Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/70a71e9d-e821-3509-96c0-47b0c27e9ddc.roa
File:                     70a71e9d-e821-3509-96c0-47b0c27e9ddc.roa (raw, json)
Hash identifier:          lFP/Pm3t0Mg47ADs1oOblUhzkNDEPdl8GoEoEBhfZp0=
Subject key identifier:   6E:9B:27:A1:70:E3:6E:DC:93:B0:B5:C7:28:B9:BF:DD:E6:33:5D:B6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC1177F564D258B7F90DBE80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/70a71e9d-e821-3509-96c0-47b0c27e9ddc.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        24.151.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:11:77:f5:64:d2:58:b7:f9:0d:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=d60f3640-eea0-4c3e-9ef1-55ebfcd31d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bc:21:99:08:32:99:0c:9c:fe:b1:63:44:14:
                    24:2e:29:55:f6:2c:09:07:ad:81:77:90:49:7e:fb:
                    45:b8:0f:17:ae:3e:04:93:c5:8c:90:44:1d:e3:fe:
                    99:48:28:97:99:88:1c:a4:53:55:a4:31:d7:30:9c:
                    4a:7e:95:e7:43:d6:9c:e2:01:7b:83:ea:7d:07:4a:
                    18:38:95:9d:0b:a5:60:ae:81:9e:c9:b7:3f:de:4e:
                    65:8c:ca:f1:d1:60:79:51:a6:1c:5f:5f:6d:5c:2e:
                    1a:46:e0:53:5b:51:94:46:12:eb:12:b0:c6:11:24:
                    c6:0f:9c:c2:a5:f8:04:4f:6a:9a:1d:5b:89:d3:9c:
                    02:2e:33:d1:e4:db:22:4a:b2:fa:50:66:a0:0d:cc:
                    25:37:ac:00:b1:f3:64:af:dd:c5:9a:12:0e:46:0e:
                    06:1a:14:65:ca:12:4a:63:c6:d9:83:6f:5d:19:a7:
                    52:f7:48:25:65:b3:19:41:35:3c:dd:f5:50:85:8a:
                    6a:74:c0:86:00:51:eb:1d:49:c4:26:3d:79:30:53:
                    16:4a:03:dd:9a:7e:23:da:cd:9b:0c:e8:86:57:40:
                    3b:7a:f8:c4:7f:9c:0a:59:6c:bb:68:bc:05:61:a2:
                    d2:f9:87:c8:b0:68:d2:2d:65:7d:4e:8a:eb:f6:b5:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9B:27:A1:70:E3:6E:DC:93:B0:B5:C7:28:B9:BF:DD:E6:33:5D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/70a71e9d-e821-3509-96c0-47b0c27e9ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.151.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:d6:09:26:e9:56:f1:36:ba:10:42:cd:cc:7d:41:cb:e4:b0:
         83:7c:f7:d5:56:4a:7b:72:24:c3:7a:5c:f1:bf:70:16:14:96:
         fd:40:58:f9:bc:5b:bd:1d:fc:8b:ff:d5:18:5a:07:e3:0e:ea:
         58:a5:d9:b1:93:34:25:7e:53:d0:f6:f4:44:c5:e4:1a:a7:d3:
         a5:7f:e1:0e:46:73:b3:99:d9:83:b9:a0:ca:2a:a3:bc:c9:21:
         ee:4c:bb:f5:9e:fa:28:5f:7a:2e:85:72:98:c1:37:66:61:6d:
         c0:70:b9:f6:d1:e3:68:4a:f2:5f:39:d1:3a:7a:41:21:26:c8:
         aa:4c:6b:89:e5:ae:05:df:dd:ab:3d:3b:0b:8d:6d:3d:fa:c7:
         dc:c0:6b:cc:22:e9:bd:f9:7d:36:27:f4:67:34:df:15:2a:0d:
         d9:dc:77:92:b4:85:bf:ce:1a:05:91:a4:1c:69:6d:29:28:ce:
         01:71:a0:36:73:ce:96:7f:c6:32:88:82:df:f7:0b:b9:0f:29:
         fc:52:da:0f:ad:09:3d:0b:4a:7e:58:db:77:76:97:58:be:2f:
         0e:41:0d:82:6f:e8:55:86:b5:45:9d:b0:06:d3:a0:c7:e9:7c:
         41:66:22:16:d1:c8:e1:1a:68:19:6a:a9:fa:42:62:fd:53:7a:
         00:2a:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:03:58 2024 by rpki-client on console-fra.rpki-client.org