Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/32e33bf9-3b67-3e72-b7a5-c94e838b09d0.roa
File:                     32e33bf9-3b67-3e72-b7a5-c94e838b09d0.roa (raw, json)
Hash identifier:          jkY0BbpAz6n6NqOE7tUy2/Zp3E4ftr/xX7dz2UHSePA=
Subject key identifier:   B2:3F:6A:AC:7A:72:7E:76:B0:3F:4D:4E:F7:25:AD:52:8A:7D:CC:C0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285839379F6738883771905E720C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/32e33bf9-3b67-3e72-b7a5-c94e838b09d0.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        71.15.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:9f:67:38:88:37:71:90:5e:72:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=9a1ac3e4-a565-4162-8e16-5e4266ed0f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:7c:a6:21:55:39:68:88:e6:c6:df:e9:27:
                    0b:84:88:ad:db:ff:c2:dc:24:53:b1:94:3e:ae:e4:
                    cc:48:f3:75:ff:04:bf:16:88:91:aa:c8:df:e0:c4:
                    28:27:f9:7c:d9:51:ac:e4:f1:9b:80:b0:ea:93:5f:
                    77:70:c0:63:75:92:67:0e:d6:3d:43:35:34:49:d5:
                    51:77:57:2a:6e:0a:fa:eb:1a:dd:f7:bb:84:44:1e:
                    12:28:e3:ab:03:e3:cd:12:e3:1b:18:7d:54:90:17:
                    d1:d9:8f:32:c8:97:ed:26:ad:34:d9:7d:b9:6c:c8:
                    c3:bf:99:3a:c9:cc:db:2b:82:f3:19:d0:5a:cf:6d:
                    72:12:d0:34:65:b7:ad:dd:74:70:d1:68:87:55:ff:
                    cb:fd:f2:4d:fc:90:fb:6e:af:7b:4f:81:7f:22:f6:
                    6a:70:68:43:80:9c:3e:9f:49:96:b6:b5:e8:d8:22:
                    a5:2a:15:30:2a:06:41:c4:b1:81:71:c8:65:7c:5d:
                    7b:99:55:17:9f:ee:6d:d1:4c:2d:0b:44:71:a1:5f:
                    91:28:21:09:69:29:c5:8b:e0:92:11:38:a4:42:ab:
                    04:35:2d:bd:a4:6b:91:2f:f4:35:09:93:4d:c2:37:
                    e5:04:b2:5d:a0:8d:58:38:90:3c:7f:3a:ba:82:f0:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3F:6A:AC:7A:72:7E:76:B0:3F:4D:4E:F7:25:AD:52:8A:7D:CC:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/32e33bf9-3b67-3e72-b7a5-c94e838b09d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.15.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b4:90:bc:86:1f:11:c6:f2:d3:74:30:68:96:9a:08:49:43:
         90:f9:12:b7:b1:2a:2f:7a:a3:b6:a2:fb:ed:8d:ac:dd:b4:48:
         45:f5:e1:ab:31:9b:e2:1a:47:4a:31:a8:f2:39:5b:f6:d5:4c:
         f3:74:3e:f4:d1:91:06:1f:c2:f1:bc:6f:c8:16:d4:82:13:c2:
         72:ed:24:a3:bc:87:19:d6:a2:2e:7f:30:01:51:61:2b:9c:1a:
         05:54:e9:a4:45:f2:6b:73:3e:04:90:60:a2:36:2b:b8:04:35:
         04:12:51:5c:bf:29:0b:54:f0:4b:7f:54:e8:cf:81:22:c9:0b:
         18:2b:c0:1c:77:1b:f8:74:04:6b:5f:27:49:6d:6c:b1:2d:6f:
         23:a8:5c:a0:80:0b:c8:f3:b0:cf:7e:eb:ad:b5:27:57:87:c0:
         f8:cd:7e:e3:91:dc:53:d5:09:e6:21:62:45:17:68:b3:9a:e4:
         e7:2b:b8:29:b8:32:d1:b0:e6:3e:ec:1b:55:d3:db:3a:75:62:
         a4:e5:76:7c:7d:9a:41:71:12:6b:11:a2:ff:06:9a:84:2a:35:
         0c:83:92:c6:f9:2c:bf:28:84:89:af:82:bc:42:71:9f:1e:33:
         02:83:e2:ce:6b:dd:5e:8c:bb:52:c6:05:24:30:af:bd:d9:ec:
         0a:e9:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:32 2024 by rpki-client on console-ams.rpki-client.org