Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3e50ac33-36cb-3029-8e77-5621ac442580.roa
File:                     3e50ac33-36cb-3029-8e77-5621ac442580.roa (raw, json)
Hash identifier:          Cdchvqwb7z2oRsr9JpH7Hqy0ovKt01XoF36lhH0QwVQ=
Subject key identifier:   D7:6B:ED:F9:66:6D:DD:8A:20:1F:0D:F0:CC:E8:58:B2:30:D0:AA:32
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC11FDE3A216AC247F6833E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3e50ac33-36cb-3029-8e77-5621ac442580.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        156.19.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:11:fd:e3:a2:16:ac:24:7f:68:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=ec0bec5a-ffa3-42b0-8b21-b96613d22b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7f:4a:98:af:88:d8:b0:d5:a7:39:8f:c3:e1:
                    1d:8e:5b:19:d9:3e:05:7d:6d:9c:e1:65:82:a3:73:
                    c4:98:83:91:07:a7:c2:8a:d6:d0:b8:89:80:89:e0:
                    5e:e2:88:69:f4:4c:a2:6d:d0:b5:42:4d:e3:59:5d:
                    9a:5d:7e:33:bd:2a:c8:df:f5:84:3c:17:d3:2a:bd:
                    5e:49:a1:40:3d:67:a5:b7:e4:de:36:72:9c:c1:1a:
                    df:cd:be:4c:cb:0e:22:c0:88:b4:21:8f:81:2e:8a:
                    3e:de:78:64:6a:88:b6:41:53:d8:69:02:16:e7:a8:
                    67:54:e9:cd:54:ec:f3:b2:ee:b6:72:98:b0:46:c7:
                    17:44:da:01:20:fd:01:19:ba:35:b2:a5:d2:49:0e:
                    e4:20:7c:5d:97:55:ae:2f:b8:af:d9:66:bd:f3:93:
                    f2:bb:e2:b4:87:98:93:8b:c2:d4:54:4f:02:83:7b:
                    3e:72:e6:10:ea:45:3c:29:7a:af:84:74:c3:cc:9e:
                    4d:86:49:35:30:d7:07:2e:bd:79:e2:bf:1c:38:a8:
                    44:0d:07:ec:3f:2e:42:85:5d:55:06:86:77:21:ff:
                    aa:51:0c:d8:e7:bc:13:a9:87:0c:1d:f4:a8:3b:88:
                    65:7a:84:51:07:f6:98:49:d8:b4:a0:d7:a5:94:31:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6B:ED:F9:66:6D:DD:8A:20:1F:0D:F0:CC:E8:58:B2:30:D0:AA:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3e50ac33-36cb-3029-8e77-5621ac442580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.19.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:45:c5:09:d6:9f:b6:f2:ab:b1:cd:ea:0b:e1:fe:20:3e:de:
         48:ce:c6:0f:14:98:54:a8:e9:8e:66:45:3e:37:49:fa:b9:c7:
         91:fe:ae:94:d8:32:ec:b6:76:84:c7:69:8b:d5:95:8c:a4:88:
         e9:36:3b:38:ac:7e:92:1c:ce:a6:1d:47:43:62:39:c1:82:42:
         19:4c:e6:3f:ce:61:fd:a4:08:01:a8:b8:17:16:99:0a:44:f5:
         3b:3d:ec:e7:ac:95:1b:e6:09:d3:69:76:c6:51:f1:0b:f6:5b:
         26:08:f9:ab:c9:36:db:ef:4b:a9:60:0f:9d:5b:1d:4a:b5:ef:
         b0:83:7c:2b:13:f3:8e:a6:ae:2a:67:4c:b5:83:50:c7:2d:8e:
         2d:97:e2:2d:d1:e8:a3:b4:8a:5c:5a:ba:fd:9b:dd:44:a5:42:
         36:d5:21:d4:af:c1:5d:3d:ae:b6:82:ae:d2:19:0c:24:42:08:
         f4:ef:81:03:9c:1f:50:7f:c5:4d:b6:49:e6:6b:34:3e:7a:73:
         37:5a:5a:62:ec:b6:f3:de:2b:43:e0:20:65:9e:29:ed:0c:5e:
         72:2a:17:58:a7:80:f1:84:34:f9:24:7b:0d:c5:f4:63:2d:cc:
         f4:23:94:54:0d:19:29:69:35:5c:65:94:63:ad:70:6c:96:07:
         62:d7:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:06 2024 by rpki-client on console-fra.rpki-client.org