Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/261bcd73-27bb-3668-9b7d-ac39f89a67f8.roa
File:                     261bcd73-27bb-3668-9b7d-ac39f89a67f8.roa (raw, json)
Hash identifier:          cD3w5KX/E+DrjzpkuUZP2G8JERohOxbt74DcgGFraR0=
Subject key identifier:   80:19:82:75:68:4C:68:F8:A1:32:58:29:C3:FB:8B:B4:8F:31:13:A6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A157B44E6F07182A960780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/261bcd73-27bb-3668-9b7d-ac39f89a67f8.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        71.91.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:57:b4:4e:6f:07:18:2a:96:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=4e32d2f1-e5ec-4485-999a-cee5741067a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:00:07:10:d1:cd:6f:d6:0d:f4:8d:43:8f:
                    51:c0:a1:c8:55:1e:cf:4d:a8:de:0b:f4:09:9e:29:
                    da:d9:d1:6f:b9:4e:bc:58:bb:34:0d:f1:03:ec:f9:
                    da:11:4d:9a:50:a9:46:60:09:8f:15:91:3b:bd:18:
                    90:60:d5:87:9a:ed:13:26:c6:15:c4:b9:87:16:0d:
                    18:51:7c:b0:b7:73:f2:1d:1b:5b:9f:5c:29:a0:59:
                    0c:7a:1b:dc:f1:aa:53:ef:07:19:9e:cc:52:fb:53:
                    d5:fa:e0:c3:89:75:7d:95:67:03:6f:e7:46:9a:9e:
                    e8:99:87:2a:e3:fb:41:b9:43:ae:f9:5d:06:d5:84:
                    83:ef:ec:00:0d:90:18:1b:0b:f5:4d:72:9f:66:20:
                    44:81:95:6c:be:5b:9c:cf:93:03:55:19:75:5a:ab:
                    c5:75:56:5f:98:83:3f:a6:1f:ec:12:b2:fe:cd:16:
                    80:b3:5d:68:8e:1f:d7:78:c0:59:51:a7:4e:7e:21:
                    12:00:c4:6f:cf:b2:22:14:a0:d7:87:f8:d1:97:c1:
                    a0:6b:5f:64:b9:98:32:20:61:5d:c8:87:9f:ae:95:
                    62:2c:b6:7c:9e:ee:aa:24:ad:65:10:ba:cc:96:ba:
                    10:c0:a4:cf:9f:2c:9b:d8:8e:d8:78:4c:24:aa:e7:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:19:82:75:68:4C:68:F8:A1:32:58:29:C3:FB:8B:B4:8F:31:13:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/261bcd73-27bb-3668-9b7d-ac39f89a67f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.91.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9f:52:ef:be:f0:cd:c2:2c:42:6d:ce:2a:a5:83:ea:83:34:
         5c:ff:c0:e9:f4:47:85:18:53:2e:ce:d0:33:0f:47:aa:55:5d:
         bf:1f:d1:d4:d7:35:87:59:94:1f:86:a4:97:39:72:d3:88:5a:
         84:9f:b4:77:2f:f2:42:0a:af:88:4d:bd:ae:06:ca:57:8f:4e:
         28:6b:ea:15:07:10:3a:a7:fa:ae:51:2d:cc:dc:f9:7f:59:ee:
         77:f7:c1:f0:47:cd:8e:74:78:00:e8:fa:e7:9d:3d:a6:2f:32:
         b9:bb:06:5a:bd:86:41:4b:8f:59:91:c9:a0:9f:d2:10:ce:42:
         d2:1f:6d:6f:bb:c8:40:53:db:74:86:2e:a3:8a:4a:92:f3:d9:
         ff:86:70:08:a3:24:f1:0e:8e:96:72:4d:eb:cc:d2:3f:7f:a0:
         4a:2b:8e:fb:e7:67:26:23:f9:4c:cc:c2:53:f2:50:a5:65:54:
         af:4f:9a:2b:07:0b:87:1a:81:83:00:b1:95:34:dd:e2:04:16:
         6f:25:4e:b1:eb:f9:2a:3c:ce:a0:8d:21:d1:b8:c6:da:09:dc:
         0a:33:13:1b:52:57:40:f9:19:21:56:98:3d:7c:ca:45:ed:ff:
         2c:a5:7c:ad:06:7b:94:ea:7c:f7:13:a2:d2:b3:ee:62:e8:b3:
         08:03:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:04 2024 by rpki-client on console-fra.rpki-client.org