Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3880fce5-9ddc-32a5-9114-28fa1e64c55e.roa
File:                     3880fce5-9ddc-32a5-9114-28fa1e64c55e.roa (raw, json)
Hash identifier:          BXdw4Cn7QIpjvkCZ8J3T1nNtDXW8A845PgOJqlZZ6UY=
Subject key identifier:   DD:DC:9B:6C:65:A9:4D:1B:83:35:84:2D:EB:00:C2:D8:B6:E9:51:AC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC11E4384E34A3AA6F537780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3880fce5-9ddc-32a5-9114-28fa1e64c55e.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        71.91.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:11:e4:38:4e:34:a3:aa:6f:53:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=c5d7eeb7-411d-48c1-83aa-b31d65eb2d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:a9:ed:60:5c:68:78:41:e6:29:d8:31:44:
                    8b:04:05:73:da:09:32:13:f0:41:be:2d:9d:ae:1a:
                    70:be:4f:b2:e0:bd:82:bf:4a:46:c2:82:54:74:1a:
                    d3:39:8d:a7:d4:3d:3a:00:3b:4a:b9:f2:7e:85:01:
                    e6:f5:f2:25:3f:83:d4:af:dd:53:2c:da:78:c0:44:
                    a0:a0:6f:e3:04:ac:b8:be:a5:b3:bd:6b:d9:be:69:
                    76:2e:5e:5e:d0:3d:c5:05:b3:42:04:d9:e3:26:ce:
                    70:79:15:31:e4:66:97:21:a2:6e:7c:64:8b:98:cf:
                    98:53:81:04:27:9e:46:79:56:b1:5b:12:fc:12:6e:
                    83:21:ac:c4:7f:13:83:fd:d7:19:ba:43:fb:ec:77:
                    ac:d6:bc:2c:75:1b:c4:a4:ce:ea:13:47:14:82:c4:
                    de:d8:ee:40:75:a0:c5:55:3e:2b:c3:56:62:a6:a4:
                    b2:a1:02:1c:af:42:73:d2:ea:f3:e2:05:b1:49:fa:
                    a6:52:ce:88:3f:be:d0:99:d6:4b:99:ed:0b:05:ad:
                    6e:b3:20:79:98:0d:4b:fd:bc:7b:0a:98:e0:e8:1a:
                    f5:4c:4c:9c:d0:4f:3d:07:1a:f7:e3:07:a6:55:d8:
                    c0:af:27:0e:de:ea:56:1f:90:ed:ca:0c:c1:79:0a:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DC:9B:6C:65:A9:4D:1B:83:35:84:2D:EB:00:C2:D8:B6:E9:51:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3880fce5-9ddc-32a5-9114-28fa1e64c55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.91.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:14:7f:21:e9:64:e2:c7:17:70:57:28:3f:a6:10:89:97:27:
         a1:06:e1:c8:73:c0:28:5b:bc:0c:3e:0f:24:a5:b8:e6:59:6e:
         26:69:26:17:e4:c0:82:85:2b:9f:60:92:c4:4b:31:25:2c:7c:
         71:47:bb:29:64:e7:20:71:ea:fc:7c:57:85:d5:77:16:78:6d:
         d6:c9:83:f9:13:d0:8e:fc:23:d4:27:2d:3e:65:58:6e:f9:04:
         7e:34:dc:18:cd:8d:9a:5e:a4:78:47:a0:3c:20:85:5e:6a:e8:
         8e:b1:22:1e:ba:57:01:42:4a:21:1d:fb:3a:66:47:72:d7:23:
         90:81:48:08:76:09:28:2c:95:02:b1:22:dd:c4:b9:e1:e8:01:
         7a:fc:20:6e:a3:41:80:25:25:24:45:e6:41:3b:09:af:56:ee:
         94:ef:96:00:a4:4a:98:92:87:e9:6f:a8:e3:9e:b5:97:96:e8:
         46:1b:3b:e1:7a:09:41:9a:9a:be:3c:7e:eb:c2:dc:14:99:99:
         69:e3:c8:f9:fe:7d:8e:17:15:4c:73:b3:25:0e:68:b1:84:b0:
         25:e0:11:07:f0:d4:58:f5:b3:55:d7:32:ee:34:9e:ed:a3:d4:
         27:a7:b0:21:be:03:29:69:c2:48:26:5a:7b:69:54:ad:14:b9:
         ed:c2:d9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 13:03:49 2024 by rpki-client on console-fra.rpki-client.org