Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7c718df7-86f1-3f87-bc2a-5d52f9564560.roa
File:                     7c718df7-86f1-3f87-bc2a-5d52f9564560.roa (raw, json)
Hash identifier:          kQwSVxLQPyUQU+KllHwBahOevHuqmXuYnZw/URMBRs8=
Subject key identifier:   BE:47:FA:88:3F:FE:BB:6F:2B:22:D6:A3:3A:5F:55:70:3F:42:D8:45
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285839379EFADF607D9399C1B9AD80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7c718df7-86f1-3f87-bc2a-5d52f9564560.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        71.10.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:9e:fa:df:60:7d:93:99:c1:b9:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=757c29db-ed71-434e-ae20-dce90faf5c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:f1:60:1b:24:4a:53:bd:f9:f6:d5:eb:9b:
                    3a:ce:0c:49:34:d1:59:a3:da:67:4c:b4:00:8c:f7:
                    d4:b8:04:4b:1e:0d:4e:f3:c0:dd:81:6a:fe:c8:59:
                    79:0d:40:9a:4f:d0:d7:bb:64:25:97:f6:fc:61:b0:
                    42:28:6a:79:a7:e7:7b:74:31:cc:7d:55:cd:36:5e:
                    56:85:e4:6d:a0:60:d2:d6:05:e1:95:36:f3:78:72:
                    f1:30:14:8b:41:85:cb:a2:ef:e4:6b:dc:98:f8:b0:
                    2d:54:21:b1:23:3b:bb:81:7e:92:97:89:92:9b:8c:
                    0c:2d:47:ca:db:01:b2:63:d3:00:eb:fa:9f:a5:5d:
                    26:17:65:83:fb:56:10:bb:51:13:9c:27:c9:70:81:
                    61:e2:12:1a:f7:b0:db:67:9c:c1:d5:6a:93:c5:cf:
                    aa:a4:6b:40:72:81:da:6a:29:ba:b0:0a:c7:c5:ba:
                    43:23:26:30:42:e7:6f:a5:28:ca:ac:c5:a7:34:39:
                    76:55:f1:5e:bd:79:6a:21:12:ac:2c:a1:35:fa:f4:
                    37:3d:40:af:14:0c:82:38:96:86:39:f5:ed:3e:2b:
                    e2:97:51:2d:9b:15:02:6c:5c:1b:c1:f6:04:18:72:
                    c4:bb:75:23:14:7c:4c:4a:a8:36:a9:8a:f7:8a:68:
                    bb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:47:FA:88:3F:FE:BB:6F:2B:22:D6:A3:3A:5F:55:70:3F:42:D8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7c718df7-86f1-3f87-bc2a-5d52f9564560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.10.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:94:b3:fc:fd:5d:61:ac:a5:74:be:0b:fd:fe:da:bf:b2:7d:
         34:7d:d3:8c:ef:48:78:af:12:cb:eb:72:38:16:40:47:f1:47:
         b5:db:8a:7e:e1:aa:19:92:ea:74:14:8d:ae:d6:21:7a:00:87:
         9f:25:44:66:cc:b1:2d:29:72:de:15:3b:5e:e4:02:45:4a:bb:
         4b:53:b8:0d:aa:ff:24:fb:a5:8e:ab:a0:0d:67:8c:d1:9a:14:
         6f:bd:08:1d:86:50:8c:ec:0f:17:dc:94:7f:f6:76:d0:66:86:
         37:27:f6:95:4e:18:41:df:0b:4e:89:23:82:cd:03:5e:8e:f4:
         7a:d6:6b:07:d1:c6:45:be:fc:c2:6a:57:e0:bd:67:5e:fa:7d:
         40:07:6f:1c:22:ca:6a:6f:e9:ac:0f:64:13:a1:d5:0d:e7:1c:
         03:5b:17:85:59:36:9f:89:3c:31:17:1b:a0:c2:4d:d5:2d:be:
         b3:a4:e4:af:e2:66:a1:a0:ff:11:55:a0:2b:81:01:68:84:9e:
         98:5b:97:71:db:f9:d9:9b:e2:52:e7:a2:4c:2a:68:45:6d:fb:
         de:cc:83:d3:f5:95:19:0a:f8:ae:aa:eb:72:91:ee:fd:8f:77:
         c1:fb:5a:cc:dc:b4:c3:cd:25:86:fa:1c:1b:99:a7:f7:d2:32:
         39:85:29:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDk3nvrfYH2TmcG5rYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDMxMTA1MDAwMFoXDTI3MDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NzU3YzI5ZGItZWQ3MS00MzRlLWFlMjAtZGNlOTBmYWY1YzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLfxYBskSlO9+fbV65s6zgxJNNFZo9pnTLQA
jPfUuARLHg1O88DdgWr+yFl5DUCaT9DXu2Qll/b8YbBCKGp5p+d7dDHMfVXNNl5W
heRtoGDS1gXhlTbzeHLxMBSLQYXLou/ka9yY+LAtVCGxIzu7gX6Sl4mSm4wMLUfK
2wGyY9MA6/qfpV0mF2WD+1YQu1ETnCfJcIFh4hIa97DbZ5zB1WqTxc+qpGtAcoHa
aim6sArHxbpDIyYwQudvpSjKrMWnNDl2VfFevXlqIRKsLKE1+vQ3PUCvFAyCOJaG
OfXtPivil1EtmxUCbFwbwfYEGHLEu3UjFHxMSqg2qYr3imi7LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5H+og//rtvKyLWozpfVXA/QthFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvN2M3MThkZjctODZmMS0z
Zjg3LWJjMmEtNWQ1MmY5NTY0NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRwrSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJuUs/z9XWGspXS+C/3+2r+yfTR904zvSHivEsvrcjgWQEfxR7Xbin7h
qhmS6nQUja7WIXoAh58lRGbMsS0pct4VO17kAkVKu0tTuA2q/yT7pY6roA1njNGa
FG+9CB2GUIzsDxfclH/2dtBmhjcn9pVOGEHfC06JI4LNA16O9HrWawfRxkW+/MJq
V+C9Z176fUAHbxwiympv6awPZBOh1Q3nHANbF4VZNp+JPDEXG6DCTdUtvrOk5K/i
ZqGg/xFVoCuBAWiEnphbl3Hb+dmb4lLnokwqaEVt+97Mg9P1lRkK+K6q63KR7v2P
d8H7WszctMPNJYb6HBuZp/fSMjmFKSI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:48 2024 by rpki-client on console-ams.rpki-client.org