Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56953d6b-5952-3cbf-b1c7-d2c8b3c8eca5.roa
File:                     56953d6b-5952-3cbf-b1c7-d2c8b3c8eca5.roa (raw, json)
Hash identifier:          APJKd6++hyWDJLknamPDRaG8Cey1shPNWKXwnIHAQBo=
Subject key identifier:   40:2C:20:88:2D:0C:8C:65:BF:60:6E:B8:93:1E:9D:DA:B5:F9:27:B7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DE77E5E7385A62BFE4700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56953d6b-5952-3cbf-b1c7-d2c8b3c8eca5.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11955
IP address blocks:        47.231.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:e7:7e:5e:73:85:a6:2b:fe:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=07780fa4-9fe5-480c-9c6d-a09247a57387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:44:e7:bd:ac:61:1f:af:a1:7e:93:8e:ca:7e:
                    b5:90:91:2d:0a:f6:08:39:5c:38:41:74:87:fe:99:
                    25:2a:d9:8c:c8:c7:71:8b:21:25:97:3e:4f:08:0d:
                    2f:45:0d:97:34:ae:78:a7:94:9a:03:3f:00:53:14:
                    52:bb:de:07:17:7f:90:d4:91:b0:a7:cd:7b:30:70:
                    38:f1:85:35:d9:bf:66:80:5d:52:48:f4:18:6f:39:
                    10:43:33:1b:a4:d5:0a:8c:22:0b:cf:af:55:8c:76:
                    2a:3d:3b:5d:4a:11:b9:ac:c7:3d:a8:46:80:c0:6a:
                    07:82:d5:ca:80:1d:39:97:36:1d:7f:70:72:eb:ca:
                    ab:c5:9b:a9:c3:1b:6e:a9:f3:d2:19:bd:5d:f7:3b:
                    9e:6c:fe:d2:6f:30:29:2c:22:27:52:3a:e2:84:66:
                    ff:cc:23:f6:32:b5:d1:50:fc:05:b5:ff:db:34:c9:
                    a5:ad:b3:4d:92:67:c6:02:73:75:6f:d5:8c:29:d9:
                    bd:5f:42:61:d4:9b:90:25:3c:7d:cd:8b:0e:82:75:
                    05:fc:6a:d1:c8:e9:69:48:1b:a2:d8:25:23:6c:3d:
                    9f:28:6d:d2:6d:06:c0:af:a7:e3:59:b2:3a:36:50:
                    7c:8c:14:b8:21:69:b1:15:f8:ca:28:18:0c:fa:4d:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2C:20:88:2D:0C:8C:65:BF:60:6E:B8:93:1E:9D:DA:B5:F9:27:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56953d6b-5952-3cbf-b1c7-d2c8b3c8eca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:69:bc:1b:79:41:7b:34:58:41:40:32:a2:69:19:76:cb:
         ac:97:9a:b9:d4:3c:64:87:76:a9:a4:30:46:58:b2:f4:b5:14:
         97:b9:11:f6:f2:48:e0:b2:b7:42:2a:e2:dc:d4:16:1d:f7:94:
         fa:88:5c:6d:b9:2f:bc:6c:d3:db:36:7a:77:23:8a:97:45:5a:
         56:f0:9f:f3:ea:64:38:ce:ed:3c:99:75:4d:fe:7a:55:81:87:
         38:40:95:c7:ac:5e:76:68:12:32:ee:64:a5:5e:a9:e3:ed:a3:
         3a:a2:85:86:b4:02:c4:f9:bf:b5:e4:35:50:4d:18:85:c8:2a:
         0b:31:b9:93:90:a2:80:15:88:08:81:72:e3:04:ff:68:ff:f4:
         91:c0:86:43:bb:ed:48:a8:fd:62:3f:a6:41:d9:f7:d4:6c:24:
         f5:00:0e:6f:20:c6:67:bb:27:5b:b0:9b:05:97:ca:fe:97:c7:
         79:5c:11:3b:a5:c5:85:f2:67:30:4a:3a:8c:92:2c:c4:2c:b4:
         ae:ad:c1:fd:d5:b3:06:a9:09:d9:3d:01:4e:8e:39:fb:7f:1a:
         f7:f9:bb:a9:84:8d:ee:7c:25:60:13:f7:95:58:70:69:f4:4b:
         9c:04:6e:e7:53:bd:0d:33:51:6e:51:dc:49:a7:1d:ec:86:11:
         74:ca:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:45:54 2024 by rpki-client on console-fra.rpki-client.org