Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4de3ab85-fed0-3c20-a50f-aaf8cec26bde.roa
File:                     4de3ab85-fed0-3c20-a50f-aaf8cec26bde.roa (raw, json)
Hash identifier:          pnkH9e4jWr0B5GQm9jfhwM9mFgpzUSjDiitTsqwhL3g=
Subject key identifier:   1D:B9:80:03:C4:5F:72:1B:D1:D1:57:8A:75:AB:71:A5:A8:9E:11:F5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EA5BD49090ADE0AC57E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4de3ab85-fed0-3c20-a50f-aaf8cec26bde.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        71.11.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:a5:bd:49:09:0a:de:0a:c5:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=59d7a2b7-af74-4fa8-830b-fa57572ba7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:e3:c5:6e:0b:84:4c:57:6d:3a:04:97:66:
                    39:89:a8:8e:8f:47:a7:04:9a:99:f6:24:b6:65:33:
                    a3:b8:10:51:40:d3:18:96:01:10:ba:58:c7:f2:23:
                    60:82:c9:f5:f6:9f:58:5b:be:fe:0b:2e:e5:bb:41:
                    13:50:d3:22:f9:cf:24:db:b3:f7:e4:0b:28:bc:d8:
                    3a:3a:72:de:14:a1:ae:07:47:c3:63:a7:fc:a0:31:
                    05:88:ac:fe:32:5f:08:7f:28:99:0d:22:f6:d5:d6:
                    09:ce:d2:61:d0:3e:a7:10:32:b4:a1:3e:91:db:60:
                    bb:54:f2:5b:7b:2b:c2:cc:ea:df:5a:18:8f:17:1a:
                    d1:e1:6c:53:ec:43:bf:33:ed:72:f9:84:69:b2:07:
                    cd:06:71:c9:66:63:45:28:73:f5:17:53:10:cd:46:
                    9f:a5:82:43:c2:cb:4f:47:85:ed:7e:9e:e5:bc:92:
                    de:84:d5:0e:d3:0c:47:3b:44:6b:f1:0a:98:c0:1a:
                    d0:c1:04:de:1c:f6:21:4d:ca:ec:81:d0:bc:c0:6c:
                    aa:78:04:3e:3c:0b:b9:7b:23:4b:f0:74:3d:8d:f2:
                    94:8c:aa:9f:f2:36:dd:6b:5c:37:39:29:e5:5e:d3:
                    54:47:4a:de:b4:ce:76:0d:eb:7e:e7:bc:13:6d:f3:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B9:80:03:C4:5F:72:1B:D1:D1:57:8A:75:AB:71:A5:A8:9E:11:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4de3ab85-fed0-3c20-a50f-aaf8cec26bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.11.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:bf:fd:1e:b0:24:95:7c:9c:64:1a:c7:43:50:43:c0:37:07:
         a2:90:bf:12:27:4a:25:4f:dd:67:87:b6:cd:f3:ff:1d:6a:51:
         e5:35:6a:f6:1a:48:a4:76:f7:4b:2c:0e:4a:e7:f9:b7:69:90:
         26:1f:dd:7f:25:db:a5:45:cb:2e:07:aa:4e:f5:4f:82:a4:e7:
         cf:8f:7c:f0:94:da:9b:44:94:88:02:d2:99:cc:dd:a5:b2:f9:
         e6:2a:fb:f0:0f:db:ab:dd:98:f9:77:0d:75:92:0d:3e:26:6c:
         f6:10:64:5b:0b:70:f1:19:06:6a:fa:bb:45:9e:2b:f6:62:b4:
         a4:bf:42:c3:74:1c:3b:db:44:dc:a3:a2:08:ac:63:cb:6f:df:
         58:91:54:e5:50:d0:28:61:2f:27:02:b1:02:73:6c:5b:20:38:
         24:38:ff:bc:3c:14:96:77:c4:d4:09:01:1b:ba:b8:a1:94:66:
         7b:29:37:b8:f0:a1:25:4f:8f:b5:86:d5:3e:b8:7f:2e:fb:b4:
         d0:6d:d4:f8:a2:9e:e5:3a:39:bc:f0:fa:b8:e9:2d:5e:ca:ed:
         83:67:42:c0:33:9b:25:b2:71:b0:6a:f2:1a:24:23:c3:d9:58:
         37:82:3b:23:6c:a2:a1:c6:21:87:96:d4:40:c6:4a:5f:43:20:
         41:79:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:45:54 2024 by rpki-client on console-fra.rpki-client.org