Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bff02705-7a06-323c-bfdb-dfefddb73a2d.roa
File:                     bff02705-7a06-323c-bfdb-dfefddb73a2d.roa (raw, json)
Hash identifier:          iyfr6HXRcYE8FHNTW3VlbcrJofPn6Y2LXqFCmTf1s6Q=
Subject key identifier:   6B:AB:13:C3:71:FA:5C:7B:56:7D:3E:33:F2:66:43:85:AB:9C:55:8C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC114B268B1860751EBC5180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bff02705-7a06-323c-bfdb-dfefddb73a2d.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     40294
IP address blocks:        47.43.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:11:4b:26:8b:18:60:75:1e:bc:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=5e68c802-cf3a-43d5-9fb3-40f7596a7845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:45:cc:40:81:95:a1:da:07:2d:65:18:52:9c:
                    36:6d:92:70:63:33:3d:7d:b9:90:06:79:d8:42:a9:
                    c7:66:32:c6:04:81:92:e9:b7:86:14:49:2e:0f:0d:
                    45:41:c0:3f:4a:1f:6e:b2:4a:5c:36:74:97:5a:51:
                    59:9f:dd:57:87:11:03:90:71:72:33:9c:8d:dd:17:
                    d6:98:ab:45:21:7f:45:d0:aa:79:34:eb:fa:f0:d2:
                    1e:e9:2b:52:54:92:3f:9b:d2:3b:36:37:b9:9b:32:
                    3f:94:f4:4f:a8:9f:d9:81:73:bc:cf:4b:89:30:1c:
                    d1:11:9c:c8:8b:14:9e:0e:4c:ea:8a:a5:4d:32:7e:
                    ca:d0:15:b8:c4:ce:4e:aa:38:50:d5:4a:73:72:55:
                    5e:54:f1:ed:a4:ed:eb:df:46:a0:3e:1e:bc:9d:24:
                    4a:19:96:0c:bd:e2:4f:32:02:68:e5:99:1c:50:00:
                    e3:8c:ac:78:24:22:44:0f:92:05:b0:1e:21:7a:ce:
                    df:e5:e2:ea:f0:1c:c1:c2:de:cf:11:7c:e0:09:e7:
                    85:63:08:0c:de:36:20:cc:6e:63:e1:73:ae:01:d7:
                    ca:6c:f1:00:8d:40:00:4a:7b:fc:e3:a8:a5:fd:84:
                    51:f2:b6:51:61:59:70:96:e1:f1:43:34:9e:36:e9:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AB:13:C3:71:FA:5C:7B:56:7D:3E:33:F2:66:43:85:AB:9C:55:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bff02705-7a06-323c-bfdb-dfefddb73a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.43.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f6:ee:04:3a:d3:83:64:2d:5d:91:34:2b:4e:d7:53:bf:cb:
         d0:52:d7:e5:81:ce:4c:69:b5:94:cb:a7:7d:c3:3d:aa:11:7d:
         b0:fb:e4:52:88:11:c0:5a:77:b3:d7:1b:a5:4a:a5:6f:f5:e1:
         24:80:76:dc:ed:7d:13:ac:f7:71:92:ca:57:85:6a:a9:9e:8c:
         bf:68:10:0a:44:d0:7d:3d:f6:7c:06:e4:4a:94:ce:b4:87:48:
         a8:37:fc:5d:b0:8b:dd:56:6a:95:e7:26:d8:93:e6:ee:f8:2c:
         b3:79:f1:bc:21:ab:47:ff:f6:16:63:29:42:ef:c9:15:15:15:
         01:41:d9:49:70:60:d4:b9:0b:2f:80:49:cd:27:46:ad:f2:41:
         a5:72:5a:8a:f6:2d:f5:aa:4c:63:c7:5d:db:c4:09:14:0e:f1:
         f5:45:c8:f3:b5:e6:60:ee:5a:e8:d1:6c:7c:c0:34:41:b8:e1:
         92:40:6f:76:21:94:1f:94:59:44:07:6e:da:e7:07:08:b8:0e:
         da:b9:8a:15:29:b6:a2:d9:a1:01:82:90:86:10:cb:b8:c9:59:
         24:d6:df:5c:8e:e3:02:07:7f:4f:c4:fc:c1:d9:87:ac:0e:13:
         3f:dd:37:45:fe:60:a1:c2:17:cb:b2:d9:f5:68:fc:9d:cc:d5:
         68:b9:ed:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:19 2024 by rpki-client on console-fra.rpki-client.org