Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/23d72793-0809-3baf-9be0-fded9c20485c.roa
File:                     23d72793-0809-3baf-9be0-fded9c20485c.roa (raw, json)
Hash identifier:          OhJZuAswnAlfRk2pjiqQrjw7/G1hv/RDdc0XPQk1now=
Subject key identifier:   A6:71:0A:26:C3:D7:68:1A:11:91:E9:73:F1:AE:1D:0D:49:11:AF:6B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858393A689BE3B54292C31CA71300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/23d72793-0809-3baf-9be0-fded9c20485c.roa
Signing time:             Fri 12 Mar 2021 05:00:00 +0000
ROA not before:           Fri 12 Mar 2021 05:00:00 +0000
ROA not after:            Fri 05 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        97.81.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:3a:68:9b:e3:b5:42:92:c3:1c:a7:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 12 05:00:00 2021 GMT
            Not After : Mar  5 05:00:00 2027 GMT
        Subject: CN=599de51b-68f8-4c83-bc7f-622fadfbe186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:0b:99:3c:5e:65:7d:69:e7:21:9a:27:a9:
                    53:c7:c6:b8:1d:5d:a5:aa:5c:97:83:60:98:b3:b3:
                    b3:19:7b:0d:ad:1d:7f:6e:f7:4e:2b:82:5e:51:bb:
                    95:f1:76:03:0a:95:ba:bc:86:cf:2d:b7:97:4a:64:
                    72:ef:b8:43:03:c9:d8:9c:fa:ec:38:81:2a:5e:8b:
                    ad:d7:b7:26:83:ca:86:47:1b:40:76:26:17:01:76:
                    ab:fc:1f:18:39:8a:c3:90:65:af:ce:a4:78:4c:ed:
                    ab:6b:6c:39:f9:61:5c:60:d6:af:49:76:d4:02:f1:
                    68:48:98:ef:c5:73:02:99:99:5f:53:8c:e3:17:59:
                    4f:00:9d:ea:f1:52:31:89:db:17:76:77:cb:9e:ec:
                    cf:03:f4:71:62:af:69:69:ef:0d:16:8f:6e:11:27:
                    67:79:e3:66:ea:86:a4:40:b9:67:df:31:4b:44:c0:
                    4d:97:7b:b0:95:ae:61:15:7a:47:5c:1d:e5:26:3a:
                    11:f7:90:a3:bb:18:59:56:c2:a4:6f:02:52:35:54:
                    46:35:54:0f:74:44:d7:fc:b5:21:eb:4f:bd:bb:76:
                    a6:67:75:57:b5:97:de:3d:87:04:5f:73:88:d9:83:
                    5e:ff:e8:d3:63:25:18:6c:fc:c0:60:a2:2e:9f:3b:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:71:0A:26:C3:D7:68:1A:11:91:E9:73:F1:AE:1D:0D:49:11:AF:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/23d72793-0809-3baf-9be0-fded9c20485c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.81.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:4a:b1:4a:b9:f2:37:fd:3f:d5:bd:f0:e1:c9:23:ac:16:a4:
         d9:aa:70:1a:39:0c:77:4a:20:38:16:f2:9b:4b:f8:ff:ef:fb:
         35:e5:b0:09:1b:d8:43:1f:ef:76:20:1e:aa:4e:20:eb:02:03:
         b2:58:7f:d6:8c:a6:9c:82:d1:ec:18:ee:45:86:a3:c8:85:e4:
         51:01:de:3d:91:df:82:f7:75:df:fc:b6:0f:fd:7f:b7:56:53:
         a9:a5:1a:7e:e5:46:a0:55:74:a1:6e:44:b1:1f:90:4b:f6:30:
         94:c1:33:02:b2:74:a1:af:99:af:4d:af:71:38:61:2d:1f:88:
         75:77:22:7d:0f:38:a2:51:61:2b:0e:d4:cd:15:54:19:f7:97:
         46:17:c3:c8:81:d6:c1:2e:c8:70:31:39:de:03:fb:b9:bc:95:
         6b:a7:d5:ce:c4:9a:67:b5:d0:3c:95:fd:9e:21:f9:a6:9c:34:
         81:16:de:c2:bc:68:61:6c:45:50:6f:ae:1b:9a:3b:40:b7:2f:
         b1:f9:25:af:3b:ed:03:82:17:a8:c6:34:ae:8a:a3:22:8b:fa:
         6f:81:19:46:8c:d0:a9:fd:06:b8:aa:82:fc:4c:54:d4:00:c7:
         ed:2b:d6:7c:3a:a8:7b:d4:66:51:21:74:11:2a:9b:d4:d4:18:
         8a:a1:9f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:04 2024 by rpki-client on console-fra.rpki-client.org