Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/834b41a2-a339-3fef-a7fe-dd2a7dc6cbc3.roa
File:                     834b41a2-a339-3fef-a7fe-dd2a7dc6cbc3.roa (raw, json)
Hash identifier:          btGSqbfqqQmcPiNaKkZWgzipu6PAR2K1V89aUU2+Q98=
Subject key identifier:   1A:01:F0:8A:19:D4:18:1E:DF:2C:F9:08:98:1E:C3:9D:05:B3:D6:07
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC11584933AB4ABEE75EE700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/834b41a2-a339-3fef-a7fe-dd2a7dc6cbc3.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        71.85.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:11:58:49:33:ab:4a:be:e7:5e:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=d689c6b7-bf73-48e2-bc6c-1e3f2fd57fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:81:f5:a8:e8:9c:16:34:4a:e0:b3:eb:26:23:
                    dd:e3:e6:8e:6b:40:54:2d:bd:cb:40:ae:33:4d:60:
                    06:bc:26:25:33:aa:72:e6:79:c7:be:35:61:60:22:
                    1d:c7:9a:7f:2e:37:ea:ca:d1:af:1e:a7:fe:5b:c8:
                    23:61:51:6e:f6:0f:bf:3e:61:2c:85:aa:a7:0c:59:
                    b7:b0:99:b3:72:a5:30:82:7d:e8:28:23:fe:79:a6:
                    6e:40:a0:83:e0:e1:70:aa:d8:0a:d4:36:6b:77:71:
                    df:64:17:39:67:c0:83:6d:ae:ed:db:3d:97:c6:e7:
                    21:10:a1:5c:77:4b:81:5e:6c:10:36:5b:f7:0b:21:
                    7c:d0:b0:dd:06:f1:57:da:76:7e:9a:d3:cd:3a:e5:
                    67:00:43:8f:6d:67:96:c7:a4:46:2f:67:ed:53:f9:
                    59:0c:83:41:d8:d4:f8:80:c3:5e:d6:8f:cd:3c:a5:
                    1f:4b:7f:c6:d8:31:57:a4:3a:8c:fe:b6:fa:59:49:
                    d9:b2:6f:79:40:57:f4:32:af:70:bd:b2:76:dc:cd:
                    c9:52:8d:fa:1d:57:f3:ce:24:84:0c:f2:94:3f:c8:
                    9d:ac:f1:36:9b:8e:2a:47:14:a4:fc:49:62:89:60:
                    68:0d:ca:04:f9:25:bb:53:0f:6f:8b:ec:06:86:8e:
                    ea:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:01:F0:8A:19:D4:18:1E:DF:2C:F9:08:98:1E:C3:9D:05:B3:D6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/834b41a2-a339-3fef-a7fe-dd2a7dc6cbc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.85.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:8e:8d:34:08:f7:68:0a:79:fa:49:e8:13:39:48:3c:c3:24:
         e8:1d:2a:3a:e5:d7:e6:d1:25:5a:04:c5:6b:6c:41:4b:c1:88:
         84:40:22:be:7e:4d:5b:39:bd:e4:f2:62:ab:df:0f:22:74:b2:
         ed:f1:e4:8d:55:9d:29:cd:1e:c0:a1:27:ce:15:ac:12:77:37:
         81:4f:43:61:d7:a7:65:02:a0:9e:6d:97:cd:55:07:ac:b8:bf:
         00:0e:af:5a:cd:7e:24:a1:6b:13:f4:81:b1:1f:8b:36:45:8e:
         1b:57:28:e1:71:76:ea:0d:d4:fb:29:e6:b0:d9:49:cc:ba:c8:
         06:5d:77:36:2a:f9:d5:3a:23:a6:ac:d8:21:76:17:e3:d0:d9:
         f1:be:38:42:8b:ec:73:42:b0:5f:ba:00:3c:d1:09:c1:9b:15:
         9f:aa:95:d2:ce:09:95:24:8b:47:72:06:53:3d:73:00:77:76:
         20:15:bc:7f:67:bf:27:82:ef:d1:37:8c:67:52:d2:2f:5c:7d:
         6f:e0:1f:e3:45:0e:81:3c:06:c6:71:5c:41:ff:c1:91:e5:20:
         41:32:04:0e:a1:fd:49:c7:66:e8:0e:2f:fa:63:ed:cb:76:0d:
         4c:e9:9c:9d:b4:f6:1e:20:d6:fd:aa:9a:66:d8:e7:c4:ea:d1:
         03:fe:ec:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDisEVhJM6tKvude5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDEyMDA1MDAwMFoXDTI3MDExMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZDY4OWM2YjctYmY3My00OGUyLWJjNmMtMWUzZjJmZDU3ZmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoH1qOicFjRK4LPrJiPd4+aOa0BULb3LQK4z
TWAGvCYlM6py5nnHvjVhYCIdx5p/LjfqytGvHqf+W8gjYVFu9g+/PmEshaqnDFm3
sJmzcqUwgn3oKCP+eaZuQKCD4OFwqtgK1DZrd3HfZBc5Z8CDba7t2z2XxuchEKFc
d0uBXmwQNlv3CyF80LDdBvFX2nZ+mtPNOuVnAEOPbWeWx6RGL2ftU/lZDINB2NT4
gMNe1o/NPKUfS3/G2DFXpDqM/rb6WUnZsm95QFf0Mq9wvbJ23M3JUo36HVfzziSE
DPKUP8idrPE2m44qRxSk/EliiWBoDcoE+SW7Uw9vi+wGho7qnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBoB8IoZ1Bge3yz5CJgew50Fs9YHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODM0YjQxYTItYTMzOS0z
ZmVmLWE3ZmUtZGQyYTdkYzZjYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR1WAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOOjTQI92gKefpJ6BM5SDzDJOgdKjrl1+bRJVoExWtsQUvBiIRAIr5+
TVs5veTyYqvfDyJ0su3x5I1VnSnNHsChJ84VrBJ3N4FPQ2HXp2UCoJ5tl81VB6y4
vwAOr1rNfiShaxP0gbEfizZFjhtXKOFxduoN1Psp5rDZScy6yAZddzYq+dU6I6as
2CF2F+PQ2fG+OEKL7HNCsF+6ADzRCcGbFZ+qldLOCZUki0dyBlM9cwB3diAVvH9n
vyeC79E3jGdS0i9cfW/gH+NFDoE8BsZxXEH/wZHlIEEyBA6h/UnHZugOL/pj7ct2
DUzpnJ209h4g1v2qmmbY58Tq0QP+7Ek=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:49 2024 by rpki-client on console-ams.rpki-client.org