Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa
File:                     291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa (raw, json)
Hash identifier:          MmlvyTbWkMp8HtvbEUfPwolSbtcgTt5hVZrpNgchVz4=
Subject key identifier:   73:D4:3C:0B:58:32:87:68:D3:22:A2:6C:61:20:4B:73:A2:B1:F3:81
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EA2B24A0D58576CADEC80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        47.44.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:a2:b2:4a:0d:58:57:6c:ad:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=60acf89d-38f9-4573-b71f-31eb050fcc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:eb:2b:35:87:31:21:42:18:2b:24:86:1d:
                    5b:e4:21:c9:df:7a:53:b1:3c:d0:42:09:5d:67:22:
                    61:41:79:54:ba:92:20:87:88:93:dc:c7:ab:98:9b:
                    6f:2c:af:e6:ce:46:3e:b5:e3:56:bd:85:a0:db:40:
                    1c:e8:c9:1d:c1:8a:f5:66:be:de:03:ba:ec:93:5b:
                    84:f3:c1:95:a4:64:ef:2d:e3:17:e2:bd:dc:cf:01:
                    7a:f0:37:d9:85:7e:6a:99:f7:f9:23:b3:47:15:6b:
                    ef:57:9f:c5:3b:3c:41:2c:72:6f:fb:a7:96:e2:0b:
                    dc:c1:6a:d5:61:35:31:6a:3f:2c:a5:89:34:08:02:
                    ea:82:a5:44:8c:87:a4:bd:f2:28:67:0e:cd:8c:c0:
                    85:10:54:4b:91:c2:4d:6a:a9:ab:28:e5:c7:51:f6:
                    23:f1:8e:a2:0c:b3:63:70:34:0b:9b:21:7b:ff:6c:
                    52:e1:b0:7b:53:19:4c:36:e5:e6:05:97:8b:e6:8b:
                    59:23:fe:7c:36:49:7c:c9:a7:97:f1:e1:16:e0:7a:
                    7e:f2:e3:f9:b6:11:39:e1:46:39:37:6a:e6:21:b8:
                    f8:0c:12:ed:a6:5e:0b:08:8d:59:42:cb:af:ec:e8:
                    be:5e:c7:ee:b2:df:d9:13:a6:3d:19:c0:35:c6:eb:
                    bb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D4:3C:0B:58:32:87:68:D3:22:A2:6C:61:20:4B:73:A2:B1:F3:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:b8:f8:7d:1c:61:97:d9:63:f7:c5:1d:ed:c0:ec:da:a4:
         bb:44:b3:76:ff:af:86:49:1d:de:7a:f7:b0:7e:0d:f2:0c:73:
         f6:21:03:b5:6e:70:01:f3:5d:32:7d:95:72:9e:d8:dc:36:07:
         06:2d:a6:79:f0:2f:77:8e:04:d2:d6:b9:3d:fc:92:00:98:eb:
         0e:2e:04:d2:5a:e5:e0:24:38:0d:8b:15:db:e4:6b:75:19:75:
         07:f3:05:6f:33:9d:63:e7:99:6b:9c:92:8d:02:2b:a1:d5:da:
         bb:2f:23:10:f8:dc:97:26:fa:b8:85:13:3a:a2:49:45:b1:01:
         04:56:5d:7b:72:54:e5:1d:63:c4:c1:25:bf:eb:c0:7a:b6:b6:
         f3:c6:c6:d5:e6:27:f2:fb:ed:c6:aa:b2:dc:83:26:1e:43:56:
         79:3c:db:3e:46:00:62:f5:bf:66:5a:98:41:02:09:61:12:f8:
         58:3d:13:62:5b:1c:bb:0c:2a:41:61:90:4c:aa:43:47:e4:63:
         3c:b3:6e:41:5d:63:73:ff:bf:10:fc:92:5c:84:5d:6a:37:2a:
         f9:a9:b1:c6:e4:11:86:65:af:a6:1d:21:00:1a:b0:ff:ab:ee:
         9b:1a:28:15:9f:ed:4d:bf:84:92:35:30:26:5d:08:84:7a:3a:
         8b:35:12:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:44:58 2024 by rpki-client on console-ams.rpki-client.org