Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf8e9106-38d6-36c7-b40b-68e8812fbd6d.roa
File:                     bf8e9106-38d6-36c7-b40b-68e8812fbd6d.roa (raw, json)
Hash identifier:          pQgs70Sd4UDhoIszvhzWbdEfb+V8JgkMMQZoU1m7jJY=
Subject key identifier:   8C:12:F2:C3:0F:3F:8F:56:1E:AE:CF:69:3C:D0:63:45:6A:B2:16:DD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E8DAC4BF0516CB6EAB4C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf8e9106-38d6-36c7-b40b-68e8812fbd6d.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        24.231.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:8d:ac:4b:f0:51:6c:b6:ea:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=23f6ba27-0b31-4655-9a0a-3e660f020db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:56:0c:3e:30:78:80:fb:ad:d0:6a:06:7e:
                    7c:f9:b9:3e:0c:ea:a6:71:22:b7:1e:ca:4c:ad:3c:
                    45:c5:5a:77:6d:8e:84:d0:50:3d:0b:59:6a:fc:37:
                    0a:e5:2c:ad:0c:a7:12:c2:73:a4:88:38:96:a8:51:
                    38:82:bd:3c:a5:c5:6f:ad:d2:c1:55:cb:97:92:cb:
                    ef:04:d0:20:8a:ea:f6:e6:bb:da:f2:0f:db:85:31:
                    9c:28:87:22:18:ca:44:dd:49:8d:aa:18:e6:91:2f:
                    e8:49:a9:b2:d6:e2:51:0c:ed:d5:a7:10:0a:b2:91:
                    43:40:20:fd:9d:c6:e4:6f:ae:85:f4:1a:f5:2e:c9:
                    c4:9e:95:db:21:89:7f:45:45:3b:12:da:5b:85:11:
                    10:01:16:b6:dc:36:df:c2:72:35:17:98:6a:82:f0:
                    29:cd:57:cf:cb:89:b8:ae:61:64:90:50:18:c0:b8:
                    dc:df:d5:fb:3c:8e:6f:41:7d:25:3d:e3:70:ff:a9:
                    9d:2f:17:c8:97:39:ac:f4:3f:15:f3:26:9c:8f:f0:
                    62:ab:88:70:43:e8:7d:ef:56:8c:2e:40:41:58:3b:
                    82:a8:d0:e2:59:e3:1b:0d:8c:f7:5c:da:fa:00:14:
                    1c:a6:f6:63:a7:26:0e:7c:4a:02:b8:c0:57:e8:60:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:12:F2:C3:0F:3F:8F:56:1E:AE:CF:69:3C:D0:63:45:6A:B2:16:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf8e9106-38d6-36c7-b40b-68e8812fbd6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.231.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:35:00:26:5d:66:fb:87:74:d0:0d:44:db:3c:09:2f:d3:cc:
         66:8e:94:5a:96:20:86:54:25:c2:50:7f:07:38:be:a5:28:ef:
         87:b7:52:ae:e8:46:72:64:c3:a7:a0:a1:5c:54:ea:a7:eb:10:
         12:db:55:e8:03:0a:bd:c5:d2:ae:98:76:3e:64:77:dd:0c:02:
         8b:89:a9:3c:92:7c:a5:81:98:b7:aa:9d:8a:d5:d0:79:63:06:
         62:9f:65:2c:74:43:70:b6:6c:ef:0f:e9:a8:14:65:5e:d8:fe:
         eb:f0:e1:de:82:b6:bd:c0:9e:a4:e8:cf:bc:10:7b:28:0f:3c:
         6c:2d:e8:d1:c9:93:ed:3c:1e:0c:e8:d2:99:42:75:63:94:c9:
         ee:0c:8b:30:43:c9:94:f4:09:e4:6e:93:8a:ee:2d:7a:fd:da:
         dd:90:72:f3:f1:da:08:d3:37:10:d5:25:c0:15:dc:22:61:95:
         19:f6:7d:f2:50:ab:de:7b:78:9b:01:62:8d:3e:bc:2b:d6:7e:
         9e:68:72:8d:8a:39:4a:a1:c9:f3:b5:db:da:1a:d1:5c:8f:d6:
         55:b3:13:c3:87:c1:8b:2f:29:f0:eb:84:c4:85:a8:90:cf:69:
         13:90:51:bc:2e:79:96:fa:e1:98:d3:f2:b6:58:b9:ce:27:30:
         a7:63:c6:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijo2sS/BRbLbqtMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MjNmNmJhMjctMGIzMS00NjU1LTlhMGEtM2U2NjBmMDIwZGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8dWDD4weID7rdBqBn58+bk+DOqmcSK3HspM
rTxFxVp3bY6E0FA9C1lq/DcK5SytDKcSwnOkiDiWqFE4gr08pcVvrdLBVcuXksvv
BNAgiur25rva8g/bhTGcKIciGMpE3UmNqhjmkS/oSamy1uJRDO3VpxAKspFDQCD9
ncbkb66F9Br1LsnEnpXbIYl/RUU7EtpbhREQARa23DbfwnI1F5hqgvApzVfPy4m4
rmFkkFAYwLjc39X7PI5vQX0lPeNw/6mdLxfIlzms9D8V8yacj/Biq4hwQ+h971aM
LkBBWDuCqNDiWeMbDYz3XNr6ABQcpvZjpyYOfEoCuMBX6GCRYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIwS8sMPP49WHq7PaTzQY0VqshbdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmY4ZTkxMDYtMzhkNi0z
NmM3LWI0MGItNjhlODgxMmZiZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGOfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAw1ACZdZvuHdNANRNs8CS/TzGaOlFqWIIZUJcJQfwc4vqUo74e3Uq7o
RnJkw6egoVxU6qfrEBLbVegDCr3F0q6Ydj5kd90MAouJqTySfKWBmLeqnYrV0Hlj
BmKfZSx0Q3C2bO8P6agUZV7Y/uvw4d6Ctr3AnqToz7wQeygPPGwt6NHJk+08Hgzo
0plCdWOUye4MizBDyZT0CeRuk4ruLXr92t2QcvPx2gjTNxDVJcAV3CJhlRn2ffJQ
q957eJsBYo0+vCvWfp5oco2KOUqhyfO129oa0VyP1lWzE8OHwYsvKfDrhMSFqJDP
aROQUbwueZb64ZjT8rZYuc4nMKdjxkM=
-----END CERTIFICATE-----
Generated at Sun May 12 15:05:14 2024 by rpki-client on console-fra.rpki-client.org