Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce0c9c60-1dc5-3eaa-ac93-fe9f219999ab.roa
File:                     ce0c9c60-1dc5-3eaa-ac93-fe9f219999ab.roa (raw, json)
Hash identifier:          8TIC/tJ/vPzb5wId53N20EDShS9wKI1Qbu5BG1S2R5A=
Subject key identifier:   E5:62:6C:B9:68:D0:0C:9D:C8:97:1C:49:09:DA:4E:36:8A:85:66:16
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583937A0391942FA8ED44031CE80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce0c9c60-1dc5-3eaa-ac93-fe9f219999ab.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        71.9.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:a0:39:19:42:fa:8e:d4:40:31:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=5b76a63d-d994-478c-80f9-f4bf5c96248c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:82:53:fc:f7:2d:c3:d9:f7:27:d2:38:67:
                    8e:69:25:b8:27:a1:a4:c2:c2:95:77:9b:0f:af:13:
                    dd:e6:6d:d9:31:6f:84:e9:21:b2:db:f1:cc:f8:0a:
                    49:e5:98:fa:d7:6a:22:c7:f4:47:78:58:9c:82:6e:
                    66:e8:96:45:f6:48:50:5d:54:78:49:e1:05:97:ae:
                    4f:24:97:4a:46:8f:9f:6f:df:7e:15:15:ae:b4:d5:
                    32:ac:f9:5e:d6:85:88:c0:d4:26:d2:fc:b7:ae:6b:
                    3c:9f:19:7a:4b:75:02:c7:6b:e8:f0:94:54:e1:bb:
                    b4:24:63:8c:f2:91:7e:b9:19:29:36:66:a4:fc:3f:
                    33:47:5f:a0:eb:1f:2a:69:23:10:76:51:0b:42:3d:
                    ca:aa:86:80:08:6a:47:03:f6:e4:37:97:ae:95:42:
                    d9:21:36:c2:61:dd:b8:f1:f8:4b:63:99:df:b1:73:
                    57:18:a7:c3:04:65:28:b9:a4:62:7e:6e:ac:cb:33:
                    e2:9a:c0:aa:41:b1:69:27:d2:b9:d9:0b:91:45:57:
                    5d:97:a6:60:70:49:d1:28:bd:6e:93:c1:b5:98:c3:
                    19:57:1f:a9:98:9b:d7:41:ca:d1:cd:2f:71:23:85:
                    cc:fb:e0:41:b9:2f:cc:d2:a4:a1:f2:94:50:02:4e:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:62:6C:B9:68:D0:0C:9D:C8:97:1C:49:09:DA:4E:36:8A:85:66:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce0c9c60-1dc5-3eaa-ac93-fe9f219999ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.9.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d7:15:bc:8c:94:ac:a5:6a:65:23:fe:00:e7:7c:d4:0c:34:
         88:af:0f:cf:38:1d:2b:c3:b9:10:1e:22:f0:6b:4e:50:58:17:
         99:3d:d8:74:4a:b0:17:1f:93:58:6a:4c:ac:bc:24:67:a8:e5:
         cf:2f:76:7e:c9:60:06:c4:ac:c9:e9:12:c8:74:6f:67:17:07:
         21:ef:cc:a0:be:fd:20:59:ca:17:4d:5e:02:50:61:66:f0:5f:
         77:37:ae:cb:a5:5c:9c:1c:7e:1e:90:c5:49:28:14:7b:14:23:
         75:1b:0d:27:84:8a:19:0d:47:1e:f6:b9:1e:4e:bb:1d:ff:2b:
         95:09:2a:10:bb:1a:aa:6d:57:77:1a:ea:6c:28:bf:d5:ed:52:
         7e:1f:95:de:b8:9d:21:b9:f5:c0:65:46:00:9a:ea:cd:12:71:
         94:9a:e3:b6:47:0f:54:61:d5:f1:71:3b:0f:c3:94:90:8f:3e:
         7f:e5:03:47:b9:8a:8f:8d:c5:77:f1:60:9e:50:b6:52:0e:84:
         4f:28:2f:0b:f3:c2:5d:73:4c:6e:28:ee:67:a8:b0:97:74:69:
         41:50:9d:42:3b:6d:de:5b:1b:fc:0e:08:9f:2c:8c:56:77:0d:
         73:f7:f2:80:59:8a:a6:4e:a7:de:47:0e:e6:ba:e7:56:62:72:
         77:dd:22:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDk3oDkZQvqO1EAxzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDMxMTA1MDAwMFoXDTI3MDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NWI3NmE2M2QtZDk5NC00NzhjLTgwZjktZjRiZjVjOTYyNDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHKCU/z3LcPZ9yfSOGeOaSW4J6GkwsKVd5sP
rxPd5m3ZMW+E6SGy2/HM+ApJ5Zj612oix/RHeFicgm5m6JZF9khQXVR4SeEFl65P
JJdKRo+fb99+FRWutNUyrPle1oWIwNQm0vy3rms8nxl6S3UCx2vo8JRU4bu0JGOM
8pF+uRkpNmak/D8zR1+g6x8qaSMQdlELQj3KqoaACGpHA/bkN5eulULZITbCYd24
8fhLY5nfsXNXGKfDBGUouaRifm6syzPimsCqQbFpJ9K52QuRRVddl6ZgcEnRKL1u
k8G1mMMZVx+pmJvXQcrRzS9xI4XM++BBuS/M0qSh8pRQAk68NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOVibLlo0AydyJccSQnaTjaKhWYWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2UwYzljNjAtMWRjNS0z
ZWFhLWFjOTMtZmU5ZjIxOTk5OWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwlgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7XFbyMlKylamUj/gDnfNQMNIivD884HSvDuRAeIvBrTlBYF5k92HRK
sBcfk1hqTKy8JGeo5c8vdn7JYAbErMnpEsh0b2cXByHvzKC+/SBZyhdNXgJQYWbw
X3c3rsulXJwcfh6QxUkoFHsUI3UbDSeEihkNRx72uR5Oux3/K5UJKhC7GqptV3ca
6mwov9XtUn4fld64nSG59cBlRgCa6s0ScZSa47ZHD1Rh1fFxOw/DlJCPPn/lA0e5
io+NxXfxYJ5QtlIOhE8oLwvzwl1zTG4o7meosJd0aUFQnUI7bd5bG/wOCJ8sjFZ3
DXP38oBZiqZOp95HDua651ZicnfdIpA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:01 2024 by rpki-client on console-ams.rpki-client.org