Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90e177a2-4fa9-36df-b255-c6e25fee425b.roa
File:                     90e177a2-4fa9-36df-b255-c6e25fee425b.roa (raw, json)
Hash identifier:          95wkmfxkzY3ZlhdsQXKjh0FE3kiaF4ZNB3Fkr0lUXLU=
Subject key identifier:   59:74:BE:43:93:F4:6C:2D:D9:F5:51:EF:D2:F3:13:D0:AC:D5:FE:67
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583934D188E4F2CD54731A812B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90e177a2-4fa9-36df-b255-c6e25fee425b.roa
Signing time:             Wed 10 Mar 2021 05:00:00 +0000
ROA not before:           Wed 10 Mar 2021 05:00:00 +0000
ROA not after:            Wed 03 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        47.44.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:34:d1:88:e4:f2:cd:54:73:1a:81:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 10 05:00:00 2021 GMT
            Not After : Mar  3 05:00:00 2027 GMT
        Subject: CN=4c6d3895-3426-48dd-9dc5-b7604b7d25a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:22:07:f5:51:bd:fd:a1:fd:d0:77:30:2d:
                    e9:1a:e7:1e:fa:ef:23:9b:1b:41:b7:36:cd:6f:a7:
                    d2:be:64:a2:ff:3a:ca:57:7e:d6:d1:79:a1:b6:57:
                    28:a3:40:a7:58:a1:e7:4e:29:4b:b9:79:97:28:d4:
                    7b:93:4a:57:8f:b6:ab:45:d8:b3:df:49:a0:8e:a6:
                    76:2e:f7:d5:1b:2b:e2:d3:ea:97:5a:a8:89:7a:11:
                    9d:ee:18:bb:b9:16:2d:27:b4:c9:98:dc:31:3f:d7:
                    b9:4e:3d:33:57:0d:0c:9b:1d:06:ec:a4:fc:d6:8a:
                    56:e7:e9:06:6e:35:a6:57:00:b6:d5:92:21:34:3a:
                    c4:02:6a:78:00:37:52:38:2c:55:51:f4:37:ce:a6:
                    94:05:e9:1a:8d:d2:e2:b2:43:f7:b4:64:98:a7:c6:
                    c7:2d:6e:39:c6:00:69:98:64:35:91:e7:a1:8d:16:
                    f8:96:93:d7:bf:9f:78:5c:3c:d1:6a:c4:1e:63:ab:
                    e4:20:46:45:93:d2:d2:ff:41:7f:87:79:b3:7b:4f:
                    8e:a6:52:6c:69:7b:35:d9:15:b0:9d:c4:ca:b6:fa:
                    80:0f:d1:ef:29:e5:24:f2:49:96:71:e7:4e:07:af:
                    06:e6:cb:c7:3e:30:e6:3e:f5:7d:c4:65:b9:49:c1:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:74:BE:43:93:F4:6C:2D:D9:F5:51:EF:D2:F3:13:D0:AC:D5:FE:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90e177a2-4fa9-36df-b255-c6e25fee425b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:1e:6f:63:4d:fe:3c:3a:0a:92:32:fd:96:5e:fe:b0:dd:
         0f:7c:ce:81:c1:b5:7e:e5:a7:e4:59:6a:e6:c4:36:3e:1c:e7:
         68:74:a0:e0:9f:68:4b:e9:af:02:40:7c:2d:5a:3d:a9:d4:76:
         36:4b:21:dc:cb:54:f2:1e:f1:75:60:5e:8c:1d:ec:e2:f7:1c:
         10:8e:6d:ea:08:a7:ad:96:1e:13:a9:08:34:2e:59:4c:5a:96:
         3e:8b:ce:1f:94:8e:0d:42:82:07:e9:92:8b:a3:41:94:a5:61:
         11:37:cb:3e:53:0d:3c:24:c1:6b:04:79:9a:58:f0:fe:79:e3:
         3e:53:03:63:d7:2f:00:f9:cd:09:3a:76:cb:32:ea:1a:84:14:
         57:0c:bc:fe:2d:4c:d6:72:04:1b:c3:3a:b2:68:ba:17:38:bf:
         d2:eb:17:16:ff:2e:55:00:87:6f:d0:c1:82:4a:60:20:21:b7:
         21:66:34:64:85:2a:9a:5f:48:86:c3:5f:3d:95:28:3d:e3:c4:
         ad:0d:58:ac:40:14:b0:1e:e2:47:e9:71:96:0d:37:03:a8:08:
         74:74:ab:d2:3d:29:38:07:da:fc:68:d6:ee:de:44:d1:33:22:
         71:66:aa:ae:08:d3:80:32:0f:15:0f:a1:e8:0a:f8:08:0f:6c:
         65:b4:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:14 2024 by rpki-client on console-fra.rpki-client.org