Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c41f0db3-1380-3eb1-9fa0-75bf2ab93759.roa
File:                     c41f0db3-1380-3eb1-9fa0-75bf2ab93759.roa (raw, json)
Hash identifier:          bsA1DjOLIX7fXKwRL1FggHjlb4L+pZpZlLkPTnVFuHY=
Subject key identifier:   00:D6:B7:1B:C7:3A:8E:46:57:03:13:F0:92:C2:16:B5:E7:34:5F:5C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858393A6805EA7DC28E3A78F6BB00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c41f0db3-1380-3eb1-9fa0-75bf2ab93759.roa
Signing time:             Fri 12 Mar 2021 05:00:00 +0000
ROA not before:           Fri 12 Mar 2021 05:00:00 +0000
ROA not after:            Fri 05 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        75.140.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:3a:68:05:ea:7d:c2:8e:3a:78:f6:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 12 05:00:00 2021 GMT
            Not After : Mar  5 05:00:00 2027 GMT
        Subject: CN=cc062e38-c220-4f57-9892-047ba509efa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:e8:e6:9f:9f:1f:18:ac:ac:25:a4:34:80:
                    47:51:bd:cf:93:bb:d9:57:12:cb:b2:f4:04:ea:af:
                    ed:fd:a2:cb:a9:78:cd:e5:e0:92:83:e6:b6:e4:da:
                    cd:11:5d:65:9b:0d:b9:d0:7a:10:ea:29:13:34:aa:
                    5b:a5:65:f4:5b:5b:36:d5:80:20:f2:d1:31:6d:6a:
                    12:29:50:20:dc:fe:48:95:60:74:d7:56:09:ee:98:
                    f5:c5:76:0e:35:1b:69:2e:b2:cd:b0:5b:87:ef:98:
                    55:69:38:a7:d5:a1:43:f7:05:bd:41:5a:e6:ff:62:
                    73:74:7a:98:03:d5:d4:1b:56:01:f3:b9:00:f9:f0:
                    4e:4c:90:7f:44:54:56:4c:bd:63:92:36:34:bd:16:
                    2c:8d:c2:46:94:5a:62:ea:35:14:99:df:5c:3b:92:
                    50:3e:ca:c4:ec:99:06:cb:6f:48:1d:c5:29:c2:ec:
                    2a:c7:0a:62:22:1a:e9:71:58:7f:cd:6e:b9:52:ea:
                    c3:98:68:ec:9c:83:e9:e8:ba:a0:e6:52:64:45:99:
                    66:8a:10:33:de:22:39:53:18:2f:63:1d:55:90:04:
                    05:5b:55:9c:7b:3e:95:5c:98:0e:b2:4b:75:c1:aa:
                    99:a2:ce:c6:82:23:8d:83:5c:98:b0:35:b9:11:5f:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D6:B7:1B:C7:3A:8E:46:57:03:13:F0:92:C2:16:B5:E7:34:5F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c41f0db3-1380-3eb1-9fa0-75bf2ab93759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.140.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:de:9d:9e:f5:a6:fe:75:b1:42:f6:ea:07:d9:91:b6:ab:9b:
         74:49:88:92:19:46:c3:f4:b4:58:fa:5f:2d:76:7c:22:c2:b7:
         4e:2a:d6:15:88:62:c3:9c:f6:7c:95:e1:cf:40:38:4a:73:dc:
         46:f4:1d:ac:6a:a0:75:68:00:d5:5d:b9:69:ff:75:a4:97:40:
         ba:1d:78:a7:ce:90:92:1f:a2:e6:5f:9c:07:a9:48:1b:11:36:
         a2:e8:5b:f2:97:6b:22:7d:2f:57:da:ba:32:c6:ed:aa:80:cb:
         68:e1:27:e0:2b:77:13:4b:37:d8:ae:65:9d:09:6b:a6:6a:45:
         50:e3:55:58:9c:e1:9c:23:f2:5c:e8:00:31:7c:c3:fb:48:1c:
         f2:c5:0b:00:d1:23:77:c9:1c:09:93:5c:5b:58:51:e4:32:0c:
         fe:e6:00:09:a4:79:70:7b:0b:d8:97:af:cc:54:44:38:d2:06:
         a4:8e:67:7a:97:62:37:e8:b5:ae:cb:49:1a:9f:a0:63:56:ae:
         ea:af:dc:f5:45:fa:33:28:22:67:4b:16:c8:37:cb:01:40:28:
         e2:ac:da:30:a3:59:06:57:5b:ff:ef:a8:bb:2f:01:9f:43:e9:
         42:9e:64:9c:ad:0f:91:6b:d1:19:93:e5:f4:dc:0f:bb:3a:de:
         fe:23:10:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDk6aAXqfcKOOnj2uwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDMxMjA1MDAwMFoXDTI3MDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2MwNjJlMzgtYzIyMC00ZjU3LTk4OTItMDQ3YmE1MDllZmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Lfo5p+fHxisrCWkNIBHUb3Pk7vZVxLLsvQE
6q/t/aLLqXjN5eCSg+a25NrNEV1lmw250HoQ6ikTNKpbpWX0W1s21YAg8tExbWoS
KVAg3P5IlWB011YJ7pj1xXYONRtpLrLNsFuH75hVaTin1aFD9wW9QVrm/2JzdHqY
A9XUG1YB87kA+fBOTJB/RFRWTL1jkjY0vRYsjcJGlFpi6jUUmd9cO5JQPsrE7JkG
y29IHcUpwuwqxwpiIhrpcVh/zW65UurDmGjsnIPp6Lqg5lJkRZlmihAz3iI5Uxgv
Yx1VkAQFW1Wcez6VXJgOskt1waqZos7GgiONg1yYsDW5EV8dowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFADWtxvHOo5GVwMT8JLCFrXnNF9cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYzQxZjBkYjMtMTM4MC0z
ZWIxLTlmYTAtNzViZjJhYjkzNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS4wwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMrenZ71pv51sUL26gfZkbarm3RJiJIZRsP0tFj6Xy12fCLCt04q1hWI
YsOc9nyV4c9AOEpz3Eb0HaxqoHVoANVduWn/daSXQLodeKfOkJIfouZfnAepSBsR
NqLoW/KXayJ9L1faujLG7aqAy2jhJ+ArdxNLN9iuZZ0Ja6ZqRVDjVVic4Zwj8lzo
ADF8w/tIHPLFCwDRI3fJHAmTXFtYUeQyDP7mAAmkeXB7C9iXr8xURDjSBqSOZ3qX
Yjfota7LSRqfoGNWruqv3PVF+jMoImdLFsg3ywFAKOKs2jCjWQZXW//vqLsvAZ9D
6UKeZJytD5Fr0RmT5fTcD7s63v4jEJk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:20 2024 by rpki-client on console-fra.rpki-client.org