Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47418f14-bb76-38f8-8bf6-ab7f63b677e4.roa
File:                     47418f14-bb76-38f8-8bf6-ab7f63b677e4.roa (raw, json)
Hash identifier:          h4i4fykYNTpLbk7fZKA9umRg6sSO3cS6Hwz9kXmHVlM=
Subject key identifier:   D4:3F:51:F5:50:76:99:95:CD:DF:F0:99:14:A3:50:BD:CC:F8:9A:20
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DF3D5BD48748A046978C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47418f14-bb76-38f8-8bf6-ab7f63b677e4.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        66.227.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:f3:d5:bd:48:74:8a:04:69:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=cec02cfa-3761-45d5-8751-43b80807bb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:97:ad:47:a7:5d:d2:25:36:d2:0d:a0:84:
                    46:f7:dd:c5:c9:b4:2f:12:98:84:b0:65:63:b1:b5:
                    cb:7a:9c:b2:e2:93:55:0c:7e:b3:f9:10:7b:85:10:
                    92:db:1c:95:19:54:99:b5:66:81:89:dc:d7:ba:4e:
                    b7:a7:1d:f4:f4:52:01:d6:cd:80:26:18:81:fb:99:
                    ff:5b:d3:08:24:a0:39:2b:a4:23:fb:88:d0:d7:e3:
                    25:e1:80:fc:1a:6e:57:13:62:0b:2f:46:de:2b:aa:
                    77:8c:6c:80:b7:6f:21:a3:c9:d1:da:ef:3f:e7:3c:
                    35:2a:82:84:f7:3e:a3:cf:74:45:31:53:8c:5e:e8:
                    b1:ac:1c:76:d9:6a:f7:e1:75:de:4e:70:d1:55:0f:
                    71:c9:d6:fa:06:cf:1e:f9:65:04:f0:84:69:8e:26:
                    3f:c2:f2:a9:c8:49:80:09:95:f9:32:fa:b7:24:13:
                    2c:d3:fa:6b:18:02:37:fd:b9:f3:d8:10:42:05:81:
                    bf:d1:86:cd:a7:3c:b3:7c:3a:89:7d:cc:23:e3:5e:
                    9a:d8:de:7c:6e:2b:d5:ad:46:ab:3e:e7:48:4e:fa:
                    50:2c:cb:e7:e0:65:cb:71:84:e0:f2:af:e4:5c:de:
                    92:41:6a:fd:d4:9b:7d:22:4f:ca:5f:af:51:b6:45:
                    2b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3F:51:F5:50:76:99:95:CD:DF:F0:99:14:A3:50:BD:CC:F8:9A:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47418f14-bb76-38f8-8bf6-ab7f63b677e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.227.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:99:83:b7:d9:49:75:65:77:7d:e7:25:39:be:9e:85:c8:6d:
         6c:5e:10:de:da:d5:7d:72:ca:35:f3:b4:66:07:b6:92:82:d0:
         a2:9f:1f:89:be:e8:d5:80:5e:6d:b3:a2:15:e6:a9:43:2f:02:
         15:88:d8:7d:fa:a1:ea:49:70:a8:f8:f0:a5:df:58:aa:b9:0a:
         3a:f4:6d:98:02:b3:24:14:ce:40:47:ae:cd:47:a5:c5:8c:23:
         a4:da:7e:ef:3f:35:2b:00:6b:90:fe:59:83:ad:3f:3d:02:47:
         f6:be:04:82:81:5c:90:1e:bd:47:dd:54:a4:28:62:f4:6b:15:
         fa:e1:bb:6c:ff:3e:78:ca:d9:08:bb:bf:0e:9d:c0:49:13:51:
         d6:dc:75:51:ff:08:8e:28:0c:b0:95:cd:38:6b:9b:b8:51:bd:
         e3:57:45:f0:39:6b:c7:30:76:e2:7e:ad:12:6b:f6:95:49:35:
         07:13:da:eb:7f:ea:70:95:cc:1b:38:4f:a5:01:73:39:a4:e3:
         b7:66:36:a5:9b:a3:d4:0b:10:7f:1f:4a:80:77:37:06:69:ae:
         09:83:6b:59:40:67:d5:bb:fb:ae:a8:dd:0e:23:8d:ef:31:1d:
         3f:3b:c4:86:aa:1c:c8:a4:9c:0e:5e:b9:15:5d:5e:a5:02:34:
         f6:cf:9b:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijfPVvUh0igRpeMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
Y2VjMDJjZmEtMzc2MS00NWQ1LTg3NTEtNDNiODA4MDdiYjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17KXrUenXdIlNtINoIRG993FybQvEpiEsGVj
sbXLepyy4pNVDH6z+RB7hRCS2xyVGVSZtWaBidzXuk63px309FIB1s2AJhiB+5n/
W9MIJKA5K6Qj+4jQ1+Ml4YD8Gm5XE2ILL0beK6p3jGyAt28ho8nR2u8/5zw1KoKE
9z6jz3RFMVOMXuixrBx22Wr34XXeTnDRVQ9xydb6Bs8e+WUE8IRpjiY/wvKpyEmA
CZX5Mvq3JBMs0/prGAI3/bnz2BBCBYG/0YbNpzyzfDqJfcwj416a2N58bivVrUar
PudITvpQLMvn4GXLcYTg8q/kXN6SQWr91Jt9Ik/KX69RtkUr5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQ/UfVQdpmVzd/wmRSjUL3M+JogMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDc0MThmMTQtYmI3Ni0z
OGY4LThiZjYtYWI3ZjYzYjY3N2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQuPwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANOZg7fZSXVld33nJTm+noXIbWxeEN7a1X1yyjXztGYHtpKC0KKfH4m+
6NWAXm2zohXmqUMvAhWI2H36oepJcKj48KXfWKq5Cjr0bZgCsyQUzkBHrs1HpcWM
I6Tafu8/NSsAa5D+WYOtPz0CR/a+BIKBXJAevUfdVKQoYvRrFfrhu2z/PnjK2Qi7
vw6dwEkTUdbcdVH/CI4oDLCVzThrm7hRveNXRfA5a8cwduJ+rRJr9pVJNQcT2ut/
6nCVzBs4T6UBczmk47dmNqWbo9QLEH8fSoB3NwZprgmDa1lAZ9W7+66o3Q4jje8x
HT87xIaqHMiknA5euRVdXqUCNPbPmwg=
-----END CERTIFICATE-----
Generated at Sun May 12 01:38:05 2024 by rpki-client on console-fra.rpki-client.org