Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dcae3fa0-bf7a-3892-a53f-e6e3636eeeac.roa
File:                     dcae3fa0-bf7a-3892-a53f-e6e3636eeeac.roa (raw, json)
Hash identifier:          i534jBG/dEGUs3BAZEiAqpFG1WrFKszp/CDyoGN4rBw=
Subject key identifier:   8A:CB:66:F6:7F:14:04:D4:1E:6A:0B:AC:42:07:6D:75:80:13:BD:CC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583934D16F54250DAB43B01BCBC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dcae3fa0-bf7a-3892-a53f-e6e3636eeeac.roa
Signing time:             Wed 10 Mar 2021 05:00:00 +0000
ROA not before:           Wed 10 Mar 2021 05:00:00 +0000
ROA not after:            Wed 03 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        24.240.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:34:d1:6f:54:25:0d:ab:43:b0:1b:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 10 05:00:00 2021 GMT
            Not After : Mar  3 05:00:00 2027 GMT
        Subject: CN=1cccef21-00fb-4801-b427-247b4009d515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:0f:93:78:22:5a:5d:54:1f:ea:a3:9e:5f:
                    a5:a2:20:81:5c:16:4b:e8:52:ca:1d:52:99:04:7e:
                    f4:b7:1f:3c:be:88:b1:1f:ee:25:4d:35:d8:07:4c:
                    2c:1d:26:e6:33:88:d6:dd:14:fb:07:b9:e6:00:19:
                    78:47:92:33:40:b5:a2:60:82:48:21:dd:dd:ba:ae:
                    e5:0c:e5:a1:56:5d:2b:7d:8c:d1:9d:b0:25:27:2f:
                    66:d7:99:13:c3:5c:df:ea:11:3f:c1:94:b1:4f:4a:
                    1a:4a:3a:33:f1:b2:ab:fd:ae:0c:aa:17:04:10:ed:
                    56:a5:43:ce:e0:ea:f0:51:62:6f:36:69:b9:2b:10:
                    5d:0e:e8:ec:9b:d7:88:30:6a:b0:6d:79:ea:02:c9:
                    78:09:ec:f7:fd:2f:30:4c:06:c6:eb:fc:85:1c:73:
                    e1:72:24:36:7b:2c:97:bb:21:cb:79:94:0d:eb:30:
                    06:60:0d:36:78:2b:e2:04:e8:e9:69:63:87:86:a9:
                    9f:4b:51:74:07:48:05:01:8f:16:85:c2:49:23:f0:
                    30:0e:46:b0:b7:98:62:e8:9e:ee:50:02:46:cb:c7:
                    8b:01:f5:b7:e8:01:49:a4:eb:ea:12:1e:d5:bc:f6:
                    54:59:91:7c:ff:d8:1c:75:0b:f4:60:5b:25:75:b6:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CB:66:F6:7F:14:04:D4:1E:6A:0B:AC:42:07:6D:75:80:13:BD:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dcae3fa0-bf7a-3892-a53f-e6e3636eeeac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:88:93:71:19:25:9f:e5:64:c4:b8:34:bb:62:08:ff:f9:0f:
         45:7f:4b:37:49:88:e5:a7:19:57:df:a0:cd:d7:40:01:3a:fe:
         78:02:e8:10:d2:bc:d8:e8:1b:f8:1e:8b:f0:39:88:0a:7c:d1:
         be:21:b0:5f:1b:ce:a9:a2:02:de:4c:47:f6:45:ec:e2:2f:c8:
         79:f5:4d:c0:4e:b3:61:12:63:9e:31:df:e9:28:36:fa:83:50:
         1e:79:57:00:30:1b:55:17:c3:1e:f1:c4:13:6e:50:16:66:4b:
         d2:af:5a:d3:52:e8:bd:8e:92:c9:de:ca:72:3b:1d:0c:1a:1d:
         9c:b8:02:06:75:ae:03:8e:a1:6e:fd:ca:3b:e7:1c:31:1a:f1:
         43:f1:9f:51:a8:d4:67:01:ef:a0:d7:4c:67:42:7c:c7:6a:7f:
         04:29:3f:a9:00:66:bb:96:c3:7f:ed:b8:fa:a1:cb:dd:27:6c:
         22:e4:bf:1f:d4:86:be:71:84:5e:0e:32:0d:2a:66:42:8b:f1:
         35:a2:e0:2a:e1:10:4e:0b:7b:d4:ac:b3:49:c4:b4:a5:ca:1f:
         b1:98:fb:c8:df:6b:91:a6:7d:39:08:a3:72:63:c3:92:7d:d3:
         a9:c1:37:3f:6c:57:c5:c2:28:dd:bc:f9:0b:0c:db:59:18:20:
         27:a3:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:22 2024 by rpki-client on console-fra.rpki-client.org