Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ab05088-c4ab-34a1-b82f-1bcd3e16d13a.roa
File:                     9ab05088-c4ab-34a1-b82f-1bcd3e16d13a.roa (raw, json)
Hash identifier:          rWia7qXiRpB8ar3QA5YO8nhQF4cYGD+1J+eiD7ZQ/WM=
Subject key identifier:   69:C9:FB:43:DF:47:CE:13:F2:C4:90:1A:0E:A1:FF:1B:A9:59:58:D1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583C68F152AA4FB1CADDA0E51B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ab05088-c4ab-34a1-b82f-1bcd3e16d13a.roa
Signing time:             Tue 28 Dec 2021 05:00:00 +0000
ROA not before:           Tue 28 Dec 2021 05:00:00 +0000
ROA not after:            Tue 21 Dec 2027 05:00:00 +0000
asID:                     12271
IP address blocks:        192.61.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:68:f1:52:aa:4f:b1:ca:dd:a0:e5:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 28 05:00:00 2021 GMT
            Not After : Dec 21 05:00:00 2027 GMT
        Subject: CN=9384a468-4e57-473c-b0a0-f9d3c71df1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6b:bb:36:da:6c:0c:1c:d3:ec:85:92:d5:fb:
                    24:f7:37:6d:f7:e9:9d:63:0c:1c:25:b2:e8:bf:d7:
                    78:58:05:ff:e8:d0:72:8e:86:2d:a0:cf:a3:e2:3e:
                    a2:9c:4a:65:41:a8:ba:39:93:65:c3:09:a2:8c:75:
                    70:94:77:5b:80:02:3a:b9:07:bc:d2:cd:3e:08:ab:
                    13:2c:19:39:de:08:7e:51:43:08:89:d0:7e:c1:bc:
                    e2:9c:33:9b:08:98:1a:90:c3:27:b7:b8:84:0e:2b:
                    b8:e6:18:b5:69:c1:32:c5:c3:de:09:15:a4:1f:71:
                    86:95:4a:b8:db:37:30:67:c9:e2:4d:10:f2:d6:92:
                    09:03:06:0e:e4:5a:e0:fa:c5:58:e5:4e:d6:d7:aa:
                    f0:82:e5:2b:88:3c:8e:99:c6:a3:d6:e9:43:02:ec:
                    c5:8d:17:f7:86:2d:33:6a:16:21:5b:9b:dd:7e:cb:
                    8d:44:a2:15:b3:47:63:61:e8:c5:26:fe:9d:9b:51:
                    d6:40:f4:e5:97:a6:37:d3:3c:80:33:f0:eb:25:34:
                    e1:56:4e:13:d0:7f:ec:ab:8b:41:f6:8f:7e:0d:06:
                    06:e6:65:6f:32:e1:6f:a7:a0:cb:c9:89:3d:4b:65:
                    34:a4:64:d8:65:e5:ab:ce:34:16:a2:c6:62:66:5f:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C9:FB:43:DF:47:CE:13:F2:C4:90:1A:0E:A1:FF:1B:A9:59:58:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ab05088-c4ab-34a1-b82f-1bcd3e16d13a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.61.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:28:7a:2e:bc:07:90:1c:96:74:b4:bf:12:51:f8:44:91:ce:
         f3:cb:f9:83:33:78:78:88:94:e4:29:46:28:07:33:49:8b:59:
         ef:67:58:f7:73:4e:a5:49:1a:6f:31:ff:c4:a5:10:b8:3c:4e:
         cb:f1:29:0b:fe:9f:8b:43:54:01:da:9d:49:ad:7b:a0:92:f2:
         c2:b8:54:50:02:c1:1a:32:c8:61:a7:aa:67:17:27:e8:05:0b:
         b4:e2:8d:47:0e:a9:3c:b6:ea:f4:da:cd:bf:79:dd:9d:14:7c:
         4c:2c:d3:5e:d6:05:7d:f1:f2:9b:bc:3d:81:a6:cb:42:56:00:
         29:34:39:20:7c:b0:29:70:e2:66:1c:c5:d9:2d:c0:8d:77:ae:
         21:a7:9b:a9:94:ec:66:6d:68:3a:24:62:9c:62:ee:4b:ff:60:
         f0:9e:b4:9a:60:bc:47:27:47:28:98:dc:92:d3:1b:e9:7b:3e:
         24:aa:9b:da:c8:5f:8a:bb:26:4f:bf:99:e1:56:81:1c:3e:99:
         e5:21:7a:32:36:e1:ea:57:01:44:6c:c4:85:82:71:08:6b:3d:
         b5:e6:ef:d4:d5:92:1d:db:67:fe:89:34:4a:6e:1d:73:e0:7a:
         ad:fd:36:65:bc:92:fa:75:64:f2:dc:c9:3b:cf:65:c0:76:65:
         3c:66:6b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:55:09 2024 by rpki-client on console-ams.rpki-client.org