Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ea3310fb-21f6-322c-8522-d93d402269dd.roa
File:                     ea3310fb-21f6-322c-8522-d93d402269dd.roa (raw, json)
Hash identifier:          Vq+U5AqM8GT0CdcEWTQ2Bmc2qwEj1s4knXOolK3+fhc=
Subject key identifier:   EF:03:49:C8:51:70:6D:F9:F0:22:91:68:41:78:65:D1:48:7E:DA:3E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E0C180E1F1369B77BA000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ea3310fb-21f6-322c-8522-d93d402269dd.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        71.86.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:0c:18:0e:1f:13:69:b7:7b:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=a2672bb6-02cd-453c-8aa6-1b56f1d66beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:80:03:32:9d:21:9f:7f:56:5f:15:1a:82:81:
                    e5:be:52:63:85:a7:32:da:04:c1:0e:29:ce:dd:57:
                    43:ec:4e:f7:14:f0:ea:6d:eb:3b:68:85:e3:6e:d4:
                    60:dd:74:a5:74:55:b1:87:f0:75:1c:75:c6:f3:45:
                    0b:a0:18:49:4a:22:53:f5:2e:ba:e6:9b:c2:06:de:
                    10:a2:e9:9a:7d:50:19:6c:2a:81:27:38:c8:69:66:
                    7a:e9:40:13:8c:4b:89:8a:40:69:10:f1:b3:e6:8c:
                    d7:c4:38:0c:a4:69:4c:ad:87:ed:cb:ae:69:27:e2:
                    68:d5:21:61:a2:31:21:bc:d6:b3:51:1b:48:08:1a:
                    fd:99:2b:61:d1:ea:12:17:12:84:67:6f:a3:36:7a:
                    5c:75:c5:c9:08:47:c7:33:32:d5:6b:c3:5c:80:7b:
                    32:82:57:f4:ba:de:72:2e:08:12:9f:7d:6e:1c:37:
                    1f:65:f1:a3:c7:c3:a9:eb:49:76:c8:f5:cd:97:4a:
                    0e:33:6f:4b:cc:cc:2e:24:85:3a:8c:1c:4a:66:e5:
                    ea:0f:27:96:d6:7c:db:f7:3d:68:e8:18:25:b7:cb:
                    27:bf:e9:65:d6:22:71:09:a7:2f:74:74:04:b8:90:
                    d5:5e:74:c4:d2:a9:3a:13:c0:8e:cf:60:41:7b:64:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:03:49:C8:51:70:6D:F9:F0:22:91:68:41:78:65:D1:48:7E:DA:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ea3310fb-21f6-322c-8522-d93d402269dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3f:d9:8a:91:aa:0c:52:54:e1:d2:b3:3a:0d:4c:20:93:d3:
         2a:eb:d1:0d:4b:48:c6:cc:48:41:90:c1:d9:99:8c:9f:5e:53:
         93:33:0d:93:05:4e:73:3c:93:e3:e3:3b:38:1c:5e:7e:ea:06:
         be:ce:88:5b:f3:b5:af:d1:9f:2c:4c:e1:55:a5:0a:f6:80:d0:
         62:ac:da:8a:85:9d:15:2c:7f:f7:57:96:0c:e9:84:60:26:84:
         e6:55:41:d1:57:8a:eb:8d:18:36:c8:1f:b4:69:a4:23:81:49:
         91:e7:c0:86:29:a1:ce:91:12:7f:be:dd:72:0b:e6:57:c7:35:
         9a:0a:60:3c:40:61:46:60:8d:87:5f:51:f9:50:3b:07:ab:09:
         e4:16:08:3c:36:01:65:2e:43:e2:1a:72:01:4f:47:d9:d2:43:
         71:af:f7:69:9a:e0:e3:cf:41:b0:26:7c:68:56:f7:57:27:32:
         7e:c2:95:ac:9a:f1:27:f6:f8:de:ef:e0:67:1b:7e:3b:3c:37:
         e1:27:bb:a4:5c:0b:bf:bd:5c:b7:9f:3f:f6:9d:fb:fb:2c:7a:
         d8:7a:04:82:fa:8e:36:d8:a1:b8:5a:8e:45:26:1a:7c:25:7c:
         41:09:ac:7a:d9:04:dc:c4:ea:ff:d5:9b:3f:85:9b:28:e4:65:
         9c:85:2d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 19:42:37 2024 by rpki-client on console-fra.rpki-client.org