Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96c2c757-3889-37e5-b821-a1efd393e3ae.roa
File:                     96c2c757-3889-37e5-b821-a1efd393e3ae.roa (raw, json)
Hash identifier:          sc4NVvRHz/2TKssjug8XjsjftHywb7/f7q13IDdZcwA=
Subject key identifier:   2C:72:13:B1:08:12:E9:EA:62:10:13:31:6D:84:89:29:19:1F:1C:0F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583934D162B16DEF72C492B754C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96c2c757-3889-37e5-b821-a1efd393e3ae.roa
Signing time:             Wed 10 Mar 2021 05:00:00 +0000
ROA not before:           Wed 10 Mar 2021 05:00:00 +0000
ROA not after:            Wed 03 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        24.181.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:34:d1:62:b1:6d:ef:72:c4:92:b7:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 10 05:00:00 2021 GMT
            Not After : Mar  3 05:00:00 2027 GMT
        Subject: CN=40c027b9-1aae-462d-adfa-d49863665b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:3b:66:0b:09:a2:7a:ce:4f:d3:21:50:1c:
                    a5:f9:d1:bb:5d:51:2d:76:ac:af:47:f6:ed:26:69:
                    de:5b:5b:41:a0:ef:e2:e4:44:1b:72:f0:8c:d2:ae:
                    3a:94:d0:19:9d:3e:7c:cb:95:7b:e9:03:c3:f5:9e:
                    a1:22:28:b7:d6:6c:4c:b0:ad:8d:ca:75:28:fa:55:
                    f5:55:c3:2f:1d:18:7d:00:69:bf:2e:63:a5:71:e2:
                    27:48:6a:a0:fe:f4:25:e2:cd:8e:79:e4:a7:af:6e:
                    8f:ad:bc:4a:33:82:66:90:95:cb:c9:c9:36:a5:ad:
                    85:46:4b:07:b3:28:93:70:5f:ae:f1:b9:c6:0f:9d:
                    8d:7b:50:20:00:01:9c:ca:e4:3f:cd:87:36:b2:cb:
                    6f:df:a6:15:89:95:86:78:f1:c6:8d:e5:b1:46:ec:
                    2d:92:3e:4c:87:42:ee:d8:df:ba:19:bc:dc:a4:03:
                    8c:99:c6:16:b8:5e:50:1e:33:eb:4a:0f:05:cb:35:
                    d2:b2:0f:3e:63:59:ca:cf:2d:46:7f:76:b1:1b:cf:
                    09:c2:ff:94:61:1f:ac:1d:50:83:12:33:b5:d1:79:
                    7a:5f:e8:a5:bd:6b:12:4d:ed:8a:02:9e:1a:44:f4:
                    fa:ad:d6:b6:4b:7b:07:16:61:8e:d6:90:ca:d3:54:
                    b2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:72:13:B1:08:12:E9:EA:62:10:13:31:6D:84:89:29:19:1F:1C:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96c2c757-3889-37e5-b821-a1efd393e3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.181.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ae:20:84:ef:ef:58:30:78:cb:cc:8f:01:81:df:a8:b8:17:
         2c:bf:1b:ce:69:94:3b:a3:99:97:21:d6:12:a6:00:4f:66:0e:
         90:8d:12:bc:76:50:e8:fe:a9:bb:c7:bb:92:9e:27:91:6e:29:
         af:28:12:25:3b:15:a9:4d:5d:0a:fa:d7:47:f8:5e:38:2a:37:
         20:90:c0:b1:26:a2:96:a6:27:df:c6:9a:2b:2c:0e:40:d6:14:
         0c:61:6e:15:81:ff:90:0e:5b:ba:d0:24:09:ec:c6:14:33:50:
         c0:43:40:1e:cd:7f:51:52:2d:bf:fe:6a:c8:88:d4:ea:a4:34:
         22:25:43:c3:98:ee:a0:e3:41:fa:24:5c:c1:e7:9b:15:e3:57:
         54:dd:a0:09:20:9e:49:68:91:0c:74:31:51:fe:a1:18:87:d9:
         e0:25:32:bb:27:5e:eb:69:84:35:18:3d:a7:c4:58:2a:fb:77:
         e3:bf:28:5e:32:cd:d5:6c:85:a4:d9:48:dc:b1:88:1d:0d:b7:
         6b:6c:99:ea:83:58:68:50:60:43:1e:a6:20:46:bb:d8:da:e3:
         65:26:90:e3:94:54:9f:78:02:68:77:c9:eb:a7:e1:db:73:e8:
         51:56:df:cc:a9:8d:14:fa:d1:c0:06:61:2d:31:d2:c8:48:e4:
         8b:0d:8b:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDk00WKxbe9yxJK3VMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDMxMDA1MDAwMFoXDTI3MDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
NDBjMDI3YjktMWFhZS00NjJkLWFkZmEtZDQ5ODYzNjY1YjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2w7ZgsJonrOT9MhUByl+dG7XVEtdqyvR/bt
JmneW1tBoO/i5EQbcvCM0q46lNAZnT58y5V76QPD9Z6hIii31mxMsK2NynUo+lX1
VcMvHRh9AGm/LmOlceInSGqg/vQl4s2OeeSnr26PrbxKM4JmkJXLyck2pa2FRksH
syiTcF+u8bnGD52Ne1AgAAGcyuQ/zYc2sstv36YViZWGePHGjeWxRuwtkj5Mh0Lu
2N+6GbzcpAOMmcYWuF5QHjPrSg8FyzXSsg8+Y1nKzy1Gf3axG88Jwv+UYR+sHVCD
EjO10Xl6X+ilvWsSTe2KAp4aRPT6rda2S3sHFmGO1pDK01SyUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCxyE7EIEunqYhATMW2EiSkZHxwPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTZjMmM3NTctMzg4OS0z
N2U1LWI4MjEtYTFlZmQzOTNlM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGLVQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2uIITv71gweMvMjwGB36i4Fyy/G85plDujmZch1hKmAE9mDpCNErx2
UOj+qbvHu5KeJ5FuKa8oEiU7FalNXQr610f4XjgqNyCQwLEmopamJ9/GmissDkDW
FAxhbhWB/5AOW7rQJAnsxhQzUMBDQB7Nf1FSLb/+asiI1OqkNCIlQ8OY7qDjQfok
XMHnmxXjV1TdoAkgnklokQx0MVH+oRiH2eAlMrsnXutphDUYPafEWCr7d+O/KF4y
zdVshaTZSNyxiB0Nt2tsmeqDWGhQYEMepiBGu9ja42UmkOOUVJ94Amh3yeun4dtz
6FFW38ypjRT60cAGYS0x0shI5IsNi8M=
-----END CERTIFICATE-----
Generated at Sun May 12 17:55:09 2024 by rpki-client on console-ams.rpki-client.org