Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/334ed952-ee74-3d8f-b4b0-0f2be5ee724c.roa
File:                     334ed952-ee74-3d8f-b4b0-0f2be5ee724c.roa (raw, json)
Hash identifier:          26RV9/9OPpxLaZdPP1I1WWLPiTQQu35qZygopaxO3Pc=
Subject key identifier:   8B:46:95:B0:CD:7D:FB:A8:89:69:FE:03:F9:86:AE:13:EF:5B:31:0F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858384D0CA888381C460FCC20F900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/334ed952-ee74-3d8f-b4b0-0f2be5ee724c.roa
Signing time:             Wed 16 Dec 2020 05:00:00 +0000
ROA not before:           Wed 16 Dec 2020 05:00:00 +0000
ROA not after:            Wed 09 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        47.7.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4d:0c:a8:88:38:1c:46:0f:cc:20:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 16 05:00:00 2020 GMT
            Not After : Dec  9 05:00:00 2026 GMT
        Subject: CN=ec8ea2a0-90cf-4423-a33e-9708e5b4317b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:90:5f:36:f0:15:bf:bc:75:be:7b:6a:e9:
                    78:bb:73:69:6e:11:bc:9f:b4:5b:02:af:c7:9c:e9:
                    da:65:99:f7:b9:c2:d5:92:f7:c2:d9:cc:c6:de:f4:
                    7c:bd:dc:a5:95:92:96:1b:84:58:fb:3d:eb:1a:f2:
                    cd:d9:6a:07:1d:39:74:8b:0a:66:97:f1:bd:9b:4a:
                    94:de:3b:77:0c:95:d1:23:49:15:92:36:ba:86:e4:
                    18:1a:7e:06:8a:b6:26:00:5d:d6:e7:54:a7:8b:39:
                    5e:bc:42:43:09:0e:7f:7f:44:a5:9f:8c:2f:4a:f4:
                    7f:23:70:b1:02:5a:7a:18:ee:8b:e2:21:2f:6e:7a:
                    11:4a:a4:58:4d:88:e5:2a:0d:ba:5c:75:6b:62:eb:
                    17:be:b5:88:77:6e:75:6c:5c:2e:f3:d9:9c:82:9b:
                    21:f6:7c:54:7b:f7:d7:e2:dd:8e:c4:26:44:8e:21:
                    0e:0b:a4:64:fc:b8:59:63:61:64:ef:ab:3e:d0:85:
                    fd:5c:e3:24:db:a6:32:49:6d:fe:a2:bd:bf:c3:91:
                    f2:d7:23:b7:fc:7b:a4:ed:94:79:79:46:36:50:4b:
                    87:f4:65:98:09:91:71:12:44:3f:0f:e7:45:52:d9:
                    d8:12:2c:87:c8:9e:a9:41:cf:7e:94:14:4b:fa:fb:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:46:95:B0:CD:7D:FB:A8:89:69:FE:03:F9:86:AE:13:EF:5B:31:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/334ed952-ee74-3d8f-b4b0-0f2be5ee724c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.7.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f2:50:16:41:c1:94:bc:9b:44:a1:ab:1c:3b:df:aa:10:b6:
         95:24:0e:da:63:4a:98:ec:79:60:7d:28:d5:63:1b:67:5f:ca:
         d1:90:f0:04:5d:37:f1:54:12:e3:7a:b9:6d:7d:54:8e:32:37:
         ae:b3:95:15:d3:48:da:2b:6e:f1:47:c5:4d:90:c9:37:71:62:
         ce:36:0f:22:be:1a:59:34:92:70:15:af:fc:df:35:f1:2e:26:
         9b:9f:e4:db:96:d1:87:5c:e7:7e:67:1a:22:8c:47:ed:d2:eb:
         64:65:ca:6a:18:56:f4:e3:0b:6f:0b:ea:d4:fd:98:9a:52:f1:
         e7:3d:81:83:92:55:1f:0c:7b:4e:02:e1:70:46:98:7f:d5:ca:
         a0:40:f7:34:37:b2:f0:d0:6f:7b:9f:dd:fc:26:7d:76:74:e9:
         61:98:fd:c9:71:ca:8b:39:f5:89:6a:df:00:4b:6d:87:1f:0d:
         31:dc:75:ac:3d:c5:b2:b4:54:a7:4c:05:4e:49:a1:67:36:c2:
         e9:a5:5b:b8:03:9a:59:7e:73:e3:7b:6a:d2:b2:c4:d5:f2:e4:
         76:81:0d:19:a8:4a:cb:09:3e:9c:75:3e:2f:f7:60:b2:23:f1:
         19:a4:b2:74:7a:26:9c:9c:6b:f0:8f:ee:d6:4a:e0:56:fc:21:
         11:82:35:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDhNDKiIOBxGD8wg+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIwMTIxNjA1MDAwMFoXDTI2MTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZWM4ZWEyYTAtOTBjZi00NDIzLWEzM2UtOTcwOGU1YjQzMTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzumQXzbwFb+8db57aul4u3NpbhG8n7RbAq/H
nOnaZZn3ucLVkvfC2czG3vR8vdyllZKWG4RY+z3rGvLN2WoHHTl0iwpml/G9m0qU
3jt3DJXRI0kVkja6huQYGn4GirYmAF3W51SnizlevEJDCQ5/f0Sln4wvSvR/I3Cx
Alp6GO6L4iEvbnoRSqRYTYjlKg26XHVrYusXvrWId251bFwu89mcgpsh9nxUe/fX
4t2OxCZEjiEOC6Rk/LhZY2Fk76s+0IX9XOMk26YySW3+or2/w5Hy1yO3/Huk7ZR5
eUY2UEuH9GWYCZFxEkQ/D+dFUtnYEiyHyJ6pQc9+lBRL+vvbvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItGlbDNffuoiWn+A/mGrhPvWzEPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzM0ZWQ5NTItZWU3NC0z
ZDhmLWI0YjAtMGYyYmU1ZWU3MjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLweAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACryUBZBwZS8m0Shqxw736oQtpUkDtpjSpjseWB9KNVjG2dfytGQ8ARd
N/FUEuN6uW19VI4yN66zlRXTSNorbvFHxU2QyTdxYs42DyK+Glk0knAVr/zfNfEu
Jpuf5NuW0Ydc535nGiKMR+3S62RlymoYVvTjC28L6tT9mJpS8ec9gYOSVR8Me04C
4XBGmH/VyqBA9zQ3svDQb3uf3fwmfXZ06WGY/clxyos59Ylq3wBLbYcfDTHcdaw9
xbK0VKdMBU5JoWc2wumlW7gDmll+c+N7atKyxNXy5HaBDRmoSssJPpx1Pi/3YLIj
8RmksnR6Jpyca/CP7tZK4Fb8IRGCNSU=
-----END CERTIFICATE-----
Generated at Sun May 12 17:54:54 2024 by rpki-client on console-ams.rpki-client.org