Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e29c6b90-c038-3d27-9736-910df1ce6875.roa
File:                     e29c6b90-c038-3d27-9736-910df1ce6875.roa (raw, json)
Hash identifier:          bxPU4tOUG6oyk+ruvB3qANs8bpZNZ5q/63gc5G76K50=
Subject key identifier:   A7:02:C1:75:FF:C8:E8:7A:7E:90:EE:95:05:59:CD:BD:E4:3A:0D:97
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584593AD890C47B75EA370DB3480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e29c6b90-c038-3d27-9736-910df1ce6875.roa
Signing time:             Wed 17 Apr 2024 15:19:33 +0000
ROA not before:           Wed 17 Apr 2024 15:19:33 +0000
ROA not after:            Tue 16 Jul 2024 15:19:33 +0000
asID:                     40238
IP address blocks:        71.13.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:ad:89:0c:47:b7:5e:a3:70:db:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr 17 15:19:33 2024 GMT
            Not After : Jul 16 15:19:33 2024 GMT
        Subject: CN=2706f924-b764-4814-a77a-e2c0b9a380f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:ef:f2:f4:3e:2a:0a:cf:fc:6a:af:fc:36:
                    93:83:c1:e6:2e:fe:21:40:1e:7c:5d:d6:70:3d:7e:
                    0b:3a:82:37:29:7b:24:64:a8:23:d8:a1:ea:e1:c3:
                    bb:aa:ff:d7:f5:42:de:b4:52:3f:11:a9:27:61:5f:
                    40:a3:30:bb:1f:4c:82:31:b8:6e:a0:fa:fd:dd:59:
                    40:bd:82:67:5e:08:86:d0:1d:a7:35:11:ed:ab:44:
                    c3:fa:4d:35:6e:e2:eb:85:ee:1c:a9:0a:8c:7f:2d:
                    00:55:82:67:03:1a:b6:4a:53:68:eb:e6:04:b6:3b:
                    ec:e4:9c:a8:6b:0b:41:9f:f1:27:32:7f:c6:6a:10:
                    c6:2b:55:36:6c:72:48:61:d7:09:2b:ca:70:ee:60:
                    c2:3d:4c:88:16:b7:7f:0e:0f:21:d5:bf:f0:f7:a3:
                    05:4d:2f:28:a9:55:cd:cb:71:c9:57:ed:1d:bf:e5:
                    11:c1:33:a4:ff:8f:97:65:c4:dc:6e:8f:4e:1a:38:
                    0a:d7:4a:9a:f9:a4:41:b0:49:8f:aa:fe:c6:19:60:
                    5b:41:99:1e:c5:da:40:1e:e4:27:72:e2:84:95:66:
                    35:c3:bd:34:05:12:ff:fb:e2:4d:2f:4b:f3:4f:88:
                    de:eb:93:40:8a:c6:6b:b5:16:bc:19:bb:65:f0:ed:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:02:C1:75:FF:C8:E8:7A:7E:90:EE:95:05:59:CD:BD:E4:3A:0D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e29c6b90-c038-3d27-9736-910df1ce6875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fb:22:b9:bf:ba:a7:62:f5:57:6a:18:3e:38:8c:19:f7:87:
         1c:c6:79:26:fa:66:26:fb:f4:a8:08:cc:c4:bd:6d:26:58:fb:
         43:ed:0e:ba:cf:ed:78:4e:69:5a:ba:11:0b:00:af:3f:b9:43:
         88:5e:68:c3:6a:fe:75:f4:25:08:51:27:05:1f:30:19:55:3f:
         d9:5c:01:da:36:84:35:91:eb:d8:f4:86:8f:5d:cb:3a:23:43:
         3c:a4:d0:5a:5a:c4:62:23:d9:cc:dc:d3:4f:98:23:fa:ea:ad:
         78:00:04:9e:17:41:be:5c:1c:a3:1b:85:9a:e5:e8:cc:d2:89:
         37:7d:c2:2e:25:86:11:9c:fb:89:21:0f:f1:48:4b:4b:78:ed:
         55:14:e2:7f:8b:30:4c:28:9f:c3:5b:d5:1c:2f:fc:42:8c:ac:
         fe:f1:aa:b7:5f:99:14:11:61:1f:75:71:de:b1:24:79:51:53:
         6f:af:11:a1:83:28:53:e0:67:b9:0d:d7:86:0d:76:d9:8e:50:
         e6:73:5f:97:77:d4:b7:1c:31:21:9c:5b:76:be:a2:3d:5f:4b:
         bc:3d:bd:af:5e:14:5d:b5:84:ff:aa:fe:c8:33:53:97:7d:30:
         e8:10:91:6b:ab:87:de:e2:1e:0e:0b:7e:48:c7:35:22:0c:61:
         58:c4:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:05:18 2024 by rpki-client on console-fra.rpki-client.org