Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/06b07e57-4591-3846-b9a8-8dc919c1db74.roa
File:                     06b07e57-4591-3846-b9a8-8dc919c1db74.roa (raw, json)
Hash identifier:          X+bh31aQNRxPpoj9MhkPyJRvuRpyuGG1zfosPzDgGoU=
Subject key identifier:   85:81:80:C9:37:87:1E:A9:CC:EF:D3:7A:A4:E7:52:F4:5D:30:AC:C8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0E9756FAC3EB18429B280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/06b07e57-4591-3846-b9a8-8dc919c1db74.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        66.190.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:e9:75:6f:ac:3e:b1:84:29:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=83390df8-a140-448c-9bf6-e03222ea8fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:37:40:ef:33:1d:b9:89:b1:ef:fd:18:d8:
                    e3:fa:05:0d:e2:df:9d:3e:38:6b:de:b0:ad:96:11:
                    3e:72:66:68:56:ec:51:13:e0:a3:55:3d:10:99:dc:
                    63:15:bf:46:da:5b:db:9b:98:f3:8a:32:4c:f1:fd:
                    86:ed:9c:9c:9a:e0:bf:5b:54:1c:d2:86:2f:5e:99:
                    5d:33:2e:61:27:54:4b:1a:86:12:8d:1d:45:71:78:
                    0f:d0:a8:a2:22:80:cd:a7:91:d5:ae:5a:a8:8b:41:
                    82:22:93:0f:9d:4d:4d:31:30:c5:3d:80:83:4d:d8:
                    29:8d:d1:f2:e7:86:45:1f:99:53:c5:e6:e2:a5:e7:
                    e5:36:06:51:7c:65:d8:7a:9c:34:4e:7b:e8:6c:2f:
                    50:fb:93:64:78:b5:cd:d4:6f:b5:9d:08:56:9a:c0:
                    45:6f:2b:01:a7:d4:47:7e:58:e6:92:aa:65:95:0f:
                    39:1a:75:a3:0e:95:9a:43:61:7e:18:5e:6e:f2:00:
                    f2:10:8f:68:87:d1:7c:e2:53:10:6b:a9:be:52:ef:
                    db:82:64:d4:56:6a:75:4f:a3:e2:7a:37:ac:fa:b0:
                    41:ac:f7:fc:64:51:c2:0e:89:fb:47:a2:37:a7:b3:
                    06:4e:6d:3b:ce:b5:4f:9a:4c:92:91:d8:d9:b7:e0:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:81:80:C9:37:87:1E:A9:CC:EF:D3:7A:A4:E7:52:F4:5D:30:AC:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/06b07e57-4591-3846-b9a8-8dc919c1db74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.190.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e3:6f:d8:c0:8a:5f:85:a5:d3:af:ce:df:9b:04:d5:f2:7d:
         cd:0d:9f:43:ff:08:cf:f8:3c:58:c5:5b:7b:1d:30:f5:ce:84:
         7c:9d:ef:5a:8a:75:b4:3b:26:58:a7:e2:3d:ac:90:67:3f:d0:
         89:6f:39:33:57:80:1f:4d:04:1d:81:3f:00:1d:cf:6f:0e:fd:
         06:97:62:ed:06:82:34:7e:c1:cc:f5:07:d5:45:7f:3a:3b:e3:
         3f:cc:b9:de:87:ab:ee:63:ef:fd:08:f7:cf:9f:dd:f0:32:fa:
         6f:ae:75:33:b2:73:73:1f:b8:39:a7:09:70:96:4f:b3:62:3c:
         08:4a:67:31:af:e5:3a:d0:1f:f5:e9:7b:dd:29:d4:d4:ec:bc:
         0c:7b:58:c0:37:7a:bb:ac:c7:b3:83:10:3a:1c:07:6d:00:7e:
         32:0f:e7:cf:f8:6c:ba:0b:77:c3:6c:e4:10:99:17:75:94:75:
         d7:bd:8d:b8:07:46:d9:77:32:fb:e2:6f:6b:83:7c:3c:2e:56:
         7c:6a:2d:78:cb:4c:6f:88:2b:ac:3f:b2:87:5b:d6:2d:af:75:
         cd:c0:93:27:90:f9:12:cc:8b:da:d1:27:02:f0:d2:05:fc:ce:
         ee:64:47:14:05:85:26:19:f8:aa:fa:32:2c:a2:61:08:53:dc:
         fd:88:5f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:01 2024 by rpki-client on console-fra.rpki-client.org