Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f36c5e6-b88e-3d9f-813a-fef2769454ba.roa
File:                     0f36c5e6-b88e-3d9f-813a-fef2769454ba.roa (raw, json)
Hash identifier:          QunZHov2jQ/ZWPfD1jZNhoKq42SUIRYK8t+9Dtb/oMY=
Subject key identifier:   21:68:8C:14:4D:7E:10:A7:CB:28:FB:9B:8B:AD:91:47:1B:BE:C3:13
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E911B9C5420E334204600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f36c5e6-b88e-3d9f-813a-fef2769454ba.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        71.95.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:91:1b:9c:54:20:e3:34:20:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=c4cdad61-fea9-4496-b2e2-0abbd1e106b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:40:81:81:1a:e4:85:19:6e:00:65:66:a6:fe:
                    6e:47:f4:fb:74:ba:2d:18:8b:4a:fb:ac:40:6f:ff:
                    67:d9:ab:82:c8:62:ef:ed:57:77:df:71:f1:7b:68:
                    6c:91:df:b8:09:c2:6e:de:93:e6:a4:de:62:72:bf:
                    2d:f8:38:65:e7:ac:3e:9e:6b:8f:09:e3:cf:85:2f:
                    eb:c1:24:d6:37:db:87:57:c0:3b:da:19:65:ec:47:
                    5c:ef:76:35:c5:aa:37:7f:63:13:a2:40:66:2f:a3:
                    48:3e:e7:7b:13:8b:d6:6a:b8:ee:ce:af:b1:dd:f3:
                    b6:28:02:2a:44:b9:a6:6c:72:d1:45:81:fc:2c:5b:
                    8f:94:94:30:c3:85:25:9a:86:93:e4:59:98:32:ed:
                    b3:18:2c:24:7d:26:4c:3c:eb:59:aa:cb:db:f7:7a:
                    25:7c:4f:48:18:86:6a:4c:53:07:4b:7d:2d:52:26:
                    6b:82:93:59:37:ca:c0:b8:d3:f6:82:af:82:f3:d0:
                    c0:94:e6:71:77:a9:12:88:c2:38:ed:3b:40:0d:80:
                    d2:76:e0:83:40:35:52:86:12:d9:02:da:c4:80:4b:
                    47:bb:97:77:b4:50:6e:7d:5e:be:fc:98:6a:2e:5c:
                    73:5a:9f:15:3b:e3:92:9e:da:a4:f4:1a:a5:d5:f6:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:68:8C:14:4D:7E:10:A7:CB:28:FB:9B:8B:AD:91:47:1B:BE:C3:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f36c5e6-b88e-3d9f-813a-fef2769454ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.95.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e0:5c:4a:01:82:30:6e:50:5e:cc:ed:d0:36:d9:4f:05:ef:
         4b:05:16:39:e1:fb:aa:d9:05:61:bf:1f:7e:52:61:4f:20:91:
         4b:0a:4b:37:9b:96:c4:5c:5d:96:28:35:fb:6f:d6:05:50:5f:
         fa:fb:4c:70:1b:2c:60:02:e1:d0:8c:c5:20:17:d0:a5:0b:94:
         b6:e5:3a:ab:89:28:0c:20:c2:e0:6f:8a:95:8c:5e:14:5d:ab:
         90:76:f9:7d:cb:35:86:49:23:13:47:28:5f:0e:b4:fe:6a:7a:
         ce:d7:c1:a9:f3:e6:07:3f:df:a4:b0:0a:70:52:dc:97:35:76:
         9a:4e:72:75:7f:3d:ed:fc:4a:55:ae:3e:eb:6d:a7:97:97:bc:
         58:09:76:74:45:61:fc:d6:99:a8:a7:0c:b3:7a:31:78:b7:b0:
         92:55:7b:9d:04:68:63:25:79:9d:11:d7:43:65:51:1a:8b:59:
         96:5a:e1:a0:cd:aa:e0:0b:61:61:d3:a9:90:59:f7:f1:c4:30:
         57:4d:3f:87:b4:c9:3d:e3:45:4d:78:bd:72:d1:6c:bc:9c:9a:
         06:73:ac:ee:8a:cc:67:84:23:e9:ee:27:f5:d7:7f:86:da:2f:
         e7:6f:61:71:e6:6f:08:69:8f:ad:1b:10:44:95:c7:9b:20:83:
         b1:ac:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 13:03:45 2024 by rpki-client on console-fra.rpki-client.org