Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7af07f6-75b7-315a-bb7f-10c549853846.roa
File:                     e7af07f6-75b7-315a-bb7f-10c549853846.roa (raw, json)
Hash identifier:          MadmHTyD2ip6fXK9wtU5/R4cFAt3S9/mgHmjaD7MzAg=
Subject key identifier:   8B:6C:F3:5A:85:C8:B6:AD:B5:8C:15:55:D9:C7:86:A7:7C:7E:DD:B1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EADAEAF2C4F9FA06EA920
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7af07f6-75b7-315a-bb7f-10c549853846.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        71.9.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:ad:ae:af:2c:4f:9f:a0:6e:a9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=4dca8308-5d83-474d-a9f7-695ea9e5539f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:06:4b:51:42:c5:63:0b:62:12:ed:2d:f7:
                    00:95:17:56:90:4e:ed:62:78:48:1a:f2:ca:64:f3:
                    33:eb:29:48:43:cc:af:60:cf:b0:94:9d:43:4c:c6:
                    c0:a2:ca:8b:57:b2:59:ce:ee:6b:82:2f:d2:32:26:
                    02:54:3a:5a:1b:9e:92:ec:0e:a0:55:f4:69:f8:4d:
                    1c:3d:70:f3:1e:e1:ce:3e:2d:0b:61:b3:dc:53:ea:
                    f3:ed:34:7f:38:c7:b0:89:5b:24:b0:6d:5a:0a:11:
                    7e:48:e6:7b:13:98:d2:1d:5f:25:de:92:b9:68:f8:
                    38:6b:70:d7:da:8e:f1:00:81:97:10:82:49:3f:0f:
                    84:3c:a4:8b:46:02:bc:8c:84:71:a4:c3:86:89:cb:
                    02:80:2d:0c:72:b0:51:c6:56:84:0c:82:be:04:d0:
                    f4:d5:10:2c:f5:a0:6b:99:11:e4:62:ca:7e:b9:2c:
                    1a:e5:1c:8a:25:d3:dd:bd:70:1c:ba:42:88:3c:20:
                    3b:4d:80:66:86:fa:7f:63:0f:81:a5:cf:89:b6:75:
                    38:4a:53:b8:61:ed:3a:6e:6c:a0:4b:b5:22:18:70:
                    90:34:f6:2e:38:9f:a9:99:42:16:5a:94:c0:18:33:
                    ad:22:7e:f7:eb:c0:ad:d9:66:2b:28:c4:b4:36:91:
                    8c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6C:F3:5A:85:C8:B6:AD:B5:8C:15:55:D9:C7:86:A7:7C:7E:DD:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7af07f6-75b7-315a-bb7f-10c549853846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.9.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6e:55:97:e1:c7:63:b5:fa:32:74:9d:df:ec:87:f7:c5:ca:
         3f:73:2b:09:a6:2b:39:68:0c:3d:83:7c:da:e8:ae:81:a7:f2:
         26:8b:9a:37:87:3e:78:cf:93:ba:aa:29:60:56:bd:7c:78:1c:
         e6:1d:2c:bf:94:82:94:ee:c7:73:f7:e0:b1:05:3f:13:b8:dd:
         c1:4b:05:51:28:b5:fd:86:e7:75:ce:6e:b0:d5:ee:d8:7a:5d:
         03:0c:f0:33:d8:c5:e0:c8:a9:1b:3d:9b:45:20:9e:b7:43:a1:
         97:8e:a1:e1:7e:db:01:87:f7:6b:20:ee:8c:ea:ed:2d:b8:2b:
         ac:4a:12:b7:1c:c5:ca:f7:bc:21:47:c4:33:02:81:f3:dd:fd:
         17:81:a4:6e:51:78:97:31:0d:2e:9b:2f:c2:92:ca:f7:df:71:
         ec:b5:ac:6f:61:40:dc:a2:19:04:73:2c:ea:4c:37:17:14:3c:
         4e:5d:69:9d:25:ee:5c:04:7c:73:bb:0a:06:13:77:82:68:96:
         18:9b:78:9c:f0:1a:8f:c1:23:be:94:4e:49:aa:07:63:3e:c7:
         2a:8c:a9:fd:db:7b:aa:8d:58:82:7a:6c:98:ae:32:1d:6f:a9:
         46:a3:ad:f1:04:7d:29:b5:9b:6d:f4:0c:04:68:60:e6:6b:92:
         6d:b5:5d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:04:13 2024 by rpki-client on console-fra.rpki-client.org