Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63d90d78-dddd-38c8-91cf-a22522ab2c03.roa
File:                     63d90d78-dddd-38c8-91cf-a22522ab2c03.roa (raw, json)
Hash identifier:          J13StYJxLxDmBoSP+qGx0eLpUiRv36C1f+GdgS6oTcI=
Subject key identifier:   FD:72:E0:56:91:F9:5E:43:29:DA:0D:A0:26:55:63:0F:FD:D6:73:1F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DF553E8CA37769FE96AC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63d90d78-dddd-38c8-91cf-a22522ab2c03.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        71.91.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:f5:53:e8:ca:37:76:9f:e9:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=2bdde83a-ccf6-4ef5-aef8-53e1164ee2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:40:ca:c1:1b:c2:54:a7:cb:17:65:57:3d:
                    1c:d9:f5:88:df:9b:28:c3:23:b5:20:34:e7:a1:50:
                    dd:da:f4:37:0f:09:aa:70:b4:08:8d:1e:82:a2:1b:
                    ae:55:5a:aa:53:59:8a:95:24:ee:db:e3:be:5b:03:
                    66:4e:e9:63:94:fc:b0:cd:f5:54:22:bf:13:8c:c2:
                    59:96:82:c7:2a:1b:50:36:04:81:c1:90:f2:92:1d:
                    04:19:65:f5:f0:66:93:b2:d9:b8:2e:6b:3f:37:30:
                    71:b0:e7:ac:32:41:57:b6:a6:8f:57:21:d4:e7:b2:
                    7f:96:a8:d2:79:91:d8:b9:5d:d9:bf:a2:73:09:d5:
                    0f:4d:62:5b:b5:bd:92:9a:27:8c:2e:e4:a7:fa:d2:
                    3e:96:e2:c6:99:31:3b:07:ae:69:5c:99:aa:00:c4:
                    83:10:42:6d:0c:bc:00:51:f3:fe:d7:d6:4a:42:23:
                    a0:1c:c9:16:7b:30:ec:f7:e0:83:e8:2e:c4:fd:b2:
                    b2:46:61:90:55:62:2e:34:1c:db:07:67:ee:6f:2c:
                    7f:b9:2c:63:3e:d6:da:81:62:18:43:1b:38:87:c7:
                    46:cf:4b:ae:3b:c6:3b:77:d1:bc:03:66:11:4a:ac:
                    92:fe:dc:4a:c7:8f:fe:70:0c:de:b0:34:90:1d:7f:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:E0:56:91:F9:5E:43:29:DA:0D:A0:26:55:63:0F:FD:D6:73:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63d90d78-dddd-38c8-91cf-a22522ab2c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.91.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:83:92:49:b5:65:f3:92:3d:2f:41:af:02:97:56:2b:4a:98:
         cc:7f:4c:e2:e2:f0:ad:b0:78:ae:cb:27:ef:0b:3c:1b:c2:38:
         a2:56:93:48:93:87:f0:50:56:4b:99:e4:56:9a:59:df:16:82:
         d7:59:ef:19:19:47:ef:84:b7:b5:fa:79:c1:8e:2b:c7:cc:a4:
         7d:79:05:43:92:34:99:21:8a:fc:08:8b:08:b8:64:1d:9f:af:
         f8:70:e1:c5:5a:20:29:ec:ac:a0:75:e5:65:3b:56:50:92:c8:
         06:5d:b4:90:c8:20:ef:5f:06:98:6b:08:de:2d:0d:48:49:e7:
         88:90:e4:db:ff:db:0e:a2:98:e4:bb:66:92:6a:a4:0f:63:02:
         b2:23:f5:4a:b4:2d:67:9b:88:23:c6:5a:4f:3b:b7:f5:c0:53:
         e0:09:92:38:5f:83:0b:56:b0:16:9e:5c:28:45:6a:e4:75:fd:
         1a:0e:98:50:c2:fa:32:61:5f:29:1b:4c:ee:d9:21:31:4f:e5:
         58:08:02:db:96:08:87:d7:18:3c:c4:e9:2a:85:59:e4:26:e9:
         aa:af:56:5a:72:28:fc:3e:c8:69:14:03:a0:77:62:fb:7a:9f:
         0a:72:43:45:d0:d9:27:ff:50:79:98:b4:b3:98:28:b0:5c:db:
         4a:0e:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:03:56 2024 by rpki-client on console-fra.rpki-client.org