Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b60b0dc4-1377-38ba-b58b-90944416cf92.roa
File:                     b60b0dc4-1377-38ba-b58b-90944416cf92.roa (raw, json)
Hash identifier:          EWgXtAhzOnHeSN4dg3mfvonPfLoqUWlPu2B1ATyN6QY=
Subject key identifier:   46:59:BE:0A:D3:7A:45:B9:1F:1A:9F:19:34:45:87:DE:C6:54:B3:5F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E00B159A02F727974F808
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b60b0dc4-1377-38ba-b58b-90944416cf92.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        128.92.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:00:b1:59:a0:2f:72:79:74:f8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=c45380dd-5b52-4174-99ed-5223298549ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2e:eb:fc:16:3a:69:f8:79:9f:9a:48:48:60:
                    67:50:bc:94:ba:65:ad:d3:2a:71:a8:ab:cd:4c:3c:
                    d8:9e:53:9d:e1:40:2a:e3:64:85:f5:90:f8:82:ce:
                    a7:49:42:6a:e0:bd:53:90:16:23:4b:29:fc:af:27:
                    c5:53:be:33:a5:33:85:80:d0:ff:72:eb:33:23:be:
                    cb:6c:4b:3a:e7:43:98:74:86:56:ff:a6:49:cb:36:
                    eb:79:ac:95:52:ef:a5:81:80:c5:a3:a5:b4:2b:a2:
                    26:e6:f0:fe:5e:d0:aa:1f:f3:fb:ee:f8:e3:bb:02:
                    9f:85:b7:04:c7:6e:0e:c3:c9:ad:04:88:f0:59:8f:
                    9f:ac:73:0f:92:31:ef:58:bd:71:0f:f9:17:27:d8:
                    80:b1:f3:10:43:01:49:af:5a:54:3e:10:e5:09:55:
                    67:20:8b:c2:52:98:3d:83:c4:41:36:78:33:eb:4e:
                    a5:a9:95:d2:76:d8:b5:41:2b:bc:74:d9:49:96:82:
                    2a:23:16:ce:31:f4:e9:7c:23:fe:0b:8b:94:31:12:
                    7e:40:b9:d4:5d:b8:d5:d5:56:62:b5:53:f5:d1:44:
                    c0:38:07:d3:ee:92:58:ed:f2:93:cc:e4:e0:c8:8a:
                    9f:00:7a:25:25:e4:8f:08:dd:a4:1e:1d:4b:eb:c4:
                    49:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:59:BE:0A:D3:7A:45:B9:1F:1A:9F:19:34:45:87:DE:C6:54:B3:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b60b0dc4-1377-38ba-b58b-90944416cf92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:2d:18:51:fe:1e:f7:10:b7:f4:e2:d5:1f:6b:2d:ba:ec:6e:
         de:6b:5a:b1:1b:2c:95:e4:c5:48:ac:c2:4e:cb:85:7d:fa:0f:
         76:39:3f:db:ba:62:b9:b6:b8:80:2f:22:7f:1f:30:9d:10:e3:
         98:42:11:65:45:5f:c8:04:72:b3:bf:2e:a4:a9:e0:64:9e:02:
         aa:c9:00:39:44:39:67:bb:11:b8:a6:a7:af:b6:19:6f:2e:8b:
         2b:60:50:5e:c3:b7:b2:1d:06:8e:de:e7:9b:53:10:96:21:77:
         ad:c3:a2:f0:f9:b0:96:51:a7:dd:42:fb:27:c9:4a:6f:45:76:
         7a:ba:80:e3:3e:94:4b:40:b0:c9:b6:b4:60:c8:46:89:4d:79:
         91:1b:5c:8d:bd:49:90:5d:bc:40:d3:43:37:a8:3e:ab:9f:c5:
         6f:e1:ee:f7:ab:ad:cf:b0:8b:7c:d3:c1:e8:7a:49:c7:c3:fc:
         77:3a:2f:37:c5:36:d8:0c:81:9f:48:54:c4:89:01:53:16:13:
         e9:4c:9e:4d:ec:38:03:12:fe:0b:03:a6:4c:b9:98:0c:36:8a:
         b9:d4:65:ea:f2:42:71:00:82:ef:de:77:63:e6:f6:f7:e3:f9:
         eb:91:4d:70:24:17:86:e4:f1:9b:68:10:56:eb:21:4e:d3:f7:
         46:5c:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:46:04 2024 by rpki-client on console-fra.rpki-client.org