Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d506ba94-7e00-38d8-b96d-776e25372f11.roa
File:                     d506ba94-7e00-38d8-b96d-776e25372f11.roa (raw, json)
Hash identifier:          fjzybWMS2K25fbe0m7xxTD034k5vkKuDAia8NcSolY4=
Subject key identifier:   3B:39:F1:8F:76:3D:6B:B6:73:72:C3:26:9E:8E:5A:0E:A5:2C:08:29
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A103344472ECDF906C5C80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d506ba94-7e00-38d8-b96d-776e25372f11.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        192.62.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:03:34:44:72:ec:df:90:6c:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=10e2b657-2e63-40fd-9490-68c6b6dccf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:2b:34:c9:98:b9:e8:f7:2a:60:65:e3:e4:
                    55:24:e6:68:76:58:d8:8f:8a:01:cf:58:fd:27:0a:
                    d0:03:31:83:1e:3a:3e:75:4e:7c:ad:91:7a:71:c9:
                    3d:2c:d5:d9:90:15:ed:42:b4:e8:31:0e:df:c6:6c:
                    4f:93:f6:45:ea:94:fe:53:0b:7e:ef:e8:e2:73:d5:
                    49:53:bd:0c:91:81:08:b4:be:a1:7a:6c:d3:f9:d7:
                    1b:e6:61:c8:d4:fa:15:93:f0:84:9f:6c:57:92:8a:
                    d6:3d:ec:2b:5c:34:12:6f:7b:a9:8b:d6:6d:18:e2:
                    25:83:ba:6d:97:2a:86:8d:6b:11:e4:ef:00:89:16:
                    91:22:ba:fd:a7:09:7e:26:a0:cd:8a:43:9b:ac:dd:
                    40:1f:72:1a:25:85:7b:35:11:4f:af:65:52:e5:24:
                    c5:95:04:8b:6f:de:37:64:46:de:3d:a9:21:76:0f:
                    5a:e1:2b:1a:3e:71:fa:79:ef:89:66:e0:f3:58:42:
                    11:93:3f:7b:c5:64:a2:54:8e:ca:22:ac:f9:fa:7f:
                    27:94:39:70:d1:a8:18:e6:5b:ec:e5:27:56:52:77:
                    ef:7d:9c:5a:1a:80:b1:06:33:dd:45:40:24:bd:b4:
                    fc:8f:a4:ad:bf:4c:bb:59:04:25:93:1d:11:37:17:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:39:F1:8F:76:3D:6B:B6:73:72:C3:26:9E:8E:5A:0E:A5:2C:08:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d506ba94-7e00-38d8-b96d-776e25372f11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.62.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d8:f1:6d:59:68:e2:b1:1c:1b:af:fb:b3:42:50:11:1b:af:
         24:3b:0e:05:ad:95:3b:27:75:b7:ca:a6:4f:fc:1c:7f:34:cb:
         26:f6:70:3c:1a:ee:21:9e:0a:20:bc:e3:b1:0b:dd:d5:61:22:
         49:60:ea:4e:c5:73:81:d4:69:1f:36:3b:94:cc:fd:a9:b3:cb:
         e7:3d:d7:a2:08:0d:84:1c:f3:af:c4:e4:3e:fa:00:4b:44:80:
         96:3b:1a:12:67:b2:20:cd:c8:98:a7:8c:d8:97:b4:8a:9c:5c:
         21:ed:bc:44:e2:9c:2d:f6:de:79:5e:0f:91:a0:92:ae:07:4b:
         5e:5b:d3:e1:30:95:11:df:0b:0b:fd:8c:0c:af:81:67:24:ca:
         66:85:4c:e5:0f:4b:03:37:bd:b4:f7:a8:9d:b8:30:af:bd:df:
         2c:be:c1:65:d9:3b:ed:1d:55:c9:ed:8d:17:76:f1:06:4b:da:
         79:6b:5f:33:2e:7c:c0:b4:fc:24:c2:e3:7a:77:03:63:28:93:
         2e:ea:b3:02:09:3d:6e:02:c0:ea:15:e0:e9:4b:bf:bd:42:ec:
         02:22:37:e7:66:b3:9a:4a:00:fa:99:7e:34:35:4e:ac:48:9b:
         7d:12:90:9c:b2:9f:3f:69:df:20:b3:d0:ba:db:64:29:89:cb:
         ae:3d:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:22 2024 by rpki-client on console-fra.rpki-client.org