Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5a2fba7d-4373-3ee7-952d-935ff096a2c4.roa
File:                     5a2fba7d-4373-3ee7-952d-935ff096a2c4.roa (raw, json)
Hash identifier:          8leVmCBHcEMUpn+TM3YYCdIcC4e8Bw9pb3KOeR0Z7P8=
Subject key identifier:   BA:60:3A:97:E5:E1:DA:C6:F7:DB:2F:E3:A6:42:12:1C:9D:63:91:CF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583836C257D8E6EA84670E4D1300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5a2fba7d-4373-3ee7-952d-935ff096a2c4.roa
Signing time:             Wed 09 Dec 2020 05:00:00 +0000
ROA not before:           Wed 09 Dec 2020 05:00:00 +0000
ROA not after:            Wed 02 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        47.25.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:36:c2:57:d8:e6:ea:84:67:0e:4d:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec  9 05:00:00 2020 GMT
            Not After : Dec  2 05:00:00 2026 GMT
        Subject: CN=e3e7b051-51d9-46d5-a066-67c125c4307f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:51:a1:89:35:b6:ac:04:bc:db:4e:86:21:
                    6c:fe:e9:54:82:73:c3:ec:f2:a6:cb:15:1c:66:50:
                    19:33:6e:b0:4f:76:8a:21:bd:07:f2:18:ab:50:ad:
                    78:21:99:9b:83:35:82:d5:b0:82:37:3a:15:0a:b1:
                    43:47:54:74:a1:06:cd:1d:27:46:62:18:58:1f:a5:
                    1f:85:c3:e2:40:cd:f2:04:cc:5c:68:a8:4e:33:22:
                    ee:44:6c:d3:74:2e:ef:ae:83:ed:de:1d:f0:64:fb:
                    5d:9a:fb:6b:51:3b:88:62:42:f3:83:c8:e4:0b:45:
                    53:72:09:cf:1d:7d:5b:e2:30:3c:50:2e:79:36:f8:
                    81:e5:09:84:a2:a9:b6:17:4e:6b:c6:e8:11:7a:9c:
                    f9:b8:16:2e:93:27:af:19:f1:d8:43:9f:21:f7:52:
                    b6:b2:0b:2c:07:46:4d:71:29:24:08:c3:dd:f0:fb:
                    9d:fe:eb:92:eb:1e:c9:d5:02:3b:a0:ed:63:66:0e:
                    c2:f8:3f:78:4c:7a:37:c6:9e:b0:39:a6:34:13:4c:
                    5e:ca:c9:49:cf:22:14:30:b3:4c:d1:87:41:0d:2f:
                    c9:a1:bd:42:40:10:b6:41:bb:a1:d7:3b:35:fe:8a:
                    05:41:69:d1:80:11:db:fc:11:19:88:c8:26:1e:14:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:60:3A:97:E5:E1:DA:C6:F7:DB:2F:E3:A6:42:12:1C:9D:63:91:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5a2fba7d-4373-3ee7-952d-935ff096a2c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.25.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:04:83:9c:cc:52:a6:0e:92:9b:16:5c:a1:8d:24:67:c9:92:
         c2:01:ac:e6:e9:68:c3:ee:40:9f:5f:c4:94:ba:7d:fd:5e:4b:
         67:df:ec:12:7e:3e:28:7d:bb:92:50:5a:fe:79:a5:3e:ad:7e:
         ef:d7:f2:51:92:8e:c0:0c:1b:04:1d:41:0c:2b:e2:68:6d:fa:
         23:9a:18:f2:0a:10:fd:2a:70:11:ba:8b:9f:2b:72:c0:12:5f:
         d0:46:13:f4:f8:c4:1b:2e:2f:4f:f2:fb:ee:91:59:a5:47:cb:
         c6:3b:f3:09:55:4b:b4:3b:da:04:b7:dc:8f:bf:8a:3f:9f:96:
         2b:72:02:07:56:fb:da:17:58:72:56:65:39:d9:3c:4f:b4:a7:
         93:f5:c6:6d:61:e4:c8:fe:01:fe:ca:24:60:a6:87:5a:e4:47:
         cc:d9:58:ed:b6:d3:87:50:ca:68:db:4f:30:68:95:24:79:95:
         d3:96:a3:1c:f9:b9:35:5b:29:27:ae:c2:af:78:40:5d:e6:33:
         10:ab:49:50:bc:28:d0:24:77:21:a4:3d:94:c2:c1:be:37:f1:
         a9:6a:86:c7:4c:2a:ab:ef:5e:ee:a7:fc:af:69:53:84:d9:d8:
         ed:6a:6f:ba:82:5d:7b:d6:fb:66:3f:ba:fd:ea:65:b8:8e:53:
         84:d0:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:41 2024 by rpki-client on console-ams.rpki-client.org