Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a29966d6-6e7a-3092-a4f8-e76182edcee6.roa
File:                     a29966d6-6e7a-3092-a4f8-e76182edcee6.roa (raw, json)
Hash identifier:          UpT/59jkRv7BvUY86NROg/ZMyKYdHia+I2ExK1uB9xg=
Subject key identifier:   47:9C:F5:85:59:99:3E:4B:DB:93:F3:DD:BA:DC:DC:F2:01:23:BE:B9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC12837425020B9695E42400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a29966d6-6e7a-3092-a4f8-e76182edcee6.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        47.42.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:12:83:74:25:02:0b:96:95:e4:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=4d25b55e-e0b4-4c60-8e2b-a756fd8de720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:41:b5:0c:c0:2b:75:35:ce:99:c7:17:c3:
                    78:b0:22:89:3c:49:57:5e:53:59:8a:af:b3:82:68:
                    55:60:9c:53:62:d6:13:72:31:96:18:1b:ef:cd:d2:
                    cf:d7:f4:0b:34:c1:28:44:de:45:25:80:4b:d8:80:
                    cc:06:4c:eb:f6:87:4d:8f:6d:2a:5c:00:92:25:fe:
                    98:8a:d3:30:fc:5c:b5:6d:db:85:19:7c:94:46:ea:
                    eb:4a:4a:dc:1c:4d:31:4e:57:09:84:f1:4e:ec:3a:
                    a2:ac:33:b3:8d:c8:66:b1:9e:9e:58:14:b6:ac:8f:
                    f1:f6:9e:ff:ba:c9:5d:ac:2e:ee:3b:a4:73:20:11:
                    5d:65:7d:01:fa:8a:35:e5:0b:fa:55:c7:fb:cf:50:
                    58:f5:a7:b2:0d:32:76:1d:87:59:8c:52:7a:f1:f2:
                    8f:33:c5:98:37:8b:a0:d6:82:0d:65:1a:61:01:35:
                    ff:47:b3:d2:2f:19:2c:54:e1:b3:27:ff:71:0e:7c:
                    67:aa:03:8f:cc:1a:62:aa:03:e7:2b:4b:e3:86:d3:
                    14:e4:75:b8:8c:ff:e7:16:7a:dd:81:63:43:30:f2:
                    69:cc:fe:52:89:df:37:8b:6a:fb:0c:ba:53:02:a3:
                    e2:41:11:ce:36:07:0f:d8:7b:4d:29:ee:1d:15:4d:
                    3a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9C:F5:85:59:99:3E:4B:DB:93:F3:DD:BA:DC:DC:F2:01:23:BE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a29966d6-6e7a-3092-a4f8-e76182edcee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.42.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:45:98:bf:1e:f1:d5:e8:c1:a3:a8:56:c2:d9:f5:57:b1:
         c6:20:39:93:88:bc:83:c0:56:10:51:29:37:99:74:0c:b5:19:
         75:28:7d:f0:7e:1d:46:23:b1:55:3e:2c:4b:3e:da:dc:ce:6f:
         26:f4:ee:7f:ba:e1:7d:20:b4:61:be:67:51:cb:53:2f:31:89:
         8f:d9:f6:37:a0:f3:17:35:fb:cc:13:29:0d:b5:c5:c2:61:69:
         e2:ff:6b:0d:28:15:a7:54:57:2b:a0:25:57:40:bd:bc:4f:fa:
         99:2b:5b:9e:d3:00:16:61:0f:59:c7:6c:19:89:9a:24:b7:74:
         87:4c:d1:08:50:e3:95:15:5a:c6:d5:d7:21:7c:d4:a3:f0:36:
         a5:88:46:22:03:37:4d:b0:a7:ac:21:ce:ad:f2:78:94:21:b8:
         62:e1:c8:08:df:82:7f:74:7c:0f:5b:a5:2f:77:3c:03:51:8b:
         a2:b7:98:48:4d:d6:cc:0a:ea:37:a5:b5:f3:50:91:40:00:df:
         fe:6f:3e:00:80:d6:f7:59:4a:f9:cf:21:1d:18:ac:39:37:38:
         1b:d5:58:17:03:85:2a:74:48:43:8f:ca:d5:6d:dd:ae:95:83:
         6e:b3:4c:c1:52:48:88:21:41:2f:01:3d:3f:8d:22:03:96:e8:
         b4:2a:e1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:52 2024 by rpki-client on console-ams.rpki-client.org