Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ccea032f-cf75-370e-acc1-6a172a8439ee.roa
File:                     ccea032f-cf75-370e-acc1-6a172a8439ee.roa (raw, json)
Hash identifier:          y1pLp8lcYUcU2jxQAtwSAT0Tt1LXQ0C6jUjuvubuRaA=
Subject key identifier:   A0:87:5A:A0:B3:68:53:47:36:94:3E:7D:31:8A:6F:C9:02:B2:47:67
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584434CD88FF51046F2BF2AFC500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ccea032f-cf75-370e-acc1-6a172a8439ee.roa
Signing time:             Tue 12 Dec 2023 12:00:00 +0000
ROA not before:           Tue 12 Dec 2023 12:00:00 +0000
ROA not after:            Wed 05 Feb 2025 05:00:00 +0000
asID:                     11427
IP address blocks:        150.221.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:34:cd:88:ff:51:04:6f:2b:f2:af:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 12 12:00:00 2023 GMT
            Not After : Feb  5 05:00:00 2025 GMT
        Subject: CN=0977e88f-a584-4b0e-9b82-5b88a0ec7cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:39:fc:d6:b1:28:f9:2d:80:a8:71:05:27:d1:
                    44:04:d0:2b:71:bb:97:aa:bf:cf:c6:6d:49:fb:e3:
                    d1:1f:a8:38:4a:ab:95:dd:ac:e9:09:c3:0b:aa:8e:
                    f1:15:ad:12:3c:3d:30:db:5b:e3:ab:9a:7a:05:09:
                    f2:b8:12:3a:40:f6:9d:18:68:04:3c:01:0e:f0:95:
                    26:2b:cb:d5:d5:fc:de:0c:e5:fe:00:8b:b0:08:54:
                    7a:87:3a:ff:06:d3:95:c9:39:e8:c3:e1:16:b8:3d:
                    5f:74:04:2d:28:0a:ca:23:a7:bc:b9:2c:bc:bc:3c:
                    91:a6:50:b9:e3:49:f9:d1:c5:3f:94:2d:55:ee:09:
                    89:75:a2:62:98:9d:47:66:a6:71:84:82:73:a1:d4:
                    8b:63:5c:b1:fc:f9:a2:5d:2c:c4:41:d6:7c:73:bb:
                    59:0d:97:b6:17:63:7a:3e:06:aa:94:7a:e6:50:7b:
                    81:3f:4d:8c:c7:0d:0e:91:78:f4:59:f4:5a:24:82:
                    61:b3:b7:93:f3:f3:3b:43:da:8d:e8:e9:fd:35:a3:
                    30:df:bd:fb:35:23:f1:65:5a:4b:b7:51:79:ff:ff:
                    75:7f:d8:47:61:af:c0:2c:a3:9f:e2:0f:0b:d5:c0:
                    fb:ef:eb:89:69:0f:1d:c1:2c:82:57:32:d8:c9:41:
                    b4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:87:5A:A0:B3:68:53:47:36:94:3E:7D:31:8A:6F:C9:02:B2:47:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ccea032f-cf75-370e-acc1-6a172a8439ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.221.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:c8:20:61:f8:71:fd:30:d7:eb:e9:fc:01:59:5b:b1:f2:dd:
         7d:3c:49:7a:0a:61:63:08:24:fe:3f:01:32:7a:1d:c3:df:5f:
         52:09:e3:e8:af:1e:a2:12:d6:68:0a:a1:85:eb:03:64:27:96:
         76:61:51:90:88:b3:fd:4d:7e:39:50:9f:78:c8:e4:89:74:b0:
         c3:7f:ec:de:40:9c:c8:1b:e9:42:26:1a:4e:e4:d4:2f:a5:79:
         56:49:9a:fb:ee:16:66:67:74:76:7a:6d:d3:84:51:e9:cd:a2:
         b5:3f:84:96:0c:68:54:34:65:7c:c9:7e:82:9a:89:1d:ec:19:
         0e:e6:84:af:cd:67:67:dd:f1:f2:46:b9:5c:c6:e8:a4:f0:2e:
         a4:01:a1:ff:ca:2f:3f:18:de:14:25:3d:32:8e:9c:8f:95:58:
         86:93:af:18:8b:11:27:63:b3:cb:95:63:b0:fc:57:90:d6:d9:
         cc:f4:aa:f7:1e:f4:7a:4c:60:02:ea:64:d8:ac:75:02:5b:73:
         e1:8c:02:60:63:ad:a1:a6:a3:1d:b7:41:a9:6e:a2:c3:1c:57:
         60:1b:e9:a9:bb:aa:d6:1e:fe:3f:97:3f:53:19:00:f1:92:a5:
         11:7b:13:52:a7:a8:0e:c9:4a:49:5a:81:25:68:63:73:4e:54:
         46:10:9f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:21 2024 by rpki-client on console-fra.rpki-client.org