Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fac5526-5121-3630-8ee1-d5a6cfa9f120.roa
File:                     1fac5526-5121-3630-8ee1-d5a6cfa9f120.roa (raw, json)
Hash identifier:          2EazyMVC3I9pHpU8a+dH1pxTUrpUGJ5gDL/WKG/GhNQ=
Subject key identifier:   BD:D1:7F:35:80:66:01:3B:D4:DD:EA:EB:86:2D:42:4F:81:18:36:F6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E1666FA1A47259B799760
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fac5526-5121-3630-8ee1-d5a6cfa9f120.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        71.8.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:16:66:fa:1a:47:25:9b:79:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=7d7a4aee-6cd6-41df-ab40-146f6165f0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:fa:2e:16:c6:d2:ca:26:98:da:42:bb:db:
                    ed:9f:97:cd:e5:79:63:95:fa:79:50:d7:27:db:d4:
                    99:0c:bf:58:50:72:d1:ec:07:7a:a5:a2:40:af:66:
                    00:48:d9:5f:64:5a:c6:18:86:46:89:96:c1:bd:79:
                    d5:3f:2c:38:2c:f5:12:e0:de:ba:d0:55:c1:86:74:
                    0b:57:30:b0:f3:18:27:09:a2:05:f5:42:99:bb:6c:
                    58:88:38:6b:27:22:44:d8:ae:71:70:31:db:09:d8:
                    f1:35:16:9a:47:db:11:dd:cb:c0:64:62:10:55:0f:
                    de:a8:be:59:78:4d:00:e3:a4:f0:b9:07:88:0c:17:
                    2d:35:f2:1b:9b:27:21:4a:16:a0:1a:31:c9:c3:20:
                    ac:bc:b7:f4:f4:ef:48:40:81:08:eb:c8:f6:08:08:
                    6f:b4:c4:47:c5:f6:7a:32:4c:6a:16:8a:ca:7d:ff:
                    cf:10:df:dd:88:0c:ad:58:5c:04:4f:dc:93:94:5a:
                    a8:96:4b:ef:cc:89:79:c4:5b:18:cc:39:e9:62:fc:
                    2a:03:48:fc:35:ec:4d:c0:ea:2f:8a:fb:94:ea:3f:
                    c0:5c:5e:7e:cb:d7:1d:3d:04:09:8d:e5:0a:6a:37:
                    b7:c9:fd:c0:48:8d:70:c4:35:87:69:88:29:9e:cf:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:7F:35:80:66:01:3B:D4:DD:EA:EB:86:2D:42:4F:81:18:36:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fac5526-5121-3630-8ee1-d5a6cfa9f120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.8.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:ba:99:88:c2:d9:95:7c:43:13:1d:d6:9d:22:04:e2:0f:98:
         42:34:0d:94:39:1b:ea:4e:38:8f:ed:e1:e9:f4:d4:f1:bf:ae:
         06:d8:0c:ef:76:cf:f0:90:19:81:ef:49:1e:c9:27:44:40:51:
         ef:1e:40:08:17:4a:c3:7a:73:de:09:c5:db:f8:41:03:4c:2a:
         ce:0d:0c:c9:e2:5d:61:66:b8:81:ad:e3:58:11:b5:5f:fd:00:
         1e:30:19:cb:a9:a6:fb:7f:50:df:3c:e6:ab:d8:53:1b:18:9d:
         2a:1b:15:b8:54:3f:c6:6b:7b:54:15:5a:f4:6e:0c:b2:d1:75:
         4a:dc:de:8b:c6:21:60:95:9a:ba:bc:eb:6a:11:29:88:ee:3c:
         71:99:72:55:c3:0a:56:29:3e:c9:76:a0:7d:1c:b0:c3:d1:3a:
         08:86:ce:17:92:7a:c8:f9:d3:ec:c2:f0:4a:e6:eb:29:a9:a7:
         d8:43:bb:46:da:8e:04:fc:32:0f:fb:ab:f7:44:c3:27:7e:84:
         32:26:0b:eb:eb:39:23:e7:4c:72:1f:2e:83:55:ea:fb:4f:e8:
         cf:8d:65:93:53:9d:75:4e:b1:17:98:47:cb:28:09:10:4f:64:
         53:38:02:3e:73:90:b9:3f:a6:e0:20:e6:fd:b0:06:3d:e6:ed:
         b7:da:76:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijhZm+hpHJZt5l2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
N2Q3YTRhZWUtNmNkNi00MWRmLWFiNDAtMTQ2ZjYxNjVmMGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHT6LhbG0sommNpCu9vtn5fN5Xljlfp5UNcn
29SZDL9YUHLR7Ad6paJAr2YASNlfZFrGGIZGiZbBvXnVPyw4LPUS4N660FXBhnQL
VzCw8xgnCaIF9UKZu2xYiDhrJyJE2K5xcDHbCdjxNRaaR9sR3cvAZGIQVQ/eqL5Z
eE0A46TwuQeIDBctNfIbmychShagGjHJwyCsvLf09O9IQIEI68j2CAhvtMRHxfZ6
MkxqForKff/PEN/diAytWFwET9yTlFqolkvvzIl5xFsYzDnpYvwqA0j8NexNwOov
ivuU6j/AXF5+y9cdPQQJjeUKaje3yf3ASI1wxDWHaYgpns9PWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL3RfzWAZgE71N3q64YtQk+BGDb2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWZhYzU1MjYtNTEyMS0z
NjMwLThlZTEtZDVhNmNmYTlmMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwigMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMi6mYjC2ZV8QxMd1p0iBOIPmEI0DZQ5G+pOOI/t4en01PG/rgbYDO92
z/CQGYHvSR7JJ0RAUe8eQAgXSsN6c94Jxdv4QQNMKs4NDMniXWFmuIGt41gRtV/9
AB4wGcuppvt/UN885qvYUxsYnSobFbhUP8Zre1QVWvRuDLLRdUrc3ovGIWCVmrq8
62oRKYjuPHGZclXDClYpPsl2oH0csMPROgiGzheSesj50+zC8Erm6ympp9hDu0ba
jgT8Mg/7q/dEwyd+hDImC+vrOSPnTHIfLoNV6vtP6M+NZZNTnXVOsReYR8soCRBP
ZFM4Aj5zkLk/puAg5v2wBj3m7bfadsA=
-----END CERTIFICATE-----
Generated at Mon May 13 02:03:48 2024 by rpki-client on console-fra.rpki-client.org