Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/75c34556-e431-38eb-b849-494d0766444b.roa
File:                     75c34556-e431-38eb-b849-494d0766444b.roa (raw, json)
Hash identifier:          dOW7mDShHqfBbrSa6CykijxPsAEh1bOLEzUm61TPqkI=
Subject key identifier:   B1:A4:84:3E:F5:7D:18:AB:8A:F0:17:CC:8A:36:0F:FC:FC:30:64:D8
Certificate issuer:       /CN=4bb96a0d-945a-427f-bdc4-a9da310cb3a5
Certificate serial:       010D0C9F432858456C530F5B2A31F1A852124300
Authority key identifier: 27:5D:11:4A:E3:1B:79:F7:53:84:2C:B4:36:4E:BD:E7:6F:94:87:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/75c34556-e431-38eb-b849-494d0766444b.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     2635
IP address blocks:        66.6.32.0/20 maxlen: 24
                          2620:109:b000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0f:5b:2a:31:f1:a8:52:12:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bb96a0d-945a-427f-bdc4-a9da310cb3a5
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=56e62479-9028-42ae-a8df-2619bb65d992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8d:90:ef:59:34:7a:d5:5b:f1:0f:4e:84:70:
                    68:d5:ee:3c:ce:4b:67:37:7d:33:ef:04:e4:c1:9f:
                    ff:f3:ae:06:62:e4:00:37:bb:f6:aa:17:c8:a0:23:
                    bb:76:a8:76:fd:15:c9:4d:53:a4:e0:37:3b:44:3e:
                    80:6b:b0:31:13:e5:9b:b7:03:8b:72:7d:8b:15:a7:
                    08:1f:0a:40:9f:40:f9:6b:a5:df:20:81:dc:5a:bd:
                    3e:b5:0d:b7:f7:1b:a7:a5:21:75:32:52:24:7a:b4:
                    7b:d1:91:3f:f6:d1:7a:cc:ac:cb:86:ee:39:58:42:
                    23:eb:88:09:c3:7e:24:a6:e7:e9:69:bb:50:34:50:
                    3b:c3:c5:67:3e:22:6f:1e:38:92:fe:ad:39:18:ab:
                    3e:48:1a:9f:4a:7f:62:c4:ef:18:31:a2:e6:73:0d:
                    25:c1:6d:e2:8c:1c:84:94:1b:81:96:aa:f7:95:d1:
                    6e:1d:47:b2:83:ea:1c:9c:4e:1c:da:38:7d:e3:42:
                    a3:5e:81:50:7e:6e:c6:2e:4a:d1:23:e4:8a:07:ee:
                    1f:86:f3:b8:3b:a5:8b:4c:ee:0a:62:51:8c:96:38:
                    2e:82:78:38:f6:84:73:90:1b:6b:d6:e7:a9:44:05:
                    e2:1c:8f:14:27:42:1c:05:f8:76:e7:5e:64:d2:cf:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A4:84:3E:F5:7D:18:AB:8A:F0:17:CC:8A:36:0F:FC:FC:30:64:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/75c34556-e431-38eb-b849-494d0766444b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.crl

            X509v3 Authority Key Identifier:
                keyid:27:5D:11:4A:E3:1B:79:F7:53:84:2C:B4:36:4E:BD:E7:6F:94:87:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.32.0/20
                IPv6:
                  2620:109:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:fb:de:2c:04:23:e2:e4:b3:e7:99:37:fd:f2:df:14:7c:0e:
         03:2c:56:d8:1d:86:ef:54:26:a8:05:af:ea:ad:9a:b3:1a:30:
         cb:3b:30:46:dd:97:6a:00:e7:0e:14:b6:e8:fb:80:0f:88:74:
         d3:63:89:06:9b:8a:b3:36:6d:51:bf:37:a8:83:6f:98:5d:69:
         11:34:92:58:c8:48:ae:49:fe:09:04:83:e3:39:be:bc:b5:82:
         c1:ff:71:09:11:27:dc:d8:2f:20:81:0a:20:0d:8e:69:0a:6a:
         f4:3e:9b:c3:0e:2e:18:18:21:d3:76:fd:f0:1d:bb:89:8d:34:
         d6:36:c8:d6:2b:5e:36:cb:c6:b1:e9:6a:09:96:53:18:9a:05:
         c5:ac:11:9b:e1:f0:10:eb:b5:df:a7:de:13:9a:57:c5:c7:ee:
         23:f8:c1:fe:85:84:01:5a:4a:79:23:58:78:32:11:15:c8:a8:
         6c:9a:1c:30:a5:a8:6e:ba:0c:a4:a6:72:07:da:83:aa:5f:56:
         22:85:c9:06:19:c4:59:09:51:41:13:6b:8f:cf:28:a9:f5:82:
         0c:4d:e3:fa:f1:2e:c6:e6:21:12:22:d7:57:a5:58:79:50:2d:
         02:3e:52:43:2d:ea:ca:26:58:36:0e:33:9f:dd:ca:8a:a4:0f:
         ca:23:3a:69
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEVsUw9bKjHxqFISQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJiOTZhMGQtOTQ1YS00MjdmLWJkYzQtYTlkYTMxMGNi
M2E1MB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk
NTZlNjI0NzktOTAyOC00MmFlLWE4ZGYtMjYxOWJiNjVkOTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh42Q71k0etVb8Q9OhHBo1e48zktnN30z7wTk
wZ//864GYuQAN7v2qhfIoCO7dqh2/RXJTVOk4Dc7RD6Aa7AxE+WbtwOLcn2LFacI
HwpAn0D5a6XfIIHcWr0+tQ239xunpSF1MlIkerR70ZE/9tF6zKzLhu45WEIj64gJ
w34kpufpabtQNFA7w8VnPiJvHjiS/q05GKs+SBqfSn9ixO8YMaLmcw0lwW3ijByE
lBuBlqr3ldFuHUeyg+ocnE4c2jh940KjXoFQfm7GLkrRI+SKB+4fhvO4O6WLTO4K
YlGMljgugng49oRzkBtr1uepRAXiHI8UJ0IcBfh2515k0s8QYQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFLGkhD71fRirivAXzIo2D/z8MGTYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmI5
NmEwZC05NDVhLTQyN2YtYmRjNC1hOWRhMzEwY2IzYTUvNzVjMzQ1NTYtZTQzMS0z
OGViLWI4NDktNDk0ZDA3NjY0NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJiOTZhMGQtOTQ1YS00MjdmLWJk
YzQtYTlkYTMxMGNiM2E1LzRiYjk2YTBkLTk0NWEtNDI3Zi1iZGM0LWE5ZGEzMTBj
YjNhNS5jcmwwHwYDVR0jBBgwFoAUJ10RSuMbefdThCy0Nk6952+UhxswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YmI5NmEwZC05NDVhLTQyN2YtYmRjNC1hOWRh
MzEwY2IzYTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEQgYgMA8E
AgACMAkDBwQmIAEJsAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAuPveLAQj4uSz55k3/fLfFHwOAyxW2B2G
71QmqAWv6q2asxowyzswRt2XagDnDhS26PuAD4h002OJBpuKszZtUb83qINvmF1p
ETSSWMhIrkn+CQSD4zm+vLWCwf9xCREn3NgvIIEKIA2OaQpq9D6bww4uGBgh03b9
8B27iY001jbI1iteNsvGselqCZZTGJoFxawRm+HwEOu136feE5pXxcfuI/jB/oWE
AVpKeSNYeDIRFciobJocMKWobroMpKZyB9qDql9WIoXJBhnEWQlRQRNrj88oqfWC
DE3j+vEuxuYhEiLXV6VYeVAtAj5SQy3qyiZYNg4zn93KiqQPyiM6aQ==
-----END CERTIFICATE-----
Generated at Thu Apr 18 02:55:16 2024 by rpki-client on console-fra.rpki-client.org