Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/662c1577-1471-31ef-a9b0-f880420c20a3.roa
File:                     662c1577-1471-31ef-a9b0-f880420c20a3.roa (raw, json)
Hash identifier:          9G7EXgJROZDMvYF15lNi3n9jgzuDVPB1mm4gA187g+k=
Subject key identifier:   D7:B6:81:85:4A:0E:9D:D7:DA:E5:53:F0:E7:FB:AA:E3:0C:67:1A:EE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285839379FCD17EA60DCAB3FFC4680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/662c1577-1471-31ef-a9b0-f880420c20a3.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        68.189.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:9f:cd:17:ea:60:dc:ab:3f:fc:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=c42410f2-ef4f-4d2b-b4e5-629653356691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:da:2a:3a:69:e8:e3:a1:7d:81:8f:f3:13:
                    ba:61:c7:9f:c6:19:e2:eb:9c:0f:80:42:5c:b8:85:
                    8c:2b:e6:1e:3b:5d:43:73:c4:99:63:c7:84:fe:dd:
                    2d:8e:cf:01:e8:48:48:c1:0d:fd:01:2b:ee:5e:a0:
                    da:e3:f3:db:5d:5b:45:30:4e:3e:80:16:65:8c:e9:
                    7b:f4:5f:ff:b6:f7:b2:76:7f:9f:fe:ec:f0:61:66:
                    d0:41:96:ed:b0:bf:d6:01:a3:00:2c:a7:e3:3b:35:
                    69:fd:a2:b9:f4:e0:3e:bf:41:d8:00:92:a0:73:ff:
                    99:60:d6:c1:b9:78:16:e3:03:76:62:99:8b:52:0b:
                    1a:09:e7:e2:5b:b5:34:e5:00:0b:4f:63:60:71:1f:
                    33:6c:3b:27:90:ec:6f:02:c3:11:e4:61:22:5b:66:
                    c4:f6:6a:73:a9:ec:d1:57:80:b9:df:51:dd:d3:9d:
                    ce:59:4a:a1:aa:5d:10:96:56:d7:d4:42:42:1e:c0:
                    a5:ad:79:d0:64:90:6a:a6:ca:59:5e:9c:ae:9c:2a:
                    3b:a0:44:e5:77:0a:8a:a2:67:b3:32:c3:d5:9c:00:
                    84:43:4e:2e:46:2b:c1:34:30:bb:92:9e:1b:fc:2a:
                    5d:5b:a1:cc:0d:25:28:fe:d7:06:e5:69:7f:e0:31:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B6:81:85:4A:0E:9D:D7:DA:E5:53:F0:E7:FB:AA:E3:0C:67:1A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/662c1577-1471-31ef-a9b0-f880420c20a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.189.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:85:fb:ee:5e:05:eb:29:47:dd:74:32:63:40:36:19:99:e9:
         51:e0:34:43:fb:24:35:63:19:bb:c6:a9:64:21:bc:b7:2d:13:
         28:e1:7d:14:ea:22:c7:a2:6f:00:27:c0:04:8b:8a:26:9b:1a:
         80:82:3d:38:c7:8d:5c:d4:e4:d0:0f:e0:0d:c0:84:cb:02:96:
         69:54:40:57:cd:3d:b7:18:a7:56:52:53:ba:a1:be:a7:36:03:
         4b:57:8c:c3:07:30:6c:15:e6:82:98:93:69:2a:8f:51:7e:4a:
         20:3a:7b:cd:bd:a0:f7:4e:29:09:ae:e0:13:25:94:9c:6b:ac:
         c3:78:62:38:b6:f9:44:74:f4:58:c0:5f:94:38:b1:69:f5:cf:
         c1:12:5f:4f:05:d3:86:2d:ef:4e:43:6c:73:31:ea:89:80:56:
         57:e3:ea:7b:68:11:cc:d5:05:d6:b2:54:7a:f2:00:84:8d:62:
         53:7f:ce:c2:59:3d:64:71:ab:23:20:1f:e7:16:13:b4:10:54:
         bf:e6:3e:59:d2:0e:32:bd:49:93:d4:ee:e0:ff:0f:64:aa:f6:
         0c:ec:2a:b7:7c:5c:8e:20:b0:bd:df:46:bd:1b:ac:f0:ec:03:
         98:62:d9:c6:c0:5d:8a:5f:0c:9b:90:f9:c9:e7:a1:a7:97:9e:
         0c:4b:ec:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:05:04 2024 by rpki-client on console-fra.rpki-client.org