Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b4e6d8a-5f6d-3b84-9d4d-c4a202c2a884.roa
File:                     8b4e6d8a-5f6d-3b84-9d4d-c4a202c2a884.roa (raw, json)
Hash identifier:          mN6A8MY/BO+w6pHwDJ/Cw/7Ixg/aEho3tc/A+lNhs/c=
Subject key identifier:   FB:E7:BB:90:C5:47:A6:2E:BB:B6:65:1E:E3:EB:CA:0C:10:4C:E1:C3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EADD0D7E52B9EB2A178C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b4e6d8a-5f6d-3b84-9d4d-c4a202c2a884.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        71.9.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:ad:d0:d7:e5:2b:9e:b2:a1:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=3616255e-b658-4c20-9595-b03c741fc219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2d:cb:44:56:28:a8:12:e8:77:b1:3c:96:f5:
                    30:9c:32:f8:95:2f:d0:a2:a8:fc:16:0b:ec:9e:b2:
                    d4:07:ad:9b:e5:b9:b3:46:db:ac:72:87:b0:cc:d5:
                    f2:53:22:6c:4b:14:10:87:bc:88:a6:3c:ec:0f:ed:
                    70:e7:2a:31:94:c4:e6:2b:76:7b:9b:92:27:93:4a:
                    43:0e:55:a0:9c:89:3b:50:fa:2a:0c:d4:fb:a7:e3:
                    49:ce:b7:c1:1a:77:3d:be:3d:63:3f:38:b6:30:c5:
                    c0:7a:27:c8:a2:5a:9e:78:9b:24:e0:38:90:69:b8:
                    70:cd:2d:87:b3:3f:58:d7:03:af:c0:73:4f:5b:73:
                    a0:f4:41:af:e9:bb:81:fa:93:80:97:26:f2:56:0e:
                    39:74:8e:ea:dd:2c:dd:b3:c9:2d:65:e2:fa:b4:a1:
                    98:22:f6:11:92:a2:2c:db:65:9a:7e:b7:4a:5e:38:
                    c2:09:e7:4e:13:3e:ce:d2:1c:a9:a4:c5:a3:86:a6:
                    75:9d:51:88:65:d4:99:76:25:65:27:a3:52:43:df:
                    c7:a2:cb:6e:e1:ad:a1:5f:16:d6:73:33:3a:e2:06:
                    26:9c:ea:de:02:e6:f0:ef:83:85:11:93:2a:25:42:
                    52:99:4b:d3:75:a8:51:db:ea:64:8d:92:17:4a:1f:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E7:BB:90:C5:47:A6:2E:BB:B6:65:1E:E3:EB:CA:0C:10:4C:E1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b4e6d8a-5f6d-3b84-9d4d-c4a202c2a884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.9.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:43:22:b2:26:dc:38:47:ce:5c:69:86:1a:95:26:49:8a:58:
         9e:d7:b6:70:2c:15:5b:3f:cf:0a:5c:51:92:b2:20:68:f6:57:
         fc:76:a1:95:d0:da:20:ef:73:4d:a5:87:82:f7:91:51:22:a9:
         ac:01:60:52:61:c3:1d:9e:e1:e2:b6:e2:2a:7d:e6:70:e2:df:
         cc:c2:27:cd:1f:52:ce:2e:1e:12:fb:12:14:31:54:4c:fe:21:
         ab:61:60:e8:44:a4:82:42:e3:f5:04:75:bb:fa:a3:f1:11:9c:
         a2:3f:86:1f:fe:ca:f9:36:9d:f6:4e:23:78:80:7f:83:61:96:
         b8:69:dd:07:98:7b:62:64:b8:b9:88:20:49:8a:45:5d:86:56:
         64:ef:6f:1f:18:b2:d8:f6:5a:20:ee:44:fd:0c:3c:aa:8a:79:
         eb:48:b6:49:96:c2:4b:46:5e:bc:8c:c4:ed:51:0f:a2:42:77:
         d7:d7:6e:e8:f5:cd:4d:b3:20:d2:b1:74:a8:3b:5e:d0:b0:5d:
         bd:d0:b6:0f:f0:5b:9b:1b:ea:8c:ad:38:f6:d9:57:f7:07:4b:
         3f:9b:5f:df:30:55:7b:b1:69:15:11:bb:1a:3f:70:4d:84:e4:
         f0:92:74:51:dc:28:d0:5f:d9:3d:c1:90:34:33:a6:38:98:39:
         38:dc:04:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:46:01 2024 by rpki-client on console-fra.rpki-client.org