Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3cfa0ded-a70d-3f5a-9ccf-ff45a4ff2c71.roa
File:                     3cfa0ded-a70d-3f5a-9ccf-ff45a4ff2c71.roa (raw, json)
Hash identifier:          WQfSX+kaHqaBfjrOfWCsMMmXHm+kt0bqz+U/hYMgXSA=
Subject key identifier:   40:46:C7:81:5C:6B:B9:F7:6B:A0:04:15:E7:AC:5D:61:DD:80:29:56
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858401B0423A448144E0E19ADD0E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3cfa0ded-a70d-3f5a-9ccf-ff45a4ff2c71.roa
Signing time:             Wed 26 Jun 2019 20:53:56 +0000
ROA not before:           Wed 26 Jun 2019 20:53:56 +0000
ROA not after:            Mon 06 Mar 2028 05:00:00 +0000
asID:                     20115
IP address blocks:        47.42.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1b:04:23:a4:48:14:4e:0e:19:ad:d0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 26 20:53:56 2019 GMT
            Not After : Mar  6 05:00:00 2028 GMT
        Subject: CN=d9bbae62-b550-4b3a-a36f-7fbb3fb4b982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:d7:1c:32:fc:29:0d:87:18:cd:cb:0f:c4:
                    43:98:17:51:be:c3:07:1a:03:b6:69:bf:f0:10:a5:
                    9e:4c:95:e4:06:8d:8d:50:a9:1c:2e:b7:39:df:63:
                    9f:36:02:0f:c7:20:b5:cf:5a:49:fa:b8:ac:ba:18:
                    8d:d0:4f:3e:84:70:eb:b2:ca:42:fe:05:8f:04:b6:
                    4e:ee:fa:e1:55:66:ea:d3:bc:a2:b1:97:a4:fe:51:
                    c3:06:89:5f:e9:88:24:a6:55:2f:ab:f0:3f:62:4f:
                    1b:9b:98:5c:4f:94:dc:63:83:a1:cd:06:a2:51:9f:
                    ef:a6:fd:84:26:5d:9b:38:7c:76:69:fb:7e:4d:f2:
                    b7:3e:48:9f:5a:89:6b:fa:6b:60:c5:7e:d0:9d:1c:
                    a2:28:1a:f6:a0:fc:cf:31:95:81:8e:52:10:84:d9:
                    7f:64:cb:d6:d4:c9:a6:5b:55:4b:90:97:d7:19:f5:
                    94:2e:a2:30:b6:e1:2f:cd:2a:50:35:2c:d3:88:e1:
                    67:97:84:f3:db:0f:6e:c4:2e:7e:ff:1d:a7:bc:fd:
                    a5:52:89:13:40:e6:51:bb:8c:4e:3c:47:98:cf:e2:
                    18:2b:41:bf:83:75:81:54:c6:03:30:fb:26:86:83:
                    43:0c:6a:ab:83:42:25:aa:6c:b7:41:d2:e8:44:b6:
                    2b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:46:C7:81:5C:6B:B9:F7:6B:A0:04:15:E7:AC:5D:61:DD:80:29:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3cfa0ded-a70d-3f5a-9ccf-ff45a4ff2c71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.42.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:1f:d1:19:11:df:28:2c:66:18:96:cf:bb:3e:73:28:2a:6c:
         c0:50:aa:e5:0c:92:24:6b:a8:4d:ff:8a:ff:56:4f:b1:51:cc:
         20:b9:2c:29:32:1b:fd:40:df:da:2a:04:1d:97:70:13:5f:42:
         25:19:21:c2:2e:5f:2b:ef:b3:78:b1:ab:d5:29:37:1d:66:b6:
         7d:6a:2a:de:73:9d:19:22:65:64:2c:81:09:da:cc:83:08:df:
         26:de:2b:80:42:32:05:61:b2:ad:f5:96:38:9f:9a:06:f5:b9:
         4f:74:c4:fb:38:b9:85:05:f5:c5:e1:50:5c:2f:3a:12:87:d7:
         e5:b3:72:e2:59:83:fa:d6:77:d3:a2:35:f8:7d:26:ea:99:02:
         88:81:b9:ca:77:0b:f4:40:47:53:b2:ca:ae:3c:50:83:14:43:
         03:3c:37:ac:6e:a5:42:1d:6d:a0:bc:4e:13:16:51:d1:11:a8:
         2d:80:3c:2f:04:a9:42:74:42:66:f3:82:a7:94:42:1f:e7:78:
         b9:29:c0:79:b9:21:54:62:6d:52:81:26:ad:a8:10:6d:76:36:
         a6:d9:6b:43:cf:33:f5:2a:fd:93:73:da:ac:63:14:39:ad:a0:
         ee:2a:07:9f:9a:b2:36:36:26:f1:4a:f6:52:8c:6a:43:7c:aa:
         cd:16:46:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:03:51 2024 by rpki-client on console-fra.rpki-client.org