Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/965fc560-ecbd-3eb0-b922-033ec3ae10f8.roa
File:                     965fc560-ecbd-3eb0-b922-033ec3ae10f8.roa (raw, json)
Hash identifier:          jienHHuAe3OQcNSnJ/i8gMMSuMeI6roHU3HqLlab7gM=
Subject key identifier:   0A:B8:E3:64:1F:4E:A9:67:54:86:8B:09:9D:BD:B2:39:BD:08:EA:98
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A175C58D368E35E5CF0940
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/965fc560-ecbd-3eb0-b922-033ec3ae10f8.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        71.95.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:75:c5:8d:36:8e:35:e5:cf:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=e7bbbda8-9c91-4c69-a7f3-085e5593284d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dd:39:35:51:67:ec:7b:f9:f4:9a:9c:9d:4c:
                    03:c7:d6:48:f3:9d:72:ef:66:11:0b:07:bc:09:e2:
                    b1:2c:9f:df:ae:e6:94:bd:18:34:c4:c3:39:11:dd:
                    56:ad:d7:f0:02:f1:96:fe:82:af:eb:73:70:cb:49:
                    6d:e1:a9:70:28:ea:a2:24:85:1c:ac:f1:79:c0:d3:
                    71:f9:aa:04:95:52:c3:c9:01:76:62:da:51:4f:8c:
                    19:f4:48:96:6f:f9:cb:e0:bd:fa:17:b0:a6:12:53:
                    02:90:ce:0f:35:52:c6:65:31:9b:b7:1d:12:01:5f:
                    9f:b8:20:14:ec:a7:7e:1d:9a:ca:7a:2b:df:21:e3:
                    f6:6d:44:48:a2:a7:30:08:90:9b:9e:95:74:0b:7e:
                    38:6d:00:4a:2b:d2:19:37:7e:a3:d4:d8:4a:db:65:
                    49:7d:5d:fb:51:4f:00:88:ee:5b:42:82:2b:f6:b3:
                    ea:11:df:25:be:45:f2:d2:d1:60:ad:98:ad:81:0a:
                    da:34:87:0f:75:e4:49:94:f9:f8:1f:62:29:13:cb:
                    36:29:a2:d0:c7:d9:87:50:fa:30:b8:fe:8e:39:f5:
                    4a:85:d0:d9:d2:6e:03:d3:87:24:50:61:d4:3d:2d:
                    4d:73:9e:e3:15:af:92:1e:27:8f:79:37:15:2a:79:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B8:E3:64:1F:4E:A9:67:54:86:8B:09:9D:BD:B2:39:BD:08:EA:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/965fc560-ecbd-3eb0-b922-033ec3ae10f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.95.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:f5:39:48:bd:6b:f5:69:6e:6d:e0:12:0e:2d:47:e2:27:6a:
         3a:56:98:c9:c1:9c:d3:e3:93:ee:38:0b:9f:d9:88:e8:f4:3e:
         bb:2f:bb:46:77:29:c3:11:8c:64:9c:49:cc:7b:6d:d7:33:27:
         b3:29:a0:61:5f:1c:48:05:a0:62:ed:21:53:1a:4a:7d:b7:7d:
         d3:67:80:c0:bc:c0:0c:3a:4f:31:c8:51:0c:d0:a5:da:2a:7d:
         b7:0d:d1:0e:32:43:52:96:9f:f9:a2:5c:ad:38:21:37:72:2c:
         ff:83:9d:0a:2a:d3:d3:5d:e8:5a:29:cd:bb:f4:1f:be:9d:54:
         d8:f1:75:b4:f5:ba:13:80:f7:d1:65:f8:2f:a5:1a:3e:3d:04:
         55:de:32:5b:43:2f:43:5d:1c:dc:15:0f:c3:c0:90:d2:58:03:
         22:5b:02:d2:5c:ee:31:02:e2:02:a1:aa:73:03:5e:be:6b:57:
         3c:00:f3:75:9c:2d:59:1e:46:74:bd:e9:96:e5:23:b2:9b:6d:
         63:da:3a:ad:4d:0d:1b:c2:2c:f3:79:31:7c:75:1b:ed:9a:ae:
         17:99:cc:1e:23:fc:ce:0f:f9:31:de:1f:89:a6:5f:10:5b:44:
         41:3f:9a:ab:da:0d:85:91:a2:73:c4:6f:85:29:dd:3b:90:60:
         1b:fe:2d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:15 2024 by rpki-client on console-fra.rpki-client.org