Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe8b070e-8fb1-351e-947a-6e8f9dde6a98.roa
File:                     fe8b070e-8fb1-351e-947a-6e8f9dde6a98.roa (raw, json)
Hash identifier:          2ZkMqjxkZOU65am76wu655LtvN0lrQGaGrYokuAOSuc=
Subject key identifier:   56:65:7D:BD:DF:09:E1:5E:E4:2C:0D:7F:C7:01:FF:0A:46:44:33:01
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A156CBBB82D116FAC06100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe8b070e-8fb1-351e-947a-6e8f9dde6a98.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        71.84.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:56:cb:bb:82:d1:16:fa:c0:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=8c1baa18-9d1b-4e7b-b1a5-c176ed1374a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:9e:12:f6:0c:a2:91:b2:0d:c5:a6:d5:91:
                    89:e1:8e:23:cf:c0:a5:a6:14:4a:ff:0e:56:7f:a2:
                    ae:88:b4:72:55:1d:ee:75:f8:6b:d6:e8:38:1b:b7:
                    f6:f4:e9:6a:85:cb:27:23:9c:2a:2c:11:74:16:ac:
                    b0:32:88:ef:d2:1a:f8:73:f5:a6:c0:fc:15:57:dd:
                    00:79:c2:75:03:78:ee:35:8a:b6:ae:28:54:42:bb:
                    e9:80:54:18:47:38:d8:50:d3:b7:95:c1:ba:4d:a3:
                    cf:8d:a7:ca:5d:df:05:72:a1:3e:93:02:ed:45:0c:
                    0e:d5:c3:74:6c:24:87:ec:7d:6f:12:e3:aa:e9:ea:
                    ff:02:17:8b:99:58:6c:42:be:87:8d:ca:74:27:17:
                    ba:b8:93:0d:89:9c:a5:b6:0a:06:87:d1:03:66:79:
                    dc:56:e3:c4:a9:08:4c:89:22:4e:92:13:cb:12:62:
                    68:19:a7:90:08:9d:b1:be:02:7b:69:b8:1a:95:1f:
                    17:33:6c:66:9f:ca:e6:f1:cf:f4:90:27:95:2f:fb:
                    b8:35:21:3b:0d:71:2d:f0:b7:3d:a5:e9:e9:d2:85:
                    6f:2a:86:25:54:77:0a:9b:f2:9d:b6:53:2f:df:c6:
                    65:7d:e8:92:2f:11:1b:57:59:6d:40:91:03:12:e1:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:65:7D:BD:DF:09:E1:5E:E4:2C:0D:7F:C7:01:FF:0A:46:44:33:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe8b070e-8fb1-351e-947a-6e8f9dde6a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.84.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ca:86:d3:e8:d5:e2:95:e0:f1:b3:b0:55:92:93:50:c3:36:
         22:eb:ea:67:2f:1e:74:71:04:ef:15:44:cd:75:87:76:e8:3c:
         44:a5:03:4e:83:29:b7:3c:40:95:40:95:8b:39:b6:d8:27:ec:
         46:23:93:10:94:f2:7e:68:a0:2c:6a:d5:e3:a6:c8:bb:b6:00:
         7b:99:ba:55:bf:d2:bd:1c:83:72:c8:31:96:41:b7:ae:52:69:
         14:7a:8d:49:c6:30:1e:1c:01:e4:d5:fd:ae:3a:e8:0b:ac:e4:
         bb:60:1a:3d:95:17:8e:cc:0b:23:75:dc:ba:88:cd:86:51:11:
         85:8f:b1:80:a6:60:2b:8e:1b:a6:07:1d:b3:bf:2c:2e:46:a0:
         86:a6:38:32:4e:55:66:0f:11:8b:09:94:fe:2e:14:2f:49:eb:
         35:56:b5:50:70:58:e6:90:05:d5:63:14:95:7c:4f:e0:0c:f9:
         14:7a:e7:3e:f3:54:a3:36:3c:cf:24:20:c5:6d:17:e4:cf:0c:
         56:be:dd:ba:0d:19:c1:4f:66:e0:32:8e:3d:ab:7b:f5:91:fc:
         25:e3:34:4a:11:e3:0d:85:4f:3c:31:d8:24:35:5a:69:df:c2:
         ab:22:64:a3:ef:bc:c4:03:f2:a9:25:33:e5:ac:f6:9c:be:90:
         f3:ae:a1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:09 2024 by rpki-client on console-ams.rpki-client.org