Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63d90d78-dddd-38c8-91cf-a22522ab2c03.roa
File:                     63d90d78-dddd-38c8-91cf-a22522ab2c03.roa (raw, json)
Hash identifier:          3ZFErO83seiE935n4/4XeUS+aOk6S9XvPAk5MrqRqnw=
Subject key identifier:   12:42:70:6F:98:30:CC:1C:66:1C:3A:A5:B8:31:7D:D9:D1:E4:1D:A8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0D602BC4C96930FB866F0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63d90d78-dddd-38c8-91cf-a22522ab2c03.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        71.91.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:d6:02:bc:4c:96:93:0f:b8:66:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=e8044880-3a4f-4ee0-989e-4d2993106707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e1:1f:28:ac:c4:bc:6c:03:ef:bc:a6:f0:4b:
                    eb:a9:08:cd:7e:2c:ec:99:2e:37:26:52:3d:9e:d4:
                    24:6b:1b:83:bc:5a:85:04:a7:91:32:61:8d:57:6c:
                    83:19:b7:23:54:b8:cf:ad:e4:57:0e:13:52:6a:ad:
                    9f:eb:0b:60:ce:50:04:dc:7a:f0:2f:14:63:7b:c9:
                    59:3d:a4:b5:53:70:fd:36:88:75:66:07:0e:4f:ba:
                    9a:7f:0e:91:a0:93:20:2e:51:45:d2:d6:29:f9:9e:
                    0b:d2:57:0e:d1:49:92:2e:ae:b0:92:9c:00:44:7b:
                    06:04:9f:38:93:51:7c:69:59:c4:b0:ab:f1:aa:bb:
                    f2:08:ec:ca:4d:f5:c9:64:8c:72:a8:80:cb:c0:8e:
                    f9:b5:3d:d9:e0:1f:3c:09:4c:0e:f4:29:7d:d2:a6:
                    cc:90:60:af:41:e5:69:64:c5:c5:0e:6a:5c:b2:7f:
                    29:d4:43:2d:50:bc:8e:0a:5a:9d:d6:71:6d:00:d1:
                    ca:d5:a3:1a:a6:3c:18:1b:2b:c4:88:06:dc:23:26:
                    c4:fe:ba:6f:fc:03:90:a4:89:55:d3:0b:08:be:5f:
                    09:2e:72:b1:fb:10:01:7a:31:40:77:ce:33:61:0f:
                    fd:95:89:01:a0:c6:f7:cc:22:af:a8:3a:4d:57:86:
                    ef:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:42:70:6F:98:30:CC:1C:66:1C:3A:A5:B8:31:7D:D9:D1:E4:1D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63d90d78-dddd-38c8-91cf-a22522ab2c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.91.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:4a:db:d7:dc:05:64:81:bf:93:99:bd:b4:b4:b5:d1:0a:28:
         28:35:74:84:bd:73:c3:a5:45:a7:6e:a5:7b:f0:8a:16:8d:1a:
         b0:21:64:a0:65:4a:6b:86:93:ed:fa:08:9a:36:27:10:a6:1a:
         b4:2b:9a:1d:86:2a:d4:22:19:fd:80:4e:c7:4a:7c:fa:3c:16:
         74:89:9b:80:4f:57:b4:b5:46:5f:d7:15:e5:66:18:fd:c5:21:
         ae:9e:15:e6:53:50:35:73:d9:dc:21:f5:70:f1:81:d9:be:57:
         8b:37:0b:e2:1c:4e:3d:20:28:d9:95:63:4f:83:93:d4:32:04:
         7d:09:32:31:74:1e:7c:0e:e2:7b:d2:51:c8:90:39:7a:e6:dc:
         93:32:21:d9:eb:34:9f:cc:c7:d2:b0:d9:a6:5c:06:fb:0a:a7:
         3f:1f:1b:b7:9b:ed:63:2d:62:d7:d9:f0:4c:6f:ba:62:23:cb:
         4f:7d:45:35:62:b2:96:4d:a2:5a:2a:bf:1e:6a:1e:e5:f3:ac:
         ff:07:cc:49:c3:82:cf:94:75:d2:05:f8:12:2a:75:31:81:d0:
         57:7c:57:16:bf:b6:f7:3e:df:eb:39:69:d2:3f:ab:31:28:6c:
         37:34:d9:23:9f:59:f7:60:a8:27:53:2b:f1:65:3d:2d:9b:4e:
         48:b2:a4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:10 2024 by rpki-client on console-fra.rpki-client.org