Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa
File:                     948a4eb4-2363-37ae-bcd7-e82c57868f30.roa (raw, json)
Hash identifier:          aeu0acKahyUXxV70Sec97cUPyubGfpoAo/WdzS+QW7Q=
Subject key identifier:   AD:74:96:1E:F5:11:F5:A1:1C:58:9A:2C:17:32:FD:B9:8A:CD:94:4A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0DE8BF8F2B3D72731FF80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.159.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:de:8b:f8:f2:b3:d7:27:31:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=904f21fb-13d1-4e40-ad9c-8c38d3ecea5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:e0:3f:89:cd:64:cf:54:7f:e3:75:0e:de:
                    bf:2c:31:c6:82:5b:d5:9c:a7:78:6d:b7:15:cd:5a:
                    eb:70:b7:1b:6a:48:70:8a:e9:5d:90:93:c0:cc:cf:
                    f5:b9:82:a1:7c:2b:dd:1c:1f:ba:f3:6a:50:78:f1:
                    99:6a:94:44:aa:64:9b:91:ec:ea:3c:11:93:64:9b:
                    f2:de:1d:26:7d:fa:4f:18:4c:16:0b:fe:34:56:2c:
                    97:13:0e:cf:60:0a:53:10:82:85:45:94:13:da:19:
                    09:34:66:fe:00:74:31:32:6d:77:11:e3:ce:80:c5:
                    ed:90:7c:db:10:f3:ac:03:c8:13:b0:77:00:16:76:
                    f1:85:f2:95:d1:5b:75:89:b6:a5:20:d8:4c:d6:e0:
                    a9:5c:c0:5f:ad:df:b8:4a:83:13:5f:aa:69:32:49:
                    51:03:6a:f4:60:5d:7e:54:12:7d:27:e9:6b:10:2d:
                    06:69:08:b7:3c:dc:d4:b5:23:6c:89:37:41:4e:8e:
                    01:1d:b2:bd:1a:91:78:43:e5:38:cc:57:d1:97:78:
                    e4:07:77:b4:4e:f9:4a:f2:de:3b:7f:62:82:37:f0:
                    b5:80:fa:ca:97:41:ed:9d:ec:7c:09:82:e7:24:03:
                    51:9d:4a:df:f3:e7:c6:e5:b2:c3:12:10:9c:d5:9a:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:74:96:1E:F5:11:F5:A1:1C:58:9A:2C:17:32:FD:B9:8A:CD:94:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:47:d5:4c:3d:d4:0c:a4:4e:e8:59:90:24:17:ae:12:73:1a:
         af:f0:43:cc:76:86:06:9e:b6:37:b5:7d:b3:45:2f:49:d5:11:
         52:6d:63:20:09:f0:ec:9e:6c:69:67:1b:4a:eb:1b:55:8b:46:
         5e:61:8c:b0:66:d7:14:79:d0:2d:42:86:7c:42:6b:89:c2:cb:
         5a:fc:0d:f4:b9:a0:29:95:41:59:de:ed:3f:71:7f:d3:ce:6f:
         f3:f9:7d:0a:d0:87:07:0d:9d:7c:98:bf:1e:92:c8:1a:0e:16:
         0e:0a:9f:b4:8a:c7:52:25:e9:75:c8:08:7a:b8:bd:39:5a:7d:
         03:d8:d2:5b:ff:fb:24:68:c3:ec:c5:59:18:32:1b:30:ff:31:
         93:e2:19:0b:68:5a:b7:14:43:6a:07:32:89:51:73:e4:e7:e8:
         f2:42:de:72:01:cb:1e:48:ae:d5:94:ea:82:92:20:1a:f3:a3:
         02:38:09:39:02:de:1a:9a:23:80:ea:ae:e4:8c:82:f6:a8:b3:
         57:66:28:5f:a9:db:59:ad:6f:a6:fe:d4:ba:91:f6:d7:f1:c4:
         77:f8:5b:ce:1c:50:49:58:74:06:41:22:a0:25:bb:c1:4b:b2:
         7d:45:e0:4c:b5:8b:95:f3:94:34:08:70:5f:1a:ab:44:41:0b:
         6d:04:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:15 2024 by rpki-client on console-fra.rpki-client.org