Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8408a11-3988-33e1-8cd8-fc5d25a90253.roa
File:                     a8408a11-3988-33e1-8cd8-fc5d25a90253.roa (raw, json)
Hash identifier:          5rk8HXHY4qcVafLAp+VHsbVgV+KcB0/6oBIBHA+VTHA=
Subject key identifier:   21:17:D2:38:AE:4E:C4:43:CF:1C:99:30:62:90:13:CC:1D:D1:F5:FF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0DE046F840072C6FD1D40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8408a11-3988-33e1-8cd8-fc5d25a90253.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.241.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:de:04:6f:84:00:72:c6:fd:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=f7cff778-6a9c-404c-b2c3-ab3b6064c314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:00:48:27:53:f9:1e:59:dd:49:3b:5e:c4:5c:
                    14:df:eb:27:85:9a:e5:8e:12:ac:a6:57:f3:13:75:
                    91:39:da:13:15:06:31:84:de:4f:28:ea:aa:59:39:
                    91:79:7b:a4:2e:ef:86:c3:21:5f:04:cf:a0:74:59:
                    67:83:42:57:79:8a:c5:6f:54:e1:62:d1:f1:e4:83:
                    b6:2d:7c:f4:22:e3:80:d0:2b:3c:fa:e9:39:16:ee:
                    0d:8b:ea:59:2b:aa:3d:c8:e2:54:77:d7:37:b1:54:
                    0c:83:04:17:12:18:20:f7:84:39:68:84:03:b7:98:
                    63:74:fc:13:eb:a1:3f:43:2c:a2:3d:60:8c:7f:0b:
                    d6:c6:d3:c9:52:11:9b:79:37:a9:3c:cd:9a:63:30:
                    b3:5b:5c:53:85:a3:75:5d:b3:27:62:e1:a2:6a:d1:
                    33:51:81:54:51:d7:db:87:3a:a6:eb:7e:f9:b3:74:
                    11:5a:bd:b0:33:25:db:1f:43:b0:7e:7a:26:57:9f:
                    58:93:18:bf:df:a6:e9:e8:30:52:84:b0:cc:ee:bc:
                    c0:a0:5e:75:e2:8b:5e:51:51:d3:62:16:81:33:21:
                    ef:cf:f7:e7:07:3d:eb:f8:e2:d2:4f:17:3e:b1:78:
                    2b:a4:7d:63:e1:52:50:d2:4d:82:65:fc:a0:45:a8:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:17:D2:38:AE:4E:C4:43:CF:1C:99:30:62:90:13:CC:1D:D1:F5:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8408a11-3988-33e1-8cd8-fc5d25a90253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.241.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:db:82:b2:3a:51:19:65:6c:56:b6:51:96:bb:80:aa:58:
         f8:0a:8b:bd:5d:44:a1:23:0b:47:5b:59:93:7f:52:86:27:c4:
         9c:44:e4:90:82:3c:da:49:7b:73:96:cc:69:ed:2e:c4:d5:06:
         af:ba:fa:bd:04:ed:0c:46:d7:30:34:4d:71:90:dc:9c:eb:ec:
         73:b8:1a:90:20:22:83:1e:4d:22:e5:ff:1d:3b:0e:26:58:83:
         9d:8a:32:2f:ee:a0:aa:1a:0d:a5:aa:0c:7e:c0:cc:45:1d:05:
         7c:d7:9a:03:2b:54:b7:b8:73:83:e0:2d:d1:ec:01:5a:1a:36:
         50:ab:ac:57:db:31:6c:dd:08:8c:7d:7b:c4:25:7f:80:b6:6e:
         eb:61:3b:9c:75:93:5b:d2:0e:b9:7d:84:19:71:71:d3:63:35:
         40:37:3f:14:19:a5:e6:00:91:f6:12:16:dc:9e:46:b4:c2:3f:
         e4:78:4f:7f:64:25:18:c1:c5:4f:7f:87:30:32:34:36:42:a7:
         82:43:fa:d0:9c:ad:8d:2d:21:95:09:46:79:3a:8a:8b:35:76:
         5f:55:0f:b8:c2:09:e1:9e:af:f9:71:c9:a4:17:10:4c:41:46:
         7b:bd:e9:14:30:0a:ba:72:1e:58:a8:57:85:55:76:09:29:9c:
         22:24:b3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:52 2024 by rpki-client on console-ams.rpki-client.org