Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71a013c8-df55-3481-9368-ae841ba3af40.roa
File:                     71a013c8-df55-3481-9368-ae841ba3af40.roa (raw, json)
Hash identifier:          f+hytUVZ6hUkz5iZBKJly2eIEgk1h009F1dz1MyKhDQ=
Subject key identifier:   ED:D0:6E:25:D9:96:03:EB:F1:52:80:20:02:75:61:47:B0:15:7B:B6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DFFD54D063A47B49DD000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71a013c8-df55-3481-9368-ae841ba3af40.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        47.44.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:ff:d5:4d:06:3a:47:b4:9d:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=5b5cc806-df18-41b3-ad9b-31fa8b09a0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:44:3f:e7:60:7c:da:ca:ca:bd:94:bf:76:3e:
                    b4:89:6f:a3:fb:94:06:b0:1c:ef:15:b9:12:38:a7:
                    b1:e0:c9:29:14:25:ff:c6:cf:68:bd:99:b1:c4:36:
                    62:89:fb:07:d4:1a:7b:36:39:14:d3:1a:21:5d:8d:
                    b2:b5:ca:f9:d3:b0:16:fb:26:e9:3a:c7:27:c9:45:
                    ab:34:30:cb:71:54:38:fd:e0:57:33:4a:d5:8d:ae:
                    bc:34:eb:2e:6b:cd:32:9c:f0:5a:06:0f:78:fe:a6:
                    5a:ec:63:1d:89:14:f3:8e:50:8f:73:49:a1:3b:e8:
                    00:d3:b8:df:1a:fd:d5:53:2c:40:f0:29:f6:b9:97:
                    3d:2d:f2:0e:be:89:d6:3d:5b:81:1c:25:ba:45:38:
                    c2:5b:f6:e9:aa:70:22:50:ba:64:c9:d6:4e:aa:d2:
                    e4:09:e5:ce:c7:96:6e:e1:8b:b7:d8:42:4b:07:7a:
                    ba:77:17:37:fb:2f:3e:35:2b:fd:f1:47:86:d1:81:
                    1e:7b:f9:0a:48:fc:9e:e4:55:e0:76:11:ab:f8:f6:
                    35:19:dd:45:f7:56:7e:68:7a:51:1e:fd:f5:64:aa:
                    a5:f2:47:d6:20:52:a5:5a:23:fb:d2:36:14:92:e3:
                    41:1a:be:84:98:2c:d5:54:a5:d3:c0:f8:79:83:c1:
                    6e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D0:6E:25:D9:96:03:EB:F1:52:80:20:02:75:61:47:B0:15:7B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71a013c8-df55-3481-9368-ae841ba3af40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b5:20:02:01:71:34:12:0a:fc:78:75:1d:5d:90:d2:66:6f:
         62:83:c4:0a:88:0a:56:35:e5:cb:3b:e2:ad:40:00:28:68:54:
         c9:a1:49:36:bc:eb:7c:c6:33:ca:4f:c6:56:f6:41:3e:44:5f:
         1c:87:50:40:1d:7a:04:9f:13:eb:b8:70:8d:49:16:4c:5d:1a:
         51:48:35:20:bf:59:4d:5c:2b:93:5c:7c:03:bd:b2:8b:c6:67:
         d1:18:2a:d0:24:5e:fc:6b:0d:f1:23:3f:73:48:a9:ed:9f:62:
         f8:7f:0b:e4:40:45:34:40:bb:fb:d4:ad:b7:88:d1:bc:af:6e:
         2e:de:8c:d7:d8:a2:d6:fd:26:fd:5f:9b:43:ac:90:b9:c7:8a:
         51:16:7d:22:9a:c9:df:28:db:67:a0:d2:2d:25:f0:7d:46:02:
         1e:4d:6c:3c:44:f7:c3:05:1b:ee:32:b1:32:a5:61:6e:f0:84:
         8a:67:66:68:e7:28:90:92:c9:68:5e:5b:57:1d:e8:38:7e:36:
         57:b8:5d:e1:50:06:79:ee:80:33:01:ff:48:e5:74:56:ed:ad:
         6f:a9:b6:5e:9d:91:aa:b5:a8:79:0a:76:fe:31:9a:b0:87:58:
         ee:cd:fe:94:71:bf:92:79:88:06:90:ae:6f:ed:2b:55:da:c1:
         c7:18:1f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:45:58 2024 by rpki-client on console-fra.rpki-client.org