Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b7a4823a-42be-3ab9-b83f-adb1f182f46c.roa
File:                     b7a4823a-42be-3ab9-b83f-adb1f182f46c.roa (raw, json)
Hash identifier:          v+7GEZodEzp9GccFT0wqeVqZwQoXI2fhGK/bztXJDXg=
Subject key identifier:   1F:A2:75:7A:D8:4C:B9:88:39:BE:AE:05:31:F8:E6:1E:67:79:E0:30
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC114B4ADAE0DCF141FDFD00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b7a4823a-42be-3ab9-b83f-adb1f182f46c.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        47.44.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:11:4b:4a:da:e0:dc:f1:41:fd:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=368f4c34-ce35-4285-957d-a9791a8b0dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:4b:a8:f2:a2:e6:a9:fb:45:e5:b5:0c:73:
                    4f:10:50:fa:85:a7:bb:b3:fc:a8:01:d2:55:e1:37:
                    df:da:fd:73:38:9d:60:69:b1:84:85:29:de:83:81:
                    7f:c0:88:52:15:9d:6e:f6:03:84:b8:e4:d6:b6:f3:
                    af:b0:80:84:7c:bd:70:a9:b4:59:9b:be:a8:ca:bd:
                    5b:e2:de:bc:9b:eb:83:be:4c:88:0b:6c:ca:54:e1:
                    ce:12:13:15:29:28:c3:98:ba:55:cd:91:f9:17:9d:
                    d3:e1:59:38:27:5a:91:fe:f9:a1:75:5a:8d:62:fc:
                    4b:5b:03:11:a6:b3:35:c2:52:5e:16:a1:b2:65:bf:
                    e0:d2:a3:d2:d1:61:8e:93:93:b8:3b:59:fc:84:3e:
                    37:91:89:91:31:1a:7b:1a:75:5a:90:b7:04:a8:cc:
                    88:43:b2:36:bb:b9:3b:a6:8d:ad:7e:8d:86:2d:09:
                    5e:a5:19:be:e8:07:9b:2a:58:c4:ed:3a:60:81:a5:
                    6d:40:52:2b:8d:7c:c1:77:37:f8:c8:4e:0b:4b:b3:
                    9c:6f:52:e6:e9:5d:04:bf:24:17:04:8d:6a:68:8c:
                    8e:56:28:13:2e:a0:ac:bd:7d:f2:5d:61:9a:86:21:
                    a1:71:91:c0:fb:2a:ca:b1:a0:d6:e8:eb:d5:e4:17:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A2:75:7A:D8:4C:B9:88:39:BE:AE:05:31:F8:E6:1E:67:79:E0:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b7a4823a-42be-3ab9-b83f-adb1f182f46c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d3:7f:ff:5d:e0:ff:4d:97:d0:f9:b1:74:e0:18:18:47:8d:
         1e:03:1b:bb:3f:43:0f:59:a3:f3:ca:88:93:f4:41:7b:45:c3:
         ca:26:c3:6a:5f:b5:c4:bc:28:8f:10:dc:d3:92:e8:a5:26:d5:
         88:34:30:d5:14:12:0c:53:66:7a:00:b2:79:ea:ef:2f:e0:67:
         0f:78:a0:40:48:36:b2:db:03:83:ba:5f:26:5b:2a:81:3d:88:
         45:d3:5e:9c:64:96:2b:fc:ec:42:2b:e1:a1:aa:37:ad:68:e2:
         a1:ff:5e:11:c4:dc:de:c6:85:aa:e0:d1:f8:95:51:a8:04:65:
         59:3c:13:6f:67:26:55:e9:8d:30:78:ab:78:53:cd:86:db:35:
         67:5c:96:d9:38:b2:b6:08:ac:3b:c3:db:75:79:f8:e2:3d:95:
         11:da:37:95:02:64:96:7a:58:79:2d:1e:8e:44:44:84:01:82:
         ab:aa:72:74:9a:7e:08:b5:a9:d6:d3:c7:00:07:0c:00:78:e7:
         67:b1:4c:8a:39:bc:1f:c7:69:ea:90:9a:bf:8d:67:cd:cc:75:
         25:52:92:d1:2a:92:0b:41:1a:95:58:e6:09:ef:34:6e:ee:bb:
         dc:39:b6:66:a2:c4:9e:42:fc:fe:57:91:14:7b:3a:a9:8a:2a:
         99:56:38:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:18 2024 by rpki-client on console-fra.rpki-client.org