Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc0e63a9-6fdc-37bf-963d-31b683570cc3.roa
File:                     cc0e63a9-6fdc-37bf-963d-31b683570cc3.roa (raw, json)
Hash identifier:          6nW4b3SxFc/xjAU72Q7TS88vzN8O5e25vRm7tMrBGS8=
Subject key identifier:   CC:10:87:5D:4D:3B:8B:D6:B3:24:2A:D8:38:62:E3:7C:4C:10:C4:94
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E1672E5EA988B90355B70
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc0e63a9-6fdc-37bf-963d-31b683570cc3.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        71.8.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:16:72:e5:ea:98:8b:90:35:5b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=1fbf512a-3247-4b8b-83fb-fee95a014c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:cf:11:ea:7a:73:6a:00:07:dd:3f:9b:f8:
                    d6:f1:29:ef:e0:d2:77:84:20:e2:68:7a:24:7a:e0:
                    97:47:53:cd:6e:01:18:b3:8b:e5:83:54:cb:6e:0d:
                    82:f7:7a:44:01:a6:05:28:27:cf:17:3d:de:70:19:
                    38:9e:b7:92:4c:d5:f6:95:2e:aa:d8:ef:08:88:6e:
                    4c:42:be:a3:11:50:06:12:27:55:15:fa:4c:ff:0b:
                    64:a5:01:95:3d:da:2b:9b:4b:6a:cd:34:e7:ac:89:
                    f4:61:28:95:66:43:d9:9c:a9:8e:85:1f:ea:51:d8:
                    d8:57:0a:98:bb:8c:82:ec:40:c3:b0:f5:6d:15:95:
                    42:74:0e:3c:2b:13:8d:06:12:af:a8:33:09:49:92:
                    a9:b5:eb:cc:dc:cc:5f:45:f6:66:75:60:ec:a9:b1:
                    09:05:50:81:db:ba:43:3e:09:33:39:ee:83:12:9f:
                    17:e1:fa:33:04:3b:c3:ee:3a:cd:9a:60:bc:33:8f:
                    8a:b2:28:0c:32:7a:34:00:af:97:5d:2d:77:17:f3:
                    e4:6f:c3:ba:25:26:90:37:88:ee:38:6e:ef:13:6c:
                    78:93:4b:cc:62:83:f2:b3:a5:85:92:cb:40:e2:6c:
                    6e:4a:9b:0b:56:ec:22:a1:fd:a0:8e:87:2d:ec:7b:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:10:87:5D:4D:3B:8B:D6:B3:24:2A:D8:38:62:E3:7C:4C:10:C4:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc0e63a9-6fdc-37bf-963d-31b683570cc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.8.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:37:c9:d5:18:10:68:ca:df:8b:34:ea:3d:7e:62:74:07:38:
         ee:53:4a:8c:1f:db:8d:44:b4:7a:cf:62:10:32:ae:a2:0b:0e:
         3e:98:08:e2:b3:a0:38:1c:0b:9b:45:78:41:20:a5:46:a2:69:
         72:0d:d1:43:2d:e2:83:87:ca:97:53:18:fd:cd:da:ca:09:e8:
         14:0c:84:a7:04:79:29:3e:c1:14:54:02:e6:82:30:41:96:d7:
         48:bc:f8:42:e8:9a:89:9b:88:9d:f6:7f:e0:9b:1a:29:5f:39:
         57:eb:68:80:62:03:84:17:e5:93:8a:d2:c1:60:a1:45:94:06:
         b5:de:6c:ee:87:14:20:fe:85:5f:b1:17:25:8d:6c:29:bb:4a:
         63:0e:72:62:28:81:4f:e9:ed:25:c3:2b:14:65:42:1a:15:34:
         79:4e:c3:6b:ef:e9:ec:19:8e:ea:76:a3:22:7e:6f:d1:3e:e3:
         ef:19:3f:83:03:4f:a0:79:8d:30:55:bc:aa:2f:13:48:cc:eb:
         6c:53:1c:16:bb:3d:8c:39:97:b6:8f:7e:37:fc:52:f8:1e:df:
         81:8b:05:d0:ac:9a:49:c4:cb:69:ff:9c:f2:cc:22:45:08:af:
         92:02:88:07:79:2e:9c:d4:b9:3f:05:40:26:99:f9:04:76:fb:
         ec:47:1f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:04:10 2024 by rpki-client on console-fra.rpki-client.org