Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/02258029-dbca-37b3-8d81-300d8e4726a0.roa
File:                     02258029-dbca-37b3-8d81-300d8e4726a0.roa (raw, json)
Hash identifier:          7YPqBoHCPotXN+QcFgrX8G7A4X0nlooyZdehXq/fPoY=
Subject key identifier:   63:C6:2B:BD:A1:20:BE:17:A6:D8:7A:1B:EA:EA:CB:08:16:6A:A3:B3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0E4DA58ECBD99B178F380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/02258029-dbca-37b3-8d81-300d8e4726a0.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        66.189.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:e4:da:58:ec:bd:99:b1:78:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=0e5cbce2-b06e-4bc9-8688-73b485184893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1c:3c:e7:0e:ee:5d:2a:67:46:3d:5e:b7:2c:
                    3f:cd:e4:e5:42:ac:b7:86:1a:47:af:84:1b:98:a6:
                    62:fa:e1:f3:0f:c5:6f:44:39:e9:59:48:32:1f:00:
                    3c:b6:ff:23:9f:17:87:e8:dc:d1:59:5f:ef:b1:1c:
                    b4:3c:81:9e:51:33:6f:1e:77:dc:fd:9d:c5:92:58:
                    b8:9b:85:60:fb:f4:6b:7b:9a:0c:9d:62:94:1c:73:
                    43:6d:2a:aa:4b:41:1c:6e:f5:66:aa:55:54:d0:22:
                    9c:c2:3e:35:a4:6a:2a:37:ed:d5:4a:73:77:97:77:
                    0d:15:fd:a7:c9:8b:e4:21:da:2d:22:83:6c:8d:cf:
                    19:52:5f:f9:bc:37:80:8b:05:ff:cc:5e:a3:b5:02:
                    51:0b:f0:b6:b7:d3:e4:8c:fb:15:e8:de:6b:cd:b2:
                    2d:41:3a:7d:e0:fe:e2:be:bb:b4:a3:ee:a8:67:07:
                    61:d8:26:5f:72:31:84:bd:57:e7:7b:ef:38:b4:0d:
                    2b:58:3c:40:78:93:8b:02:2b:8a:40:69:1c:5a:cf:
                    9a:80:0a:38:2d:a6:30:99:a6:44:72:45:d4:38:b2:
                    bd:0a:c7:58:7b:ec:05:61:35:64:4b:21:31:bb:50:
                    43:00:97:2e:56:4c:c6:91:69:16:41:ba:21:9c:67:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C6:2B:BD:A1:20:BE:17:A6:D8:7A:1B:EA:EA:CB:08:16:6A:A3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/02258029-dbca-37b3-8d81-300d8e4726a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.189.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:4f:da:27:6b:7e:39:cd:01:34:56:e8:23:a0:35:15:54:f6:
         50:b2:b1:7f:b4:3a:d1:18:05:9d:a1:d7:4f:3e:e5:8c:66:4f:
         cb:07:99:45:c4:80:f3:d4:22:0b:16:18:1d:3b:73:b3:ce:0a:
         6f:57:68:1b:f6:7a:16:ec:37:7d:12:9a:01:be:6e:99:53:9e:
         9a:1c:ad:5a:f1:b9:e7:a1:67:2b:ec:72:76:d3:e6:da:3b:3b:
         f8:78:ca:12:99:78:29:75:b7:07:52:8a:bf:d0:83:85:59:7d:
         49:86:12:80:78:e8:76:5a:8f:63:1c:8a:2d:98:6c:b9:36:0c:
         9f:67:61:1d:b0:f3:cf:29:6e:58:4e:b4:fe:f5:04:aa:3f:8e:
         44:0d:9e:d1:a4:34:cd:ef:8f:78:ea:af:76:30:ae:11:e3:a2:
         db:5f:be:b9:d5:ed:f7:89:9d:fa:4e:c7:a6:d8:b0:b8:70:06:
         c0:74:01:c2:b5:7a:7b:8d:3b:da:d0:75:73:f9:fb:e4:79:d3:
         0d:be:b0:be:35:fb:e4:f0:76:ce:e2:e9:1f:26:06:c3:f9:a4:
         23:4f:57:0c:db:8c:7c:66:93:75:ca:1f:b3:80:46:4f:3c:06:
         07:bf:e6:92:b9:51:a2:4f:30:c6:81:45:e5:21:08:27:42:a4:
         36:67:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:00 2024 by rpki-client on console-fra.rpki-client.org