Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae969f90-5c60-38e3-9a80-9d124ce5c424.roa
File:                     ae969f90-5c60-38e3-9a80-9d124ce5c424.roa (raw, json)
Hash identifier:          PdiNFZKiSfrSJpWJz/yFkCbwd1u9OlC7jYAQXFEtAsU=
Subject key identifier:   3B:67:2B:7D:FE:67:93:37:BE:76:0A:17:E0:CF:1D:E2:67:91:A2:84
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583937A00638301E49BD77F52F40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae969f90-5c60-38e3-9a80-9d124ce5c424.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        71.14.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:a0:06:38:30:1e:49:bd:77:f5:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=b76de752-7c48-4120-aae4-1f04f7bd1323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:fb:f8:ac:02:6f:70:8a:e0:f6:f5:6e:09:
                    7f:89:6f:e6:30:97:a2:ab:a3:91:e4:84:fc:95:1f:
                    5d:06:bd:ba:4e:9b:95:45:58:57:d3:45:79:a0:32:
                    14:6d:b5:21:2b:b5:ae:b3:4c:2a:0b:47:81:a4:30:
                    11:a0:8a:3c:df:31:f0:41:ef:47:f0:b7:c6:05:03:
                    9d:02:44:c0:a7:97:8c:9f:de:0d:8f:c7:4f:00:a9:
                    80:27:fa:79:15:3d:44:64:b5:54:ce:74:1c:79:13:
                    fe:9f:b4:1f:dd:b7:97:6f:29:88:b7:25:c6:cf:09:
                    07:21:e8:75:44:5d:ba:e1:ec:52:3b:89:55:56:49:
                    e9:bd:da:61:ff:ae:8f:08:65:c9:e5:a4:d6:cb:37:
                    e6:96:f9:43:ad:30:f9:7b:88:24:87:2d:78:66:a9:
                    46:c6:91:36:29:c3:0b:6e:8b:2d:fc:c4:2e:ee:e0:
                    78:47:92:1e:c5:a0:98:fe:e2:67:9b:0a:8e:67:4d:
                    6f:47:48:f5:e0:12:28:9d:19:76:ce:b5:f0:bb:00:
                    bf:15:d2:c4:3b:fe:3b:4b:4f:05:b8:4f:75:40:61:
                    03:75:3e:ed:d4:87:6d:5a:c8:a2:8e:31:1b:fb:b5:
                    d7:df:f5:65:2f:01:98:24:bb:97:db:8e:34:66:91:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:67:2B:7D:FE:67:93:37:BE:76:0A:17:E0:CF:1D:E2:67:91:A2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae969f90-5c60-38e3-9a80-9d124ce5c424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.14.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d9:af:87:3e:49:ec:4f:2b:47:20:7e:ea:72:3f:1d:d9:fb:
         bf:fc:87:ce:ab:ff:08:1f:25:72:a4:d3:50:a5:3f:d8:94:3c:
         07:73:f4:a6:f2:74:1e:4b:42:59:f2:b3:05:3c:05:e2:dd:86:
         fd:e2:a3:d6:b9:15:4e:9f:2f:9c:63:39:31:56:de:37:b9:f7:
         19:95:6b:98:83:fb:3d:b8:2b:ad:a3:dd:03:28:ba:84:3f:12:
         34:e9:a1:98:ae:a2:f8:b9:93:20:af:21:13:8b:d7:68:8f:99:
         85:ac:51:42:0a:ce:78:2c:c2:89:1f:3d:3a:a2:26:94:e3:a8:
         65:d9:22:48:8d:69:ae:9a:9f:04:e7:9d:0f:8a:59:c0:bf:72:
         4e:c2:0d:05:7c:84:cc:38:7f:7d:67:6f:e7:85:61:4e:ae:b2:
         b7:4d:cf:1d:bc:4a:34:94:a7:e8:83:9b:03:ea:bf:c0:41:f6:
         39:f1:00:99:b5:32:24:e8:b6:3f:5c:86:8a:89:3b:20:1a:99:
         bc:50:c9:a9:cb:65:cc:16:a9:e0:17:f6:87:d9:5a:4d:55:f6:
         0c:58:83:ec:d4:e4:98:ed:42:49:e4:b0:0f:78:3a:35:23:1d:
         a4:2e:99:cd:c1:80:b6:ed:f0:10:34:bc:f1:31:30:8e:79:f5:
         fd:1e:16:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:17 2024 by rpki-client on console-fra.rpki-client.org