Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1771729e-9b2c-327c-9775-bc9d74d9b8a4.roa
File:                     1771729e-9b2c-327c-9775-bc9d74d9b8a4.roa (raw, json)
Hash identifier:          p4uqDtiGDVTomRRWdDapkevd0DG02p3om3Lzx1O9l8c=
Subject key identifier:   4A:42:2D:A7:A0:3E:D1:B2:83:96:49:BF:11:04:EB:86:D3:FD:71:FF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A1645C66FA9345672D4EA0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1771729e-9b2c-327c-9775-bc9d74d9b8a4.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        66.191.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:64:5c:66:fa:93:45:67:2d:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=e482b904-d1fe-4337-aa41-73d3c2e10c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7f:a3:18:56:d3:fb:bb:fc:7b:81:69:25:dc:
                    6c:56:03:cf:00:e2:83:31:c9:21:8b:49:01:9d:6a:
                    d3:80:e4:b0:86:bb:a0:27:6a:7a:78:3d:92:fb:71:
                    25:00:05:58:0d:23:b8:b6:41:2c:10:2f:c0:ae:91:
                    70:8f:ee:33:6c:59:dd:30:2a:88:80:03:b7:7e:3b:
                    61:a4:84:d0:d0:23:e0:4f:59:5b:f2:73:7f:ec:16:
                    30:a8:4c:ae:f5:cc:92:28:fe:2c:4c:66:2c:86:ae:
                    63:a6:b1:1d:86:de:6d:ac:1f:53:a6:3e:14:7a:9a:
                    b0:13:e1:65:23:3d:6f:0b:58:b2:01:21:21:a1:8e:
                    52:a6:67:91:88:9d:ff:f4:30:3f:ee:f2:85:e0:95:
                    b2:a5:ee:99:b4:16:46:2c:63:d9:b2:d0:f8:cf:eb:
                    a2:9f:4d:ad:26:3f:31:e8:96:31:12:11:ba:2c:a3:
                    40:6f:d2:00:e6:ab:92:93:c0:bd:5a:54:b5:2a:4f:
                    4b:ad:3d:a5:7c:55:ad:5b:0d:54:01:f9:8a:62:2a:
                    94:28:a9:17:db:7f:63:3c:9a:7e:d6:ca:5c:da:57:
                    1a:fe:a7:e7:b3:ff:34:a9:34:39:ad:d4:d2:a0:e7:
                    92:8b:e9:54:53:a8:b3:f5:27:14:58:9d:af:37:80:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:42:2D:A7:A0:3E:D1:B2:83:96:49:BF:11:04:EB:86:D3:FD:71:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1771729e-9b2c-327c-9775-bc9d74d9b8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:29:57:72:15:39:e3:25:cf:8f:24:bf:bb:51:a5:ac:50:e6:
         1a:c7:c6:51:3e:96:87:e6:97:b1:49:33:31:29:30:d2:ba:27:
         71:a7:52:f2:b8:ec:35:ac:c7:dc:93:67:54:6d:b6:97:52:34:
         38:99:7a:eb:a7:55:cf:66:f0:54:c2:64:a7:2f:c3:bb:bd:a0:
         7c:18:b2:40:66:25:01:55:bd:b3:0a:07:f2:d7:b7:f7:56:ed:
         98:0b:3a:14:74:bc:15:f8:99:21:6f:11:fd:27:6f:a1:b2:a4:
         a6:4c:dd:c3:ea:82:49:29:ea:b4:37:97:b9:76:4f:7d:04:89:
         fe:4e:9d:29:ce:54:49:ed:d5:ca:00:f3:79:70:7d:74:dc:1e:
         cd:1d:86:a4:84:ad:35:c2:75:78:04:3d:8e:65:31:33:96:44:
         d0:c7:d4:2d:7f:67:e9:56:40:6a:11:ea:1b:cf:52:f2:a5:1c:
         03:0d:a6:5b:3d:4d:73:45:4f:44:9f:87:64:b7:7c:4b:ec:ea:
         4b:c5:42:a9:5c:ee:27:86:7f:b1:a7:38:69:f6:5b:59:83:af:
         a7:e7:5d:5e:ba:ce:93:55:ae:a8:cf:15:41:b1:8f:84:9a:d3:
         cb:dd:45:c9:5f:c4:fe:26:51:83:4e:68:d5:44:4e:95:8d:5e:
         f5:65:30:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:03 2024 by rpki-client on console-fra.rpki-client.org