Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c78043a6-793a-3049-a9bb-a9cc785e95c0.roa
File:                     c78043a6-793a-3049-a9bb-a9cc785e95c0.roa (raw, json)
Hash identifier:          eK2bCRYQ4sePg8aGMTrqjR27XHW4DRgy9lpcAT2RO2w=
Subject key identifier:   A1:2B:72:F3:2B:6C:8A:13:C4:77:AC:9B:75:81:B5:B5:FD:F6:BD:25
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583937A0393A57D903AAA0107400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c78043a6-793a-3049-a9bb-a9cc785e95c0.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        71.91.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:a0:39:3a:57:d9:03:aa:a0:10:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=22713885-65dc-4ebf-b748-b9b3220e88c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:da:0f:94:a5:c8:45:37:99:6a:58:73:76:
                    2c:6b:55:70:53:c2:96:90:04:fa:bc:ef:c1:4b:32:
                    a2:7b:39:76:65:21:bf:34:55:2f:c6:25:03:cd:06:
                    a5:d2:5f:fe:3a:1d:13:15:83:b5:7f:1e:ce:d3:20:
                    a3:24:22:e0:6d:3a:1a:5c:9c:b2:ae:4c:70:5e:74:
                    7c:aa:a2:4c:b8:0c:fa:e1:3a:24:48:e4:67:3c:c9:
                    81:49:62:ab:c4:e9:a2:85:86:12:e5:ad:17:a2:7a:
                    e4:c5:6a:22:d1:8c:91:77:bc:5c:2b:13:44:4a:07:
                    c4:87:ee:44:d4:c5:fa:c0:2f:34:d0:8c:05:49:bf:
                    e3:92:d9:6d:73:a4:6a:66:29:d5:3c:b8:2c:11:c9:
                    93:30:cf:10:fa:8b:24:6a:d5:30:2e:f3:09:30:5a:
                    33:7e:ed:08:3d:9f:0e:32:88:cb:87:a6:63:b7:12:
                    a1:13:c4:ef:2f:de:75:d8:20:dc:e6:4f:08:f8:52:
                    c7:f3:11:a5:22:90:4a:99:1b:c6:a9:e9:2c:71:92:
                    f9:7e:81:64:23:0f:0a:36:46:a6:1e:29:13:94:c5:
                    ff:94:d6:4b:3e:b1:83:8a:74:3f:f4:7f:b7:3c:99:
                    33:5f:26:50:f3:73:0d:2d:8d:f9:07:62:0a:14:9e:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2B:72:F3:2B:6C:8A:13:C4:77:AC:9B:75:81:B5:B5:FD:F6:BD:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c78043a6-793a-3049-a9bb-a9cc785e95c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.91.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:c5:b2:0f:86:12:7d:60:29:78:f2:d5:71:db:46:62:96:
         3f:b2:d2:3b:aa:5d:9b:7b:30:35:0c:86:ff:5d:18:5b:6e:12:
         b3:c5:99:a4:d8:67:3b:c4:f3:85:ee:9a:27:95:0d:1d:f7:ce:
         cb:37:c3:92:f7:93:4a:91:22:bd:2a:47:d6:9c:35:62:1e:af:
         a7:e0:9e:e0:63:ec:1b:7e:31:ee:28:4a:47:94:1d:14:30:63:
         ce:00:0f:61:7b:22:ea:68:75:a7:31:d9:15:3e:da:58:8b:b2:
         0a:19:fb:76:b4:65:af:34:83:fb:a7:e4:2b:d4:c4:aa:ee:d6:
         8c:81:af:6e:45:bb:71:b9:a6:c1:9e:24:4f:f6:14:a6:f4:aa:
         7e:f0:9f:a4:03:93:c4:3b:cb:84:9e:87:20:2f:78:bf:96:36:
         70:b8:cf:7f:39:63:50:53:38:3a:d3:1d:66:7b:01:8e:75:bc:
         8e:00:3f:6d:f0:37:39:16:3e:a2:bb:9f:87:ce:3f:00:85:d2:
         ff:e7:77:a2:c4:21:de:57:3d:bd:8a:42:d5:29:96:c9:5f:8c:
         26:48:e9:2d:1b:8a:1e:65:06:9f:19:a9:6a:bd:4b:ab:f9:70:
         4f:0a:ba:3d:9c:f4:c1:f3:7e:05:20:ae:73:24:d7:87:29:8d:
         5a:74:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:20 2024 by rpki-client on console-fra.rpki-client.org