Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0f2e4c8-1f20-3e25-8a30-fe647bf6a951.roa
File:                     a0f2e4c8-1f20-3e25-8a30-fe647bf6a951.roa (raw, json)
Hash identifier:          841UB7rKJXSgf0tFmSjGkJP2IuAJM3wH20SCtDS0lTU=
Subject key identifier:   9A:68:B5:0A:1D:21:F4:2F:33:C6:AE:F1:59:13:A7:CC:15:F1:3A:FC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC1296ADD8E21532BFFA9A20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0f2e4c8-1f20-3e25-8a30-fe647bf6a951.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        47.51.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:12:96:ad:d8:e2:15:32:bf:fa:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=84c21f6a-5a1d-4bab-8569-d0b84b95af1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:3c:26:98:6e:d8:e3:ca:ae:fa:f6:26:da:
                    85:b3:0e:b6:50:4f:9e:27:ff:fa:6c:fd:12:8c:c5:
                    28:75:f8:fd:2c:10:24:6f:7c:85:48:26:73:f0:18:
                    4b:38:42:44:68:ad:5e:e9:f7:9e:54:bf:c8:a9:48:
                    92:25:dc:4c:4e:be:2f:95:ed:68:5f:f5:95:1d:ab:
                    31:91:54:4c:de:5a:45:1c:3f:ba:49:43:53:f9:44:
                    f0:02:c6:ff:a8:c1:3e:f5:90:55:5c:f5:c6:1f:83:
                    80:b3:7c:29:ac:0b:94:a9:9e:d6:e1:d9:f1:4a:15:
                    51:e8:f9:c7:b0:19:48:63:46:85:9b:4a:01:da:0e:
                    ec:1d:d0:2c:e9:f7:aa:33:83:2c:7a:da:9a:10:82:
                    de:c3:3e:04:3d:8e:b6:fd:43:ed:4a:d4:2f:55:a2:
                    85:bf:3a:e7:eb:45:a2:5f:51:85:16:a0:57:72:65:
                    20:ca:ec:13:06:1f:21:fb:13:e3:d2:c0:ef:a7:19:
                    e2:2e:11:92:08:f1:da:c9:a2:02:c5:8d:5d:d0:cb:
                    73:b3:23:c9:41:4e:59:5e:ae:d0:4b:14:3c:ee:61:
                    52:5f:ce:4e:33:de:94:f7:ae:dc:3a:78:4c:e9:cd:
                    ce:90:ef:87:fe:a3:0c:f9:13:f7:26:26:f3:8e:5c:
                    50:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:68:B5:0A:1D:21:F4:2F:33:C6:AE:F1:59:13:A7:CC:15:F1:3A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0f2e4c8-1f20-3e25-8a30-fe647bf6a951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.51.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:57:5f:e9:5e:13:9f:bd:ac:f9:ee:fd:80:d0:29:0c:f3:66:
         b9:31:16:c6:43:ed:64:c2:f6:26:20:84:e1:33:c1:63:68:c2:
         a2:e9:91:e9:5c:49:ca:7a:2f:c1:20:03:55:4c:55:a5:96:98:
         9b:e9:ec:ca:7f:b8:73:db:53:f6:73:d3:5a:f9:e0:92:cb:50:
         e5:4e:ac:8b:56:34:d3:9d:03:9f:f7:bd:75:a8:93:17:82:0a:
         11:52:a1:ef:31:71:c6:9f:87:61:9e:6a:1d:08:46:29:14:3d:
         f9:e5:c8:db:41:95:91:7c:be:33:62:40:ee:1e:d7:37:5d:db:
         03:8e:10:7a:22:37:48:c9:d3:91:4b:a1:45:8a:71:17:32:ad:
         9f:a0:0b:94:d6:6b:9f:76:17:62:03:bc:3e:b2:ef:db:14:de:
         ff:b1:78:fe:dd:da:0a:a4:c9:ab:c8:2e:38:ea:6e:d5:89:14:
         3f:6d:e7:9d:da:0e:ec:cd:17:46:1a:f6:a3:24:75:95:73:22:
         ac:61:1e:10:38:20:da:af:e2:b7:d5:7e:ac:c5:17:e6:60:4c:
         17:f2:4d:14:72:0f:7f:48:da:42:43:75:cf:3c:ec:35:40:50:
         12:f4:4c:41:f5:1c:57:4b:70:de:e3:55:0e:18:d6:96:d6:35:
         31:1c:c2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:16 2024 by rpki-client on console-fra.rpki-client.org