Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/883463a9-e202-37fb-b80d-f5b864a00f2f.roa
File:                     883463a9-e202-37fb-b80d-f5b864a00f2f.roa (raw, json)
Hash identifier:          HmBZX2roW3IKC/K1WRNHBaj9oPy1suPpbd/stzq2Sp4=
Subject key identifier:   55:64:6F:DA:4B:AA:78:AC:AE:C6:12:07:2B:52:75:56:C4:4C:61:24
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583937A0065B6AB1E31E95862380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/883463a9-e202-37fb-b80d-f5b864a00f2f.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        71.13.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:a0:06:5b:6a:b1:e3:1e:95:86:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=d04ad30e-1ebd-463b-bd60-0b01c81e0da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:b9:78:b6:d6:80:b4:e6:52:52:1b:48:8f:
                    8f:9e:3c:78:76:ce:f2:2e:fa:53:6c:e9:96:f1:95:
                    d8:b9:bd:e0:3e:e6:b7:be:36:8c:23:f0:61:2b:d3:
                    07:90:37:e9:93:6d:27:7b:fc:83:0c:db:58:56:fd:
                    11:95:5d:1f:d8:49:79:4f:e1:be:38:76:50:58:0e:
                    d4:20:f9:19:0c:94:35:7b:b3:64:73:7b:5e:e7:6d:
                    af:42:e7:68:54:67:00:94:1c:42:b7:ce:47:07:26:
                    78:59:41:5c:79:f0:54:8e:db:a7:e7:0e:bb:d2:00:
                    ce:f3:00:ab:0e:2f:f4:79:06:24:da:58:7b:38:02:
                    7c:5b:fc:82:8d:cc:2f:60:27:bf:9e:44:6a:d7:56:
                    d9:fa:40:48:f0:4e:a4:b1:ff:27:11:82:93:03:20:
                    a8:05:7f:7b:66:86:45:3c:1f:00:9b:bd:83:44:c0:
                    1d:b7:07:0d:a6:ad:39:44:d9:f6:d4:80:9c:8b:fd:
                    91:4f:32:ab:85:96:34:58:08:88:8e:59:57:0b:a4:
                    2f:6d:8d:4f:47:c5:92:a6:e1:48:a2:8e:09:b6:b8:
                    d8:3e:3c:55:49:ca:e4:52:e4:8c:34:5c:32:fb:60:
                    af:22:80:6d:29:9e:a6:e7:66:7d:a5:4c:2a:42:54:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:64:6F:DA:4B:AA:78:AC:AE:C6:12:07:2B:52:75:56:C4:4C:61:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/883463a9-e202-37fb-b80d-f5b864a00f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4b:34:e5:16:44:e9:94:c4:5c:df:5f:52:89:16:00:9c:dd:
         13:81:7e:11:10:8c:06:70:d5:d5:73:3b:73:de:b0:e7:2a:7e:
         fe:37:7a:b8:ce:cf:c6:70:5e:97:b9:ff:e0:cc:a0:95:07:0d:
         fc:7c:59:83:66:31:61:85:8c:8b:33:72:d5:fa:9b:79:f2:d2:
         b7:aa:e0:2f:f4:bf:1e:58:aa:b6:54:80:4d:0d:42:d5:fb:0d:
         8a:9b:97:d0:0c:0e:3f:79:d5:88:f9:45:1f:ec:23:6c:ad:02:
         0c:21:2f:73:f0:74:f0:b7:cf:2b:e3:b4:cc:57:a6:7b:ec:c3:
         01:41:4f:76:12:88:5b:29:0c:ca:f0:c6:65:6d:82:75:e4:86:
         ef:68:f5:14:2c:fb:18:0c:b8:36:35:27:63:66:6d:d2:ea:5d:
         23:ad:4f:62:01:8e:0c:86:81:35:c9:f5:72:16:ca:28:91:51:
         4b:af:27:0f:27:d7:63:ba:fd:21:cd:53:3b:d8:19:c5:09:95:
         8e:a9:6a:87:3d:e3:a1:89:fb:d9:78:df:4c:fe:f2:35:6d:5b:
         b5:7f:35:cf:e8:1c:2b:01:d5:55:71:ff:88:06:8e:8f:49:91:
         a9:53:5d:e2:63:6c:78:04:1e:5f:5c:8e:78:73:e3:30:2d:7f:
         aa:89:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:13 2024 by rpki-client on console-fra.rpki-client.org