Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d21f052b-c95f-34d1-bf6e-727c6e91a523.roa
File:                     d21f052b-c95f-34d1-bf6e-727c6e91a523.roa (raw, json)
Hash identifier:          bovTjOXgBQdcq2Ak8xedyWW2ad28LJpkMkKVwYs8gkQ=
Subject key identifier:   94:E5:6F:43:C6:3C:32:EE:23:BB:53:05:71:07:8A:5E:1A:36:8A:C5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0E9EB9310E84280BBA0C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d21f052b-c95f-34d1-bf6e-727c6e91a523.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        71.87.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:e9:eb:93:10:e8:42:80:bb:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=07001113-b86f-4a97-9a86-2486765d5722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:a4:f9:cf:bd:44:34:d3:28:86:5b:60:ff:
                    2f:74:9e:12:fa:a1:47:01:48:63:3c:af:b5:90:d0:
                    85:1f:c8:f4:2b:85:3a:6b:d3:ec:9f:d8:74:7a:74:
                    05:a9:cb:83:5d:b9:ac:83:57:e7:c0:87:ed:e5:1c:
                    d0:c1:4b:07:b1:85:89:3b:c2:ac:13:d5:18:b2:ed:
                    4c:74:6d:71:1b:f5:6a:24:33:fe:42:ee:e4:be:1f:
                    41:9e:54:01:3e:51:32:ea:e6:0d:75:16:57:f6:5c:
                    96:cf:90:b3:dc:cd:f3:2d:ac:73:94:65:dd:09:b2:
                    04:81:e2:f4:d8:04:25:36:97:ac:38:ec:51:de:0c:
                    70:4b:4b:49:f5:84:93:18:14:7a:d2:a3:cc:f1:f8:
                    a4:af:97:0b:21:3c:cc:62:9c:35:d7:8b:eb:88:54:
                    21:71:0f:96:68:3e:85:d8:9e:15:3e:eb:cb:fc:fa:
                    23:e7:3d:bf:22:d2:9b:c2:9c:5a:f6:04:fa:5f:46:
                    ce:ab:1b:d1:b6:01:9c:e9:92:91:8f:d7:a5:10:01:
                    42:7f:45:61:b1:4b:40:85:ad:9a:c0:a6:df:19:1c:
                    2f:bd:7a:e9:ef:93:2e:c8:62:6d:88:80:a2:93:44:
                    67:fc:65:ee:7a:f0:b1:1e:33:35:1b:71:af:5c:e6:
                    4d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E5:6F:43:C6:3C:32:EE:23:BB:53:05:71:07:8A:5E:1A:36:8A:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d21f052b-c95f-34d1-bf6e-727c6e91a523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9c:a1:e6:7b:82:8f:51:4f:73:1a:e6:0a:98:14:6c:34:b5:
         c0:02:4d:d9:19:82:c7:ee:a0:6f:8c:0e:9b:52:a8:3c:1c:d9:
         7d:93:e4:65:0b:2f:17:a5:d2:94:8f:ef:39:e0:aa:30:1a:a6:
         20:a0:22:d6:ca:53:d6:5c:d4:81:7e:45:c4:58:0c:da:af:64:
         b6:00:ae:f8:ce:8a:a1:23:5f:80:20:62:ce:82:ae:1a:ad:54:
         b6:39:b3:2f:0d:e2:79:87:72:01:f8:99:df:33:97:af:e3:a1:
         0f:b5:cd:dd:74:b2:62:da:b7:ed:9e:cd:28:1c:f2:7c:1d:7d:
         14:d7:67:9f:92:90:19:d0:f8:3c:b9:d4:5e:58:9b:96:25:fb:
         36:70:96:9d:f0:40:24:0d:69:15:5d:5e:05:f9:25:46:b7:7f:
         ef:df:66:72:e6:ea:81:64:0d:56:58:25:6a:f9:9d:48:d5:88:
         ea:65:72:62:01:bd:2e:0e:d0:51:62:df:44:e3:57:ba:50:a6:
         30:97:3b:3a:64:3e:17:6f:c8:01:1a:f9:44:b6:48:d4:0f:58:
         35:70:90:73:9a:0a:c6:6a:d0:ce:55:c1:99:eb:3a:18:89:56:
         fa:af:a1:56:91:4e:b2:f6:92:73:ba:d5:14:99:34:3a:ab:85:
         58:ba:f6:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioOnrkxDoQoC7oMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
MDcwMDExMTMtYjg2Zi00YTk3LTlhODYtMjQ4Njc2NWQ1NzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDqk+c+9RDTTKIZbYP8vdJ4S+qFHAUhjPK+1
kNCFH8j0K4U6a9Psn9h0enQFqcuDXbmsg1fnwIft5RzQwUsHsYWJO8KsE9UYsu1M
dG1xG/VqJDP+Qu7kvh9BnlQBPlEy6uYNdRZX9lyWz5Cz3M3zLaxzlGXdCbIEgeL0
2AQlNpesOOxR3gxwS0tJ9YSTGBR60qPM8fikr5cLITzMYpw114vriFQhcQ+WaD6F
2J4VPuvL/Poj5z2/ItKbwpxa9gT6X0bOqxvRtgGc6ZKRj9elEAFCf0VhsUtAha2a
wKbfGRwvvXrp75MuyGJtiICik0Rn/GXuevCxHjM1G3GvXOZNMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTlb0PGPDLuI7tTBXEHil4aNorFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDIxZjA1MmItYzk1Zi0z
NGQxLWJmNmUtNzI3YzZlOTFhNTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR1cJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWcoeZ7go9RT3Ma5gqYFGw0tcACTdkZgsfuoG+MDptSqDwc2X2T5GUL
Lxel0pSP7zngqjAapiCgItbKU9Zc1IF+RcRYDNqvZLYArvjOiqEjX4AgYs6Crhqt
VLY5sy8N4nmHcgH4md8zl6/joQ+1zd10smLat+2ezSgc8nwdfRTXZ5+SkBnQ+Dy5
1F5Ym5Yl+zZwlp3wQCQNaRVdXgX5JUa3f+/fZnLm6oFkDVZYJWr5nUjViOplcmIB
vS4O0FFi30TjV7pQpjCXOzpkPhdvyAEa+US2SNQPWDVwkHOaCsZq0M5VwZnrOhiJ
VvqvoVaRTrL2knO61RSZNDqrhVi69tA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:02 2024 by rpki-client on console-ams.rpki-client.org