Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17434a3d-2e43-340b-9eb9-58766e1a25fd.roa
File:                     17434a3d-2e43-340b-9eb9-58766e1a25fd.roa (raw, json)
Hash identifier:          XtEyVqRJT3awmK3BKaspivdVwWHClNyHWFZ7L7EWCc4=
Subject key identifier:   4E:0E:C5:03:33:5C:3B:B8:35:E8:C8:FA:79:27:4B:70:2E:06:B0:DB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285839379ED490C577F0EB94243DC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17434a3d-2e43-340b-9eb9-58766e1a25fd.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     397019
IP address blocks:        71.86.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:9e:d4:90:c5:77:f0:eb:94:24:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=a41645b0-b5f7-47ab-a246-012629910ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:7b:36:dc:59:b5:c1:5b:f4:59:b0:aa:2e:
                    bf:68:e4:26:55:64:9d:49:f1:7d:be:fe:96:6b:ec:
                    23:f6:99:2b:53:e5:ec:8b:04:4e:85:0f:25:0a:9c:
                    fa:b8:d8:a2:6e:d3:c8:fa:3f:07:23:df:bf:aa:ac:
                    8d:ca:cb:c0:f0:6e:9e:eb:e3:9f:99:6e:d1:68:77:
                    02:32:28:1c:55:4f:7c:ce:31:e9:24:be:3e:a3:1b:
                    c2:52:d6:52:36:37:a4:7b:1e:2e:8d:d0:7d:66:0e:
                    55:95:a2:23:7f:e7:1b:ac:45:d8:5f:94:e2:4a:25:
                    76:b0:ea:05:92:96:0b:59:36:b4:00:c1:32:79:7c:
                    26:98:9a:0c:21:9b:2f:02:05:0a:69:ad:c4:4d:da:
                    53:1f:b9:2c:33:9e:75:91:69:85:34:1c:9a:59:44:
                    44:12:7b:63:12:17:8f:14:67:9f:b3:01:10:70:bf:
                    0b:ee:22:86:7b:96:02:28:d4:ed:45:49:22:47:3e:
                    9c:70:8a:bc:62:7a:cd:dc:ac:f2:16:24:02:9d:9d:
                    39:c4:19:96:62:fc:f2:a5:ef:22:93:2e:22:d2:b5:
                    36:4b:08:72:ad:58:1e:52:e5:c6:8c:e0:11:2e:9e:
                    a7:b2:dc:ba:a0:d7:ce:ac:49:86:72:12:62:07:65:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0E:C5:03:33:5C:3B:B8:35:E8:C8:FA:79:27:4B:70:2E:06:B0:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17434a3d-2e43-340b-9eb9-58766e1a25fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:98:55:9e:a4:66:31:a7:e0:0d:c9:a7:de:5d:eb:5f:46:36:
         19:0b:08:88:d1:43:75:c5:99:0e:d2:81:f9:c4:c2:33:0c:e6:
         c0:2a:87:06:58:6b:9f:09:46:91:3c:bd:3f:43:c5:65:1a:9c:
         4d:cd:4e:1c:4d:c0:aa:a8:14:70:d8:fa:b5:4b:3a:80:1d:00:
         83:0a:e5:da:54:4b:d9:26:00:4c:d6:92:15:8f:42:a8:e8:43:
         9b:2b:fc:3c:14:f4:37:18:4c:78:7e:7f:3a:a6:bd:c2:48:0a:
         8f:00:fe:42:26:c2:88:8e:53:f6:4c:f7:ff:8b:a2:fa:28:5b:
         fe:02:4c:12:3f:05:73:da:98:c2:e4:68:2f:89:eb:1a:ce:72:
         c4:25:b1:1b:96:82:7b:06:1a:9e:7a:d2:ec:da:01:a4:be:5a:
         37:69:c8:f8:78:93:aa:40:bd:29:1b:ae:41:0a:39:7c:f3:6e:
         61:42:37:87:7f:43:05:34:4f:ca:21:1c:12:07:96:15:fb:6e:
         f3:cc:c2:5b:e3:13:bc:8d:4e:ec:f5:3a:ef:f0:8a:2d:1f:e7:
         ee:8c:50:b5:d5:ed:2a:68:9a:e2:2f:00:56:58:3c:1d:a3:a5:
         dd:d2:52:54:c5:72:b5:13:ec:5a:2c:e6:7f:2d:b9:9f:e3:2d:
         05:2e:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:30 2024 by rpki-client on console-ams.rpki-client.org