Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/94952f6e-fefc-326e-ac28-1dc54c110b69.roa
File:                     94952f6e-fefc-326e-ac28-1dc54c110b69.roa (raw, json)
Hash identifier:          A+p/uaPWTWCSDKfDvQMhvyhfAs32TJrx77BsSVPCL54=
Subject key identifier:   B7:DF:8C:F5:16:A3:F3:4E:F6:8C:F7:FA:85:A2:F1:80:3F:0E:CB:D3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583934D1D01887AE44032BB70620
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/94952f6e-fefc-326e-ac28-1dc54c110b69.roa
Signing time:             Wed 10 Mar 2021 05:00:00 +0000
ROA not before:           Wed 10 Mar 2021 05:00:00 +0000
ROA not after:            Wed 03 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        24.178.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:34:d1:d0:18:87:ae:44:03:2b:b7:06:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 10 05:00:00 2021 GMT
            Not After : Mar  3 05:00:00 2027 GMT
        Subject: CN=36dd1c8b-3909-4029-b613-3243575ca3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:7b:fa:f2:ca:71:a0:d5:74:a5:0c:db:cf:
                    95:de:a8:77:d9:97:b4:8e:ea:b8:98:72:b4:f6:86:
                    8a:35:7b:60:d2:c4:18:97:bd:c2:b8:d8:ac:08:c8:
                    51:90:a8:1e:54:9c:5b:ec:47:ca:75:2c:2e:0d:bc:
                    c9:cd:ea:97:a5:93:7c:98:43:93:77:a1:6a:99:87:
                    03:66:74:bc:bb:82:15:e5:58:ec:a5:e1:d0:34:17:
                    1f:f4:5c:ca:47:b9:82:29:75:e5:39:5a:a6:95:02:
                    cd:f5:ba:8e:02:b2:3c:22:f8:f2:cd:16:8e:cb:4d:
                    bf:37:c1:3c:e5:97:a2:f3:c2:c2:6b:32:1d:c4:94:
                    6e:6b:e6:a1:f4:42:b5:10:a5:77:7c:c2:48:4b:e7:
                    68:e9:b1:9f:64:81:26:ef:68:9e:04:df:84:20:ea:
                    81:c9:5b:5f:e7:ca:8a:fd:22:cc:c9:0a:3a:f8:99:
                    8a:c0:b7:24:91:09:cf:ea:7b:5c:d4:05:8e:7e:6b:
                    cc:d6:b5:43:01:24:d1:33:86:df:73:0e:fd:9f:0d:
                    8a:e3:94:ea:d7:46:ac:fa:7c:2c:cb:52:e8:6a:ef:
                    0d:d6:d7:a6:aa:1a:be:1f:68:59:fb:e3:9b:27:d9:
                    73:6f:e8:43:a5:fe:b5:da:49:2c:fc:67:f8:23:77:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DF:8C:F5:16:A3:F3:4E:F6:8C:F7:FA:85:A2:F1:80:3F:0E:CB:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/94952f6e-fefc-326e-ac28-1dc54c110b69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.178.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:05:b9:cc:e1:a1:3a:30:a1:b1:e7:c8:5b:15:f7:e5:5a:ec:
         ed:a1:1d:9e:01:7d:ea:2c:2f:ac:66:f3:c9:42:1a:f0:d4:b8:
         ce:e7:35:1c:8e:e5:c4:78:59:50:9e:5e:c3:4e:ec:3c:1b:38:
         c1:c9:a9:35:ae:76:06:d4:df:25:2f:56:e9:fd:d0:a3:e0:c2:
         37:e6:eb:0a:6f:1a:56:5b:7a:58:89:a3:42:29:2d:9c:66:5f:
         96:3a:0d:c0:c4:6e:ff:1d:19:7b:b7:5e:d5:0c:57:57:32:6f:
         80:7b:d4:75:60:a1:fd:8e:86:b7:ab:f1:b3:4a:30:a9:8e:b5:
         40:8a:16:ad:bb:71:2c:6e:4c:27:74:6d:50:f5:ab:1e:e2:7c:
         ef:91:85:f5:3d:19:bb:ba:85:b0:30:ea:86:52:16:58:cc:56:
         0e:f0:b5:12:3b:29:20:23:2b:4e:64:ff:5b:2c:a9:b6:f5:02:
         66:11:37:8b:81:14:f2:1f:01:20:ec:af:23:a2:3e:93:64:c3:
         e2:27:dc:f1:0e:ae:6a:7b:61:39:62:86:36:a5:76:c9:79:bf:
         97:78:a8:ac:21:a1:78:d8:59:7c:76:bd:d6:2d:51:5e:f2:a2:
         20:a9:b5:41:4a:c2:c1:27:92:7e:fc:8b:f2:e8:86:79:d6:96:
         6a:0f:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:05:09 2024 by rpki-client on console-fra.rpki-client.org