Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bfbf7e9a-1a8b-3be9-8345-408a33fb1d5a.roa
File:                     bfbf7e9a-1a8b-3be9-8345-408a33fb1d5a.roa (raw, json)
Hash identifier:          raQO86MpB8rgRwLJl3WLuOzjspvALTxXsIXcpr6xRds=
Subject key identifier:   EA:DB:C0:70:5D:06:E8:FC:63:9D:72:7C:D9:C1:02:29:9F:20:B2:E8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DF0EAB35DD42B4B5FC270
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bfbf7e9a-1a8b-3be9-8345-408a33fb1d5a.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        24.159.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:f0:ea:b3:5d:d4:2b:4b:5f:c2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=83a6df6a-ed07-40f9-9937-202b9941dbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b1:20:f7:21:1e:f0:e7:a2:23:78:97:7b:01:
                    a8:d5:16:59:96:f2:02:6c:e0:d9:6e:a5:00:df:9c:
                    e5:ff:1d:4e:d1:fa:24:43:3a:44:f4:6d:2f:bc:2e:
                    ea:5e:74:6a:73:2d:d5:88:42:33:76:20:5f:c7:49:
                    0e:69:6b:1a:7d:4b:43:77:4a:54:c8:20:b4:78:5f:
                    75:e8:b2:36:8b:15:bb:8f:ea:84:db:26:11:f0:da:
                    ed:ee:8e:27:6f:94:58:76:53:6f:f0:ac:e0:92:90:
                    80:82:ce:ab:34:16:98:5a:87:1b:95:be:96:13:0f:
                    82:eb:a3:9e:91:b1:02:32:6e:b9:cf:dd:6c:9b:01:
                    ab:3f:75:9f:25:02:f1:34:78:f8:23:6f:4c:b1:be:
                    20:ae:49:e5:52:4b:10:92:84:e1:7f:ee:8b:bd:fb:
                    a2:54:63:82:82:2e:25:2a:e7:23:15:4e:c1:1d:b7:
                    cb:8d:bb:63:09:5a:25:89:c6:4e:18:e4:45:e7:24:
                    8d:18:c6:ca:17:33:4a:cc:de:ef:4b:bb:39:76:5e:
                    66:03:58:63:de:d0:98:93:2b:2a:c5:19:97:58:63:
                    81:69:1c:7b:8c:b3:ea:b3:58:1f:3f:1d:3f:2b:48:
                    fe:c1:d0:67:94:1c:ed:b7:db:1c:08:e5:35:a6:d7:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DB:C0:70:5D:06:E8:FC:63:9D:72:7C:D9:C1:02:29:9F:20:B2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bfbf7e9a-1a8b-3be9-8345-408a33fb1d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:78:db:8e:2a:d7:e3:b8:58:00:60:d5:1e:5e:be:29:2d:5f:
         30:ae:78:4a:17:12:68:64:cb:6a:a9:30:0c:c6:3c:71:96:0d:
         ed:26:4d:e5:2e:5d:a0:26:35:a1:bd:0e:44:e7:31:9e:44:5e:
         1a:e7:df:62:ea:a5:52:31:aa:61:64:ee:80:a1:e9:d4:d5:52:
         8c:1b:94:c3:fe:b5:46:56:a2:13:d1:84:97:a4:7a:aa:32:8c:
         eb:f5:84:9e:12:d7:00:88:54:8b:bf:1b:d6:d5:dd:ee:a7:85:
         0d:95:85:0c:1a:15:62:66:bf:19:3b:3a:a3:9a:8f:44:a6:ec:
         6d:15:df:97:3b:78:b3:71:e7:b4:3c:ca:41:af:76:48:54:b4:
         55:c6:e3:d3:da:a1:ef:7b:ce:08:2e:b7:20:1d:65:6d:4d:ee:
         42:8e:6b:0e:96:df:e6:87:d4:78:8f:3c:30:62:ff:3f:15:95:
         72:86:3e:17:e9:30:b3:ad:57:41:aa:b8:ce:8f:06:1b:49:11:
         04:3d:dc:c4:c7:29:a4:e3:ad:8e:bb:01:d9:1e:34:f7:6f:a3:
         20:90:12:07:21:cd:ae:a9:a6:f6:bf:73:7d:1a:b3:58:32:c6:
         8d:75:2b:2a:a9:47:63:5f:18:5e:8c:43:d0:02:82:0c:1a:88:
         e8:2e:40:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:45:18 2024 by rpki-client on console-ams.rpki-client.org