Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa
File:                     ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa (raw, json)
Hash identifier:          ycgLYm1ok26g+QMnllGGEpsRNj5crvhuIhx+b/QSaWg=
Subject key identifier:   C7:85:EB:FF:AC:71:6B:9C:60:C5:D9:D2:B3:E1:57:2F:C9:86:10:DE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0D422F8FB0A789FB4C1F8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.197.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:d4:22:f8:fb:0a:78:9f:b4:c1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=795b400d-06ac-4585-9573-a01cce1240e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:12:fe:fb:e8:82:c8:71:03:be:b1:a4:84:
                    91:5a:70:a7:ea:ac:fc:57:b5:5a:77:b1:ef:b3:1c:
                    6c:26:3e:a3:d3:8a:19:70:11:15:b3:b0:dd:5d:fe:
                    3c:ea:3b:8c:e9:43:70:71:f0:bb:72:9a:30:14:42:
                    aa:97:a8:39:59:27:46:84:44:6f:41:12:89:1e:75:
                    e9:3e:ef:12:3c:54:8f:b8:c1:84:dc:f7:93:b0:91:
                    f6:9e:01:d6:5d:01:15:ce:4f:f6:2e:00:24:34:0d:
                    54:8c:2a:e7:95:2f:07:62:43:8f:e1:05:61:f7:c7:
                    5e:d7:d3:7d:b4:e8:53:4a:27:84:d0:9f:1b:62:60:
                    e2:c6:c8:1e:09:5d:f9:d1:90:3a:eb:9d:a2:66:6d:
                    91:f6:db:b3:e3:85:2c:15:9f:b0:09:88:56:d7:1e:
                    f2:f4:31:18:8f:e1:ae:2d:15:4d:f4:25:67:b3:2c:
                    d6:01:05:04:58:e9:b2:a9:85:b8:a5:05:e4:cb:20:
                    5f:b9:34:53:e2:33:70:e8:bf:23:19:92:d4:6e:59:
                    5d:c3:d5:a2:03:23:b6:7a:1a:00:e6:51:0e:42:a3:
                    95:c3:9a:f8:62:40:8a:84:a6:e0:ed:4b:23:03:51:
                    e0:73:61:30:27:bd:93:96:5e:e5:29:9c:3c:17:97:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:85:EB:FF:AC:71:6B:9C:60:C5:D9:D2:B3:E1:57:2F:C9:86:10:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.197.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e9:60:65:87:46:6c:55:da:e4:bb:94:14:82:ea:b3:62:fa:
         1e:21:ee:0d:03:8c:00:d6:48:55:a9:df:61:19:a5:a4:6e:e6:
         60:10:08:89:10:78:97:86:ad:16:09:cd:16:1d:a9:9e:b3:72:
         65:f1:77:b0:c7:8d:24:e7:e0:b1:93:b5:4b:c8:18:a4:f2:dd:
         13:8c:42:19:ff:37:d5:7c:0d:f1:32:30:60:02:88:5e:38:0c:
         31:98:2d:35:11:a0:59:5f:d0:5c:11:ce:b6:c5:49:51:5f:67:
         12:bd:67:80:b0:51:b6:45:e4:97:38:19:31:a7:09:96:f0:d5:
         be:20:9b:9c:33:e6:85:32:33:e0:83:f1:76:7f:29:20:b7:cd:
         ae:83:bb:ec:17:1d:98:c5:24:99:b3:32:d6:af:d4:1f:f8:b9:
         5a:85:01:db:d1:1b:e8:fb:00:6e:b0:cc:2f:93:92:8a:59:90:
         12:2d:65:31:ae:eb:8c:19:0a:30:ab:11:65:c4:e2:e2:01:47:
         a4:1f:c2:c2:25:32:69:4c:0a:86:e3:75:4f:b6:14:76:b0:57:
         24:e6:ca:f6:3e:e5:8f:ca:20:ed:5b:5e:c2:d0:38:42:f5:49:
         25:fc:2a:c8:e3:48:ba:ca:2a:1f:dc:e3:43:02:e0:d8:91:dc:
         ff:01:56:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:21 2024 by rpki-client on console-fra.rpki-client.org