Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83b9c8fd-72d0-37ba-af0d-16cab1a3f5bb.roa
File:                     83b9c8fd-72d0-37ba-af0d-16cab1a3f5bb.roa (raw, json)
Hash identifier:          GH4y1p8MG+O568LLgz+1HcLhAOmmaNiPLrt/xc5JhRg=
Subject key identifier:   8B:33:D2:6A:68:C2:27:E8:CD:5E:3F:DC:86:4F:7E:12:0A:D3:A9:CE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858479E67C5EC1766BD07A3E44E80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83b9c8fd-72d0-37ba-af0d-16cab1a3f5bb.roa
Signing time:             Mon 21 Oct 2024 21:06:46 +0000
ROA not before:           Mon 21 Oct 2024 21:06:46 +0000
ROA not after:            Sun 19 Jan 2025 22:06:46 +0000
asID:                     20115
IP address blocks:        71.87.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:67:c5:ec:17:66:bd:07:a3:e4:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 21 21:06:46 2024 GMT
            Not After : Jan 19 22:06:46 2025 GMT
        Subject: CN=ed5b1989-a458-43bc-9189-f7fb9ea1a977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:55:d5:5a:7b:4e:df:91:0b:cc:a9:06:68:
                    c0:bb:b7:10:89:8d:e3:18:24:0a:f2:13:13:3a:f0:
                    26:26:24:42:6f:cd:1a:ee:49:33:bb:de:65:bb:f7:
                    8a:17:42:2f:0e:3b:8a:77:5b:fc:87:17:e7:c7:aa:
                    f7:0e:3b:bd:d4:17:66:6c:b6:be:d1:b4:7a:8a:a2:
                    cf:ed:cd:6c:fa:65:ba:ad:88:f5:ab:d1:65:ba:98:
                    b4:59:a5:c3:ac:63:b2:ac:1b:d1:4c:9f:e1:87:db:
                    89:93:ea:d1:f3:c5:e6:97:63:23:c8:18:3d:4a:fb:
                    10:9d:db:ec:21:f9:7f:1b:51:63:98:2f:c7:9c:7f:
                    49:87:f8:6a:7e:3c:ce:14:88:38:f5:d4:f3:a4:a3:
                    48:ad:05:e3:82:47:99:f4:a4:1b:a7:63:5b:b3:9a:
                    06:85:e2:ec:ad:cc:c9:ad:c3:92:9f:5b:4b:bf:ef:
                    32:56:48:48:75:26:1d:c0:64:39:05:e2:98:9a:2d:
                    37:bd:8a:95:c9:10:6a:33:24:61:cf:23:86:2e:e8:
                    43:56:8d:b6:5e:c7:66:48:6c:b4:82:63:08:a3:5e:
                    fe:be:73:46:48:19:02:ea:1a:a8:8c:12:aa:57:0b:
                    c9:53:b9:1a:1a:d2:8c:57:b8:16:0e:28:68:e4:2b:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:33:D2:6A:68:C2:27:E8:CD:5E:3F:DC:86:4F:7E:12:0A:D3:A9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83b9c8fd-72d0-37ba-af0d-16cab1a3f5bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:33:0d:1c:be:19:b3:63:f6:8d:e2:18:51:ed:18:c0:84:20:
         2a:d4:bf:5a:0b:1a:d0:24:fa:ad:0c:76:cc:c4:cd:9e:6e:32:
         3e:d9:39:f8:05:37:41:52:6b:7c:7c:43:a0:dc:e3:92:db:60:
         eb:d5:a8:e2:c0:84:fd:db:fa:9e:66:e5:66:dc:5c:2a:2b:98:
         2e:45:76:44:1c:de:de:94:08:d7:ce:ef:5b:33:9e:b3:72:47:
         1c:db:2f:7b:07:fc:8f:ba:73:86:03:ee:8c:ad:12:06:83:d5:
         5e:43:82:5e:54:22:51:11:ce:c8:0e:fb:5c:b8:d2:cb:68:f5:
         a7:9c:a4:c2:14:74:e1:57:12:ff:95:26:c1:06:82:18:b9:53:
         d3:ac:ec:57:22:37:53:75:9e:40:2f:08:54:d2:86:88:7c:50:
         95:f2:1d:41:10:f7:39:38:ca:f5:ff:39:08:85:cb:9f:ca:d0:
         87:de:3d:d8:07:2c:75:bf:20:73:d6:93:98:bd:3c:1f:e9:b7:
         57:8e:37:8e:fb:00:9c:bd:a2:71:48:f8:e3:1e:57:e1:23:0d:
         8d:4e:6b:60:22:24:28:9c:68:8f:ea:97:c3:c4:67:ed:77:80:
         0e:57:d4:6b:5e:4b:63:f6:55:cd:af:bc:57:a1:d7:c6:18:b2:
         ef:11:9f:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeeZ8XsF2a9B6PkToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTAyMTIxMDY0NloXDTI1MDExOTIyMDY0NlowLzEtMCsGA1UEAxMk
ZWQ1YjE5ODktYTQ1OC00M2JjLTkxODktZjdmYjllYTFhOTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWVV1Vp7Tt+RC8ypBmjAu7cQiY3jGCQK8hMT
OvAmJiRCb80a7kkzu95lu/eKF0IvDjuKd1v8hxfnx6r3Dju91BdmbLa+0bR6iqLP
7c1s+mW6rYj1q9Flupi0WaXDrGOyrBvRTJ/hh9uJk+rR88Xml2MjyBg9SvsQndvs
Ifl/G1FjmC/HnH9Jh/hqfjzOFIg49dTzpKNIrQXjgkeZ9KQbp2Nbs5oGheLsrczJ
rcOSn1tLv+8yVkhIdSYdwGQ5BeKYmi03vYqVyRBqMyRhzyOGLuhDVo22XsdmSGy0
gmMIo17+vnNGSBkC6hqojBKqVwvJU7kaGtKMV7gWDiho5CvQpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIsz0mpowifozV4/3IZPfhIK06nOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODNiOWM4ZmQtNzJkMC0z
N2JhLWFmMGQtMTZjYWIxYTNmNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1eAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMwzDRy+GbNj9o3iGFHtGMCEICrUv1oLGtAk+q0MdszEzZ5uMj7ZOfgF
N0FSa3x8Q6Dc45LbYOvVqOLAhP3b+p5m5WbcXCormC5FdkQc3t6UCNfO71sznrNy
RxzbL3sH/I+6c4YD7oytEgaD1V5Dgl5UIlERzsgO+1y40sto9aecpMIUdOFXEv+V
JsEGghi5U9Os7FciN1N1nkAvCFTShoh8UJXyHUEQ9zk4yvX/OQiFy5/K0IfePdgH
LHW/IHPWk5i9PB/pt1eON477AJy9onFI+OMeV+EjDY1Oa2AiJCicaI/ql8PEZ+13
gA5X1GteS2P2Vc2vvFeh18YYsu8RnwI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:13 2024 by rpki-client on console-fra.rpki-client.org