Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ebb62638-e35f-318c-b872-41a6ece42395.roa
File:                     ebb62638-e35f-318c-b872-41a6ece42395.roa (raw, json)
Hash identifier:          w6XUFwb3+MpcGtTXAkrk9JLKNZeRqsT5Avh7aVvFSsw=
Subject key identifier:   F7:02:E3:14:F2:3D:CC:F7:98:06:4B:BB:CF:26:25:8C:A7:BC:36:BC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A153AE45039829D5B1E2C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ebb62638-e35f-318c-b872-41a6ece42395.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        24.216.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:53:ae:45:03:98:29:d5:b1:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=f75e100d-95d7-4af2-a64c-f4be0d4182eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:35:35:53:50:d3:6b:1b:8a:6e:2b:46:68:
                    55:af:10:23:1a:06:2f:90:89:76:68:64:0c:ac:27:
                    83:84:76:65:1b:f9:ac:57:05:72:66:d6:9a:1e:a5:
                    63:b8:0c:69:dd:9d:33:b5:43:a8:cb:f1:9e:a4:5b:
                    43:83:5b:7c:22:d3:f7:0f:6a:28:ab:f6:f0:8c:61:
                    6f:6f:41:c6:0c:fc:d7:36:c6:7d:a0:b7:f8:fd:c1:
                    87:68:12:7d:f4:60:da:99:20:4a:c9:bc:09:ff:57:
                    1d:6e:73:89:36:13:a8:a3:18:75:e3:54:7d:ea:df:
                    d8:40:0a:e3:ba:c0:f4:9d:77:e5:0b:de:d0:d9:ec:
                    3e:7e:0e:75:11:cd:6c:6a:5a:dc:66:73:43:9c:88:
                    56:d2:4c:81:81:6a:a4:c6:e7:28:69:4f:3c:a9:60:
                    bb:e1:fe:9c:76:59:05:4a:a9:eb:0b:d3:65:ea:c0:
                    6f:d7:3d:68:a3:4d:79:15:b6:ec:11:57:df:ba:33:
                    7b:9a:7b:45:88:70:ea:f1:de:eb:5d:17:25:14:35:
                    1e:ac:cf:a6:4f:8c:f1:44:6b:39:1f:77:f8:82:cf:
                    b0:32:cd:8a:8b:7c:c1:c5:46:f8:72:7e:69:bd:07:
                    e2:24:5c:92:7f:1e:ea:dd:ea:bc:07:d9:87:34:e6:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:02:E3:14:F2:3D:CC:F7:98:06:4B:BB:CF:26:25:8C:A7:BC:36:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ebb62638-e35f-318c-b872-41a6ece42395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.216.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:99:b5:99:d8:32:a5:89:a2:83:74:76:34:ac:05:15:48:11:
         c2:fb:6b:e3:cd:00:90:35:d3:d8:f8:5b:b6:6f:d8:bd:1d:aa:
         73:35:d3:fb:34:18:d6:d1:a5:91:e1:fa:68:fe:9e:66:2d:fa:
         7a:8d:fa:3e:56:47:99:24:be:af:9b:f1:61:b2:4a:33:4e:a1:
         4e:7c:f9:45:c0:b9:ab:08:64:c3:48:cb:00:1a:e9:4e:d0:e9:
         e2:2c:b4:20:2a:54:39:c8:07:1c:2a:95:1d:f7:c9:c0:c8:d0:
         77:36:06:7c:eb:33:b8:2b:ac:3e:0e:14:60:63:02:66:d7:0d:
         1f:61:c1:f0:f4:01:cc:68:4d:b6:74:9a:60:8e:e8:f9:72:39:
         56:63:e0:ae:46:56:30:5d:b5:6c:f5:07:00:9d:4d:1b:41:4f:
         c3:f9:e6:42:d0:39:5e:33:5c:4c:f0:6c:75:cb:c4:9a:93:53:
         72:1c:d9:6e:72:cc:b4:9b:df:11:9d:81:10:43:30:b0:0f:e4:
         f3:de:72:9e:e1:c4:4c:f6:5f:67:c8:15:b0:f7:9f:f4:67:59:
         fd:cc:26:6f:4b:cd:ab:b1:3f:7e:61:2b:d0:df:a3:98:d1:a6:
         e9:71:f7:1f:38:e4:70:a7:66:49:a5:55:33:cb:ab:50:3d:74:
         f0:ff:22:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioVOuRQOYKdWx4sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
Zjc1ZTEwMGQtOTVkNy00YWYyLWE2NGMtZjRiZTBkNDE4MmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Q1NVNQ02sbim4rRmhVrxAjGgYvkIl2aGQM
rCeDhHZlG/msVwVyZtaaHqVjuAxp3Z0ztUOoy/GepFtDg1t8ItP3D2ooq/bwjGFv
b0HGDPzXNsZ9oLf4/cGHaBJ99GDamSBKybwJ/1cdbnOJNhOooxh141R96t/YQArj
usD0nXflC97Q2ew+fg51Ec1salrcZnNDnIhW0kyBgWqkxucoaU88qWC74f6cdlkF
SqnrC9Nl6sBv1z1oo015FbbsEVffujN7mntFiHDq8d7rXRclFDUerM+mT4zxRGs5
H3f4gs+wMs2Ki3zBxUb4cn5pvQfiJFySfx7q3eq8B9mHNOZngQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPcC4xTyPcz3mAZLu88mJYynvDa8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZWJiNjI2MzgtZTM1Zi0z
MThjLWI4NzItNDFhNmVjZTQyMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGNg0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALCZtZnYMqWJooN0djSsBRVIEcL7a+PNAJA109j4W7Zv2L0dqnM10/s0
GNbRpZHh+mj+nmYt+nqN+j5WR5kkvq+b8WGySjNOoU58+UXAuasIZMNIywAa6U7Q
6eIstCAqVDnIBxwqlR33ycDI0Hc2BnzrM7grrD4OFGBjAmbXDR9hwfD0AcxoTbZ0
mmCO6PlyOVZj4K5GVjBdtWz1BwCdTRtBT8P55kLQOV4zXEzwbHXLxJqTU3Ic2W5y
zLSb3xGdgRBDMLAP5PPecp7hxEz2X2fIFbD3n/RnWf3MJm9LzauxP35hK9Dfo5jR
pulx9x845HCnZkmlVTPLq1A9dPD/IoI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:24 2024 by rpki-client on console-fra.rpki-client.org