Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa
File:                     3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa (raw, json)
Hash identifier:          P4EjunQW06J8UwpmydkEDrBQRUBdoDbVsh5CRx6P5D0=
Subject key identifier:   65:1D:7C:B0:DD:C5:B0:C7:31:BC:04:F7:6B:F0:C3:26:13:B9:62:6D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A17457201FF2077843A980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        71.9.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:74:57:20:1f:f2:07:78:43:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=c481e7c7-5690-4d8a-b42a-c07d166b7d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:bb:c4:07:19:e5:d3:9d:d6:cd:ec:91:b3:
                    bc:ac:be:b8:9d:d2:f9:ba:5b:89:76:23:6b:dc:e9:
                    16:d0:f1:75:9b:e6:af:aa:91:d4:e8:8d:35:89:9d:
                    d1:3b:a6:7f:c7:d4:75:2e:78:42:4e:96:89:fc:d8:
                    44:aa:98:d9:b4:69:c4:83:3a:46:6d:28:c6:81:db:
                    74:17:2f:f0:9d:27:d7:e3:9a:9b:ab:6b:71:50:26:
                    d0:cd:cf:40:e5:54:6a:55:df:0b:31:4d:5d:4d:dd:
                    3e:a8:6e:94:ea:3c:d5:98:72:2a:1a:bf:28:1c:f2:
                    5b:f1:22:91:b3:e2:f8:d4:ed:ec:47:33:da:72:2b:
                    3a:54:8f:78:d8:9b:1b:79:f8:c5:8f:b9:18:56:e8:
                    e2:45:27:d7:00:c3:3b:6d:cc:c1:37:15:35:24:a2:
                    fe:2a:03:83:95:88:07:79:00:36:b9:31:0b:f6:68:
                    7d:be:9e:77:45:5c:13:ae:5c:e0:97:6c:e5:60:0e:
                    12:e4:74:3d:be:4f:bb:39:29:71:0f:8e:43:a6:a0:
                    82:2c:9b:cf:1a:88:cb:2a:34:b6:f0:af:db:f0:40:
                    10:b7:d1:aa:aa:84:f0:a7:e0:23:95:05:4c:e8:86:
                    36:61:03:98:2c:66:79:4e:b4:86:e9:a5:37:fd:c8:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1D:7C:B0:DD:C5:B0:C7:31:BC:04:F7:6B:F0:C3:26:13:B9:62:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.9.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b5:3e:bd:05:97:d4:e4:c2:07:b3:24:68:15:6d:09:65:fb:
         b7:27:0e:fb:6c:fc:83:57:e9:12:74:19:46:34:42:d4:a8:17:
         5e:b7:fb:7a:9f:57:c0:50:6d:61:da:a6:8d:98:ea:01:0d:56:
         8d:5b:49:91:0e:30:ef:ca:4c:5a:e9:7d:ce:79:30:c9:4f:ca:
         30:33:ad:a2:d0:73:e0:5b:85:99:14:0d:f8:ba:62:77:45:3c:
         ba:2d:77:14:0a:89:d8:a8:85:b5:fe:3b:8b:1b:69:ff:ec:4d:
         61:e3:8f:dd:51:67:4f:23:eb:0f:27:1b:68:2a:eb:7f:bc:a3:
         8d:41:c7:a3:be:1e:97:40:9a:af:4b:ac:69:5d:49:00:f8:40:
         ce:f5:7b:c1:50:c7:0a:f5:9e:e0:c5:ae:18:1c:64:11:b1:ca:
         97:be:82:1c:d3:a2:32:cb:56:5f:9d:38:fa:ed:de:0f:c5:fa:
         ce:1a:20:32:20:06:7c:3e:7d:06:81:81:1d:0b:77:04:21:c8:
         fe:86:3c:2e:e4:d9:74:fc:b9:7a:d0:9d:55:58:0d:2f:6e:cb:
         ea:ed:f7:48:40:ea:75:32:47:ea:8e:74:5c:a6:d9:42:91:12:
         ab:16:78:27:3d:7a:e4:22:c2:fb:4a:40:a2:4d:e1:a5:96:f8:
         f3:1d:08:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:33 2024 by rpki-client on console-ams.rpki-client.org