Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9f9560a4-c55d-352a-a269-36993bd951d9.roa
File:                     9f9560a4-c55d-352a-a269-36993bd951d9.roa (raw, json)
Hash identifier:          3Vy0/y+V3WFij8SYz+TD621B4e364FTOubaQcYbNRNQ=
Subject key identifier:   48:ED:81:37:7E:2B:6E:31:57:13:99:2D:AD:08:AB:C5:C6:C5:66:8C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC10E527ADA1AF9FFCB4A100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9f9560a4-c55d-352a-a269-36993bd951d9.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        24.197.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:10:e5:27:ad:a1:af:9f:fc:b4:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=acd40371-ee32-4923-b2a6-9ed77c9ae968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:28:6b:eb:5f:ab:6a:c5:9d:56:df:56:9f:8f:
                    89:e0:42:85:f1:c9:24:0a:93:c4:06:8e:5d:9e:a2:
                    94:70:32:05:0a:ec:d2:67:a3:49:82:fe:17:f6:5a:
                    dd:7e:e8:56:a6:97:2b:98:4d:d8:82:da:ad:a9:3c:
                    40:8e:7e:bb:ef:fc:d6:89:e7:c5:24:36:aa:5b:50:
                    6a:c3:53:10:5d:11:45:3e:29:9a:1b:35:55:4c:0b:
                    f3:f1:03:d8:be:b6:60:9b:87:d2:e5:be:9c:7d:bd:
                    f6:0f:9a:01:f5:48:c1:7d:87:f2:66:f6:e9:62:83:
                    d2:57:8d:b6:68:e1:bb:8c:91:ed:ea:58:11:59:20:
                    80:d1:eb:7d:f1:b6:88:0c:45:ea:9f:37:4e:72:79:
                    6e:26:ca:ea:d3:3b:e3:c2:e1:1f:0d:23:a8:9c:51:
                    42:e1:78:0e:56:02:06:b9:75:0f:e1:4e:83:8d:74:
                    65:48:b1:31:94:8d:e9:9d:cc:c4:88:5b:58:08:15:
                    3b:72:5e:83:6d:71:e9:2a:24:a3:98:21:6b:8f:9d:
                    8d:fc:c3:19:d2:a6:6a:67:e5:71:17:be:fd:29:99:
                    1a:d8:c8:57:ff:ee:c9:86:41:b2:58:62:d1:19:20:
                    14:3d:bf:01:89:9f:83:c0:8f:70:e3:2a:19:dd:73:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:ED:81:37:7E:2B:6E:31:57:13:99:2D:AD:08:AB:C5:C6:C5:66:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9f9560a4-c55d-352a-a269-36993bd951d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.197.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b5:72:94:8d:f4:30:6a:19:ff:5a:60:ba:e3:d9:bf:2e:29:
         f9:54:45:df:e8:8a:78:39:d5:53:7e:1b:7f:ec:28:1e:cb:b2:
         c1:0c:ff:dd:74:96:f7:8e:c5:e2:1e:14:ce:22:80:0e:ac:13:
         b6:9d:d3:2f:8e:cc:8f:4e:14:b7:e0:a4:48:ce:56:c2:8f:f1:
         1b:df:53:6e:1a:ee:ff:a3:09:dd:08:4e:ec:e7:ed:dc:a0:9a:
         db:1a:68:8d:ff:33:af:49:0e:8a:5f:c4:1c:7d:11:f6:c0:83:
         b2:30:7a:a4:ad:e3:42:15:3f:0b:07:50:39:97:4d:8e:45:2b:
         02:89:75:a8:d4:b4:b8:4a:90:e1:49:98:29:04:08:1a:2b:fc:
         d7:64:0d:9d:d9:2c:d5:89:6b:49:cf:96:d4:91:23:a6:57:f4:
         91:46:ef:7c:ba:53:aa:02:a2:c1:66:f4:c3:c4:30:49:53:d1:
         cd:36:f0:f4:36:4e:3a:f8:3d:42:c7:4a:0e:8e:85:46:31:c3:
         42:61:40:16:0a:47:22:5e:74:ee:c9:d0:72:98:7e:14:22:74:
         6e:e6:2e:bb:42:04:4a:d8:2f:12:ff:23:ff:d7:93:58:71:27:
         21:b9:c4:78:00:0f:6c:71:94:ec:bc:87:b5:d9:9b:eb:00:25:
         20:66:89:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDisEOUnraGvn/y0oQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDEyMDA1MDAwMFoXDTI3MDExMzA1MDAwMFowLzEtMCsGA1UEAxMk
YWNkNDAzNzEtZWUzMi00OTIzLWIyYTYtOWVkNzdjOWFlOTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhihr61+rasWdVt9Wn4+J4EKF8ckkCpPEBo5d
nqKUcDIFCuzSZ6NJgv4X9lrdfuhWppcrmE3YgtqtqTxAjn677/zWiefFJDaqW1Bq
w1MQXRFFPimaGzVVTAvz8QPYvrZgm4fS5b6cfb32D5oB9UjBfYfyZvbpYoPSV422
aOG7jJHt6lgRWSCA0et98baIDEXqnzdOcnluJsrq0zvjwuEfDSOonFFC4XgOVgIG
uXUP4U6DjXRlSLExlI3pnczEiFtYCBU7cl6DbXHpKiSjmCFrj52N/MMZ0qZqZ+Vx
F779KZka2MhX/+7JhkGyWGLRGSAUPb8BiZ+DwI9w4yoZ3XPDXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjtgTd+K24xVxOZLa0Iq8XGxWaMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWY5NTYwYTQtYzU1ZC0z
NTJhLWEyNjktMzY5OTNiZDk1MWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGMXQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFy1cpSN9DBqGf9aYLrj2b8uKflURd/oing51VN+G3/sKB7LssEM/910
lveOxeIeFM4igA6sE7ad0y+OzI9OFLfgpEjOVsKP8RvfU24a7v+jCd0ITuzn7dyg
mtsaaI3/M69JDopfxBx9EfbAg7IweqSt40IVPwsHUDmXTY5FKwKJdajUtLhKkOFJ
mCkECBor/NdkDZ3ZLNWJa0nPltSRI6ZX9JFG73y6U6oCosFm9MPEMElT0c028PQ2
Tjr4PULHSg6OhUYxw0JhQBYKRyJedO7J0HKYfhQidG7mLrtCBErYLxL/I//Xk1hx
JyG5xHgAD2xxlOy8h7XZm+sAJSBmiVo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:51 2024 by rpki-client on console-ams.rpki-client.org