Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db4bb40b-e05c-32b9-b831-4eec781695ab.roa
File:                     db4bb40b-e05c-32b9-b831-4eec781695ab.roa (raw, json)
Hash identifier:          5fA5N2X2ukvO3jyXvRd33XOvgh4NvCAj28bx9nnyCgY=
Subject key identifier:   32:D9:62:E2:69:8F:96:43:5B:1B:18:F1:EA:85:C7:BC:D4:15:42:62
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858384D0C80335B418C161FA2A440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db4bb40b-e05c-32b9-b831-4eec781695ab.roa
Signing time:             Wed 16 Dec 2020 05:00:00 +0000
ROA not before:           Wed 16 Dec 2020 05:00:00 +0000
ROA not after:            Wed 09 Dec 2026 05:00:00 +0000
asID:                     7843
IP address blocks:        131.223.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4d:0c:80:33:5b:41:8c:16:1f:a2:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 16 05:00:00 2020 GMT
            Not After : Dec  9 05:00:00 2026 GMT
        Subject: CN=7cd9f20a-2b1c-4f9c-944b-f8834e174b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:07:8d:ca:13:64:63:de:02:9c:01:78:7c:
                    5c:b5:18:f3:90:03:cb:31:0a:6b:90:f0:39:95:d8:
                    cd:77:ba:20:b1:12:6e:c0:3e:48:84:7e:f7:86:40:
                    85:c9:af:de:db:53:8b:7c:ae:15:c2:14:04:0c:fe:
                    59:1e:94:d2:90:44:96:b0:9c:67:c2:15:07:f5:fa:
                    31:0f:89:62:35:28:cf:6c:13:09:42:71:9e:4a:0f:
                    19:8d:a5:43:b2:28:a6:50:27:61:12:54:1a:56:39:
                    8f:9a:f2:48:78:16:a8:c1:7a:c4:34:0c:76:39:36:
                    8c:6a:d7:fa:34:52:da:a9:ef:fe:83:3b:20:6f:a2:
                    01:4d:4f:a9:09:f4:e7:f6:5a:16:a7:c9:4b:48:65:
                    36:7b:b5:a8:1a:41:77:03:dd:44:e5:68:68:39:e4:
                    bc:4e:d2:c8:be:75:d4:b8:ef:a8:7b:cf:17:66:b7:
                    78:7b:84:ae:21:21:d6:a9:a4:cd:59:dd:da:44:69:
                    d3:95:1f:1d:ee:c8:2c:a4:45:c2:08:cb:81:b1:e8:
                    a0:6c:67:a4:a2:49:2c:a7:01:34:70:98:5e:3d:82:
                    26:97:a5:15:0d:5e:2d:cd:1f:df:61:44:84:8f:f0:
                    da:58:c0:3c:65:5e:62:3e:7a:5b:c5:3a:28:75:55:
                    d2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D9:62:E2:69:8F:96:43:5B:1B:18:F1:EA:85:C7:BC:D4:15:42:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db4bb40b-e05c-32b9-b831-4eec781695ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.223.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:60:32:6d:07:ea:ab:02:30:04:af:b2:ed:63:58:c8:4e:9b:
         54:1e:77:0a:68:18:28:71:be:ff:45:0b:5e:22:51:e8:1b:be:
         38:21:51:25:05:cd:4f:03:84:28:53:22:5c:28:f0:5c:a7:d9:
         6f:21:39:77:6e:33:bb:29:89:31:d5:a1:fa:44:51:40:f0:75:
         60:ef:6d:3f:5c:8d:ab:9a:96:15:77:cf:e0:30:d4:b2:70:e6:
         d2:cf:31:52:8b:67:c9:e1:34:79:fa:f2:45:8d:17:c0:a5:3b:
         d7:6b:80:f6:40:a6:cf:92:9a:d4:c6:b8:bb:4f:32:8d:b6:57:
         58:fe:71:3a:05:ee:4c:1e:02:de:79:04:c3:7f:a0:a4:a2:c2:
         74:4f:35:1d:a0:6b:05:ab:95:60:04:c6:f4:c9:fa:e9:10:6c:
         fd:43:3e:d0:7e:e2:c3:f4:86:a1:de:b5:8d:a4:08:4f:ae:9a:
         20:d9:63:99:82:40:39:fe:8b:25:bd:22:95:2d:eb:5a:06:b9:
         de:0b:eb:2d:93:9e:99:99:e0:67:b5:34:7b:12:b4:90:82:8b:
         f9:29:c7:64:6f:37:38:7f:37:42:31:eb:14:e1:8a:6a:05:52:
         2e:40:36:fb:f2:36:31:74:a0:07:9f:5f:a1:17:56:9b:4b:ca:
         38:51:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:22 2024 by rpki-client on console-fra.rpki-client.org