Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/484b0672-09cb-3ac5-a88e-88f22552381d.roa
File:                     484b0672-09cb-3ac5-a88e-88f22552381d.roa (raw, json)
Hash identifier:          bmn3mXHMUAp6sRToi1RJcjJkI5Uam1BcSjSS14lh0uI=
Subject key identifier:   30:9E:76:9D:09:56:6A:67:85:63:03:7D:FC:E2:A5:58:DA:FB:D0:43
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583937A02C604C7A1252CBDCCAC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/484b0672-09cb-3ac5-a88e-88f22552381d.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        71.9.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:a0:2c:60:4c:7a:12:52:cb:dc:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=019dbadd-16a3-49f6-bdc6-2c5bfc75ef99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:8a:f8:30:d3:ee:d6:2f:b9:75:0e:7e:59:
                    54:9c:7a:46:64:32:66:b1:6c:fe:d4:ea:5f:a7:c4:
                    67:35:fa:ef:b0:54:63:3a:a9:cd:69:c0:31:e3:9a:
                    c7:87:94:df:e4:a2:81:a2:21:7a:a4:1c:a7:5a:cc:
                    75:f7:05:75:88:bb:fc:16:3c:51:31:f9:d3:21:fc:
                    a0:a7:30:88:63:5a:23:fa:11:21:30:ac:6c:d1:90:
                    c4:aa:01:d4:2c:c0:d2:c9:78:bd:ee:1e:81:58:ed:
                    2e:b4:f0:d9:00:11:da:77:df:93:17:de:01:d7:c9:
                    36:98:70:ad:db:1e:4f:8d:1f:20:11:c7:fc:6a:de:
                    cd:bb:9b:40:00:f6:8f:94:0a:6b:76:f3:70:7e:d9:
                    1f:2f:65:28:b7:a3:35:e4:5a:f6:b1:5c:a7:54:0c:
                    38:cd:16:a0:95:2a:21:ce:f7:ef:f2:79:6b:01:10:
                    5f:23:74:9c:c4:de:07:23:b3:95:34:43:90:3a:4b:
                    fa:7f:11:2f:7e:54:cd:a4:b1:6a:96:67:c5:65:02:
                    07:2e:b1:34:9e:74:17:7d:34:30:2d:72:d8:54:19:
                    19:16:1a:91:60:4a:a5:88:a8:25:b5:87:70:44:ba:
                    cd:d8:03:66:5d:15:e7:cf:b2:9e:75:9e:48:04:e6:
                    ab:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9E:76:9D:09:56:6A:67:85:63:03:7D:FC:E2:A5:58:DA:FB:D0:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/484b0672-09cb-3ac5-a88e-88f22552381d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.9.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:55:1c:4d:ce:e7:e1:8c:4a:5b:2f:73:cd:0d:78:9b:2a:8c:
         6f:46:bd:7e:4f:73:9d:f6:05:ca:f0:8c:98:94:97:e2:cf:02:
         11:0c:48:66:4d:ea:78:d8:5c:a5:e6:88:ec:6b:09:b3:61:bc:
         79:a0:77:b5:58:78:69:f4:69:2d:64:8c:95:4b:bb:03:31:05:
         87:a6:4d:dc:dd:56:cc:04:54:36:71:9a:c7:41:53:fa:5c:f4:
         7a:66:06:f6:11:aa:ab:89:f8:48:be:65:6b:06:09:92:36:ce:
         68:2f:02:c0:b6:d2:1c:e1:3c:cb:90:df:5f:75:8b:f0:1f:bc:
         e8:18:00:53:5e:9d:6f:9b:99:69:22:cb:12:0c:d3:b9:76:ee:
         39:c2:a2:72:5e:e2:05:5a:3a:52:5e:a8:ef:70:57:a2:ed:6b:
         56:8e:9e:1a:00:75:40:6e:5a:66:8f:a2:8c:67:de:fa:3e:ca:
         31:4d:46:6f:ff:a8:16:5d:ce:21:a4:6c:8b:5d:a5:94:18:6a:
         c1:1c:98:81:59:03:fb:a4:04:d9:7a:4b:25:d2:4b:32:0c:54:
         25:8a:da:d5:fd:63:d8:da:3e:9a:80:2d:10:37:bb:54:0c:dd:
         59:54:05:e2:33:37:3d:8f:a2:c9:82:bb:be:cf:48:21:b4:f0:
         1d:60:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:07 2024 by rpki-client on console-fra.rpki-client.org