Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/028a6fb5-de9e-3736-8152-0943d07dafce.roa
File:                     028a6fb5-de9e-3736-8152-0943d07dafce.roa (raw, json)
Hash identifier:          EUVJ/znPW/XY+29Ds1bZRJrbJAl6avhKp4MqEPcdntI=
Subject key identifier:   82:61:7D:21:7F:2F:14:E0:63:4F:21:64:77:07:D5:21:89:CF:97:76
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285839379EE12AD438AB005923EC00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/028a6fb5-de9e-3736-8152-0943d07dafce.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        71.87.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:9e:e1:2a:d4:38:ab:00:59:23:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=72cd4f6a-233f-4c7f-99af-043ad0a6b265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:74:a4:02:fe:cb:aa:f1:e9:e2:bf:6c:c2:c3:
                    05:ec:21:ba:f1:47:b2:ce:62:31:26:ab:07:ff:d0:
                    b4:cd:60:f0:c7:d1:23:bc:89:5f:45:54:b0:9f:34:
                    32:e9:b1:57:63:9d:05:1f:00:7f:2d:0f:7d:b8:72:
                    f6:e4:2b:1e:6d:b6:21:41:8a:aa:7c:1f:8e:a1:7e:
                    c5:9e:ba:24:9a:4a:f8:68:98:ce:61:90:fb:af:6a:
                    a4:bf:41:bc:4e:d1:f6:f6:28:9c:03:73:4f:d9:50:
                    87:e3:15:6f:ed:cc:da:c5:07:09:f7:36:df:60:bf:
                    a4:90:1e:4e:11:b8:0c:ec:18:a1:66:7f:2f:66:58:
                    a7:f3:52:06:dd:21:c6:af:ad:14:9a:7a:99:59:3c:
                    10:c6:ac:60:7b:90:57:9b:7f:d4:ef:fb:94:d2:03:
                    16:5b:f0:fb:e3:c9:3d:41:d4:b2:9e:96:60:8a:b1:
                    e0:68:54:f3:17:87:a9:29:14:75:84:fc:5e:e0:6a:
                    14:2a:b6:eb:48:bf:51:92:49:88:b8:a3:eb:73:ee:
                    0b:a0:8d:b5:6e:a1:3e:b7:14:45:6a:36:8f:d5:a6:
                    9a:a8:72:c2:23:66:cf:32:2d:7d:95:16:96:c8:97:
                    29:3e:a9:cd:db:1f:d4:31:aa:29:92:a4:d2:2b:ea:
                    16:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:61:7D:21:7F:2F:14:E0:63:4F:21:64:77:07:D5:21:89:CF:97:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/028a6fb5-de9e-3736-8152-0943d07dafce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ad:86:1e:f3:de:4a:de:32:c4:de:69:cc:09:12:9e:71:1d:
         d8:11:b7:34:4d:6e:0b:8e:04:15:59:18:cf:c7:bf:20:3c:46:
         5c:3f:ec:c0:d5:84:df:3f:10:7f:3d:64:9e:77:b3:c1:23:3a:
         b7:6d:e4:ff:07:7c:e5:01:20:9c:eb:92:1a:45:51:2f:1f:d5:
         d3:e9:4a:be:24:96:4c:57:b0:a1:a3:91:d2:53:8f:33:35:37:
         1a:0c:d3:27:9c:1f:46:f5:dc:50:f7:48:1d:4c:66:d1:91:1d:
         ff:ad:1c:b9:a5:e9:b2:95:84:3d:91:d6:e4:35:81:5a:e3:3f:
         d1:41:8c:3b:22:f6:a2:f0:72:34:c2:3b:7f:ea:a0:0a:c9:c0:
         2d:66:9c:be:2e:0b:46:a4:c4:8c:b7:82:39:d7:85:bb:c8:47:
         4d:10:de:0a:22:21:40:02:88:93:ab:c6:43:7a:4f:23:a4:94:
         48:2d:8d:15:e2:bc:ce:ff:ca:66:04:3a:c6:1c:bd:14:40:0c:
         67:4f:61:d4:72:c4:51:18:49:8d:9d:18:fc:1d:22:ed:d7:0a:
         c6:69:21:82:53:f9:65:2c:49:39:5e:93:ad:4e:f6:eb:1d:74:
         55:4e:45:18:ca:fa:62:75:51:b0:aa:cb:39:bf:fa:3e:d9:8c:
         a5:f3:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:00 2024 by rpki-client on console-fra.rpki-client.org