Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b378eb71-052b-38a7-bad2-e35091e78b89.roa
File:                     b378eb71-052b-38a7-bad2-e35091e78b89.roa (raw, json)
Hash identifier:          iBeP6iYQSeIUqGrjkZLKqmIU6dHgU/NSS2Q98CcjN4c=
Subject key identifier:   50:F9:C7:2E:BD:D8:0A:FE:65:CE:37:29:8E:AB:09:59:35:37:01:DB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E00D26D2A5808D6905020
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b378eb71-052b-38a7-bad2-e35091e78b89.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        24.158.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:00:d2:6d:2a:58:08:d6:90:50:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=94695fb3-5305-4cd8-86bf-d4a2f2062447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:e9:67:1b:46:e3:2f:2f:e7:43:b9:60:f1:
                    f9:4e:82:6c:2e:c8:33:e3:e3:82:77:08:64:c5:d4:
                    fc:9a:da:5b:43:83:73:89:b3:47:08:b2:09:60:bd:
                    34:02:63:2a:19:6e:1a:23:67:ac:ec:02:7c:f8:55:
                    4d:22:0f:9c:a9:98:43:38:26:c4:d4:e7:2a:e0:f3:
                    85:2a:23:cf:28:e7:4c:5e:44:e4:ae:70:2f:ff:e6:
                    75:90:fb:d3:59:a0:01:99:01:36:58:be:cd:41:07:
                    c3:4c:c4:2d:a1:4b:84:ca:18:05:43:12:d1:6b:44:
                    7a:88:7c:78:64:38:9d:de:b7:37:21:03:09:15:bb:
                    bc:55:30:69:1b:5e:5d:58:5f:44:47:80:77:e7:1f:
                    1f:72:54:a1:41:23:7a:5e:8a:98:3a:75:e8:c8:8c:
                    91:c4:d6:08:94:6c:c1:eb:2a:81:01:e6:36:93:ee:
                    d1:3e:15:ee:b0:f5:cd:bb:17:c4:63:5e:69:ca:f8:
                    ef:73:50:4b:93:06:f3:b4:24:ee:ce:f8:b3:f9:9a:
                    66:f8:cf:ef:bd:42:44:d9:c5:9e:30:55:d5:14:8f:
                    6a:ef:90:a3:72:5d:ab:93:44:49:5c:26:ed:37:2f:
                    8b:ed:cb:7a:e1:8c:ed:cc:05:37:80:8c:82:3b:51:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F9:C7:2E:BD:D8:0A:FE:65:CE:37:29:8E:AB:09:59:35:37:01:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b378eb71-052b-38a7-bad2-e35091e78b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.158.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:db:69:02:ce:1c:7a:c4:d2:4e:a8:b6:aa:2d:a7:8b:96:d3:
         e9:e7:b1:9c:3f:01:b9:14:bc:c7:57:2c:43:8d:d6:2d:5a:68:
         bc:a6:8a:65:63:d9:0a:67:35:f8:f8:c2:bd:da:1a:f4:7c:dd:
         48:8f:24:fb:23:d3:ba:a1:09:38:6f:ac:fc:91:72:8b:b4:cb:
         2f:e1:af:5d:3d:20:24:5a:af:1b:5d:17:d5:e8:29:75:ab:e8:
         d1:d4:3e:92:8f:0e:d3:9f:d3:d6:22:bc:03:11:3f:07:25:46:
         08:9e:af:c3:b8:ae:e6:32:5e:52:7a:dc:c2:97:6c:09:5a:20:
         0d:df:2c:d5:fc:bf:69:b1:0b:f2:34:bf:c4:77:df:e7:e9:87:
         30:37:af:1a:b2:be:ed:59:ea:47:4c:fe:19:dd:44:ef:34:a1:
         7d:03:cb:6f:d0:47:c1:a9:8a:65:cf:9d:b7:86:c6:2c:1e:c7:
         40:29:71:f6:7b:48:11:6b:61:91:b7:4d:13:25:dd:0e:ed:88:
         6e:40:73:0b:40:ea:6b:da:fd:a3:86:a2:ea:92:fe:d3:bf:71:
         4a:50:b5:6f:8c:63:0e:07:b1:2e:45:16:9c:61:a1:8b:69:5c:
         1c:d6:e7:b9:67:75:82:ab:07:da:6d:20:8e:cf:2b:3b:0f:3a:
         13:ab:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:38:17 2024 by rpki-client on console-fra.rpki-client.org