5:44:65:82:ce:a2:ea:9c:07:49:61:
                    36:d2:78:be:81:cb:cc:67:25:64:b2:5b:dc:a9:13:
                    61:0b:59:75:34:6c:97:3a:ce:8d:06:57:cb:4c:1a:
                    39:be:ad:5a:33:b2:24:b2:f5:52:6e:a6:88:ce:69:
                    ba:b4:60:f8:45:3d:29:0c:c8:3d:0f:0e:58:8d:e3:
                    a3:c7:72:13:fd:c9:c3:20:b5:02:6c:13:7b:62:f0:
                    8e:32:11:d4:bc:b9:d1:f0:5f:24:5c:79:45:d1:a8:
                    a3:d8:2f:95:34:a3:2e:9a:8c:7b:97:d5:28:a4:a2:
                    aa:01:de:8e:f7:c1:4c:a6:5f:b5:f1:d5:60:ac:48:
                    9d:c5:02:f6:fc:cc:68:c0:fd:3b:36:ea:46:7d:f4:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:91:03:5B:E0:57:28:52:92:0D:1F:2C:C0:C9:08:EB:07:09:BD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:5c:af:7b:75:bd:3d:ae:eb:04:c7:95:c7:9a:b1:7a:cc:72:
         37:65:8b:17:b3:74:ad:af:18:de:34:47:e9:f3:85:3c:08:b8:
         01:f0:98:57:6b:b5:95:8b:d4:2e:13:ec:99:8b:97:07:58:6d:
         bf:21:c0:a4:1a:4b:b6:4a:aa:b1:dd:52:a8:cf:52:05:38:00:
         ed:d7:1b:96:1f:30:5a:7b:56:70:6e:ec:e4:9b:5e:a1:9c:7d:
         ed:ee:cb:62:0f:c2:9d:be:73:d1:b1:91:29:39:33:b1:84:61:
         0f:f8:57:5e:01:d5:48:14:5c:64:f9:fb:4e:f2:6b:14:d9:21:
         59:7e:18:4a:aa:37:a4:21:2b:28:4e:5d:44:6a:03:e0:e5:fc:
         70:62:22:f4:4a:e3:7a:f5:0e:71:5d:bc:18:01:82:98:9a:5f:
         b5:e4:da:13:a2:a3:36:48:65:ef:19:4d:d3:91:03:58:97:33:
         72:91:9f:fb:e0:4e:f9:32:9f:ed:c4:70:f3:12:03:68:ba:bd:
         44:c5:4d:25:2d:e1:27:d1:4d:c2:d9:af:a4:f5:ca:37:aa:b7:
         18:0f:43:96:13:24:6e:de:b9:7c:6e:1c:cf:59:98:ec:38:cd:
         0f:92:ec:f3:32:d6:ee:ac:34:89:30:7d:bc:3a:5e:1c:5a:30:
         8b:f4:fd:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijf40YmBDSJezrcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MGMyZjY3NDktMzNkMC00NTdmLThiNGEtYTUyZGRmMDc3ZTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfRzvTdI2RghI6LNPftPAnE11YWbQ53Eji5W
pPRvOOm2rEXIom/YgmflF0clr9d2r3ScBjnj1vCvqVnyZJjFT71q3apX/HVnKl5+
BtwQusLS8ImKQz+2mskVsXGNON5LAyVCBAoqJVpg1uPT5URlgs6i6pwHSWE20ni+
gcvMZyVkslvcqRNhC1l1NGyXOs6NBlfLTBo5vq1aM7IksvVSbqaIzmm6tGD4RT0p
DMg9Dw5YjeOjx3IT/cnDILUCbBN7YvCOMhHUvLnR8F8kXHlF0aij2C+VNKMumox7
l9UopKKqAd6O98FMpl+18dVgrEidxQL2/MxowP07NupGffQmsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2RA1vgVyhSkg0fLMDJCOsHCb0oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTQ4YTRlYjQtMjM2My0z
N2FlLWJjZDctZTgyYzU3ODY4ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGJ+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMdcr3t1vT2u6wTHlceasXrMcjdlixezdK2vGN40R+nzhTwIuAHwmFdr
tZWL1C4T7JmLlwdYbb8hwKQaS7ZKqrHdUqjPUgU4AO3XG5YfMFp7VnBu7OSbXqGc
fe3uy2IPwp2+c9GxkSk5M7GEYQ/4V14B1UgUXGT5+07yaxTZIVl+GEqqN6QhKyhO
XURqA+Dl/HBiIvRK43r1DnFdvBgBgpiaX7Xk2hOiozZIZe8ZTdORA1iXM3KRn/vg
Tvkyn+3EcPMSA2i6vUTFTSUt4SfRTcLZr6T1yjeqtxgPQ5YTJG7euXxuHM9ZmOw4
zQ+S7PMy1u6sNIkwfbw6XhxaMIv0/WQ=
-----END CERTIFICATE-----
Generated at Mon May 13 01:45:11 2024 by rpki-client on console-ams.rpki-client.org