Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7373a5f6-8522-3aae-8281-be693866f404.roa
File:                     7373a5f6-8522-3aae-8281-be693866f404.roa (raw, json)
Hash identifier:          2noR0vTQ73+B5XFri2uSySMiSYOlghfuzsOOMkCXD28=
Subject key identifier:   4B:9F:5E:01:E3:5C:51:AC:F6:72:93:67:E1:84:E0:7E:69:95:D6:17
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A16C0D5671ADCCD9E38100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7373a5f6-8522-3aae-8281-be693866f404.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        66.191.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:6c:0d:56:71:ad:cc:d9:e3:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=a449be53-32d0-42b3-a765-f29825058e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:9a:12:2c:b4:a0:58:e4:16:4e:35:73:d7:
                    18:c4:78:dc:6e:df:d2:5b:2e:ef:03:f1:21:66:1a:
                    a5:75:97:09:a6:ba:ed:0a:1a:be:88:9a:74:cb:8c:
                    fb:32:2c:d3:5b:b7:1c:04:ff:10:c5:03:da:68:48:
                    c9:6d:68:ff:43:cb:a0:e5:38:f2:75:e4:ef:56:0a:
                    3a:f1:70:21:0e:93:10:3f:59:76:b4:22:6a:d0:47:
                    88:b2:ea:79:5c:6c:cd:fd:15:0f:fc:aa:f9:a7:bf:
                    02:c6:6d:da:07:5d:33:de:f0:38:52:56:b7:92:d0:
                    9f:0b:13:ba:b3:6c:21:80:3e:cb:05:34:63:88:97:
                    a5:b8:6a:83:f1:17:40:d0:30:76:5a:a7:6d:91:71:
                    96:5b:6e:e9:98:38:a9:51:3b:54:30:e5:07:aa:01:
                    c0:5e:26:99:f9:5f:1d:aa:5d:69:12:03:26:28:e9:
                    7e:21:c3:15:a9:6b:bc:a6:99:54:a6:04:3f:fd:8e:
                    61:75:2f:5b:35:06:28:62:3b:f1:84:f0:5e:cf:ad:
                    11:fa:c0:dc:0d:e8:2c:ad:bd:65:9f:97:ae:c2:cb:
                    5c:18:c7:73:bc:5a:19:ef:77:8c:bb:5f:4d:35:86:
                    31:03:d6:f8:d9:04:34:c6:c6:df:69:8d:26:12:b4:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9F:5E:01:E3:5C:51:AC:F6:72:93:67:E1:84:E0:7E:69:95:D6:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7373a5f6-8522-3aae-8281-be693866f404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:30:4a:f1:24:dd:8c:1f:f0:da:0c:bf:1b:34:09:03:29:d1:
         2c:90:ef:19:49:66:cd:53:dd:dd:aa:f1:b9:c0:57:8b:d9:0d:
         a6:30:05:ad:2d:c0:de:82:a5:7a:3a:95:68:6f:70:f2:5e:b6:
         55:70:5f:23:58:a8:40:0f:65:18:c0:3f:cf:91:72:59:3f:01:
         e5:84:90:15:a6:27:17:73:22:5a:06:d5:69:03:5d:a9:0e:19:
         6a:c2:50:0c:9c:e3:90:99:4d:81:02:98:89:9f:8a:82:db:ba:
         cf:92:5a:33:07:7d:4b:63:68:5c:2a:6f:72:72:9d:cf:2a:92:
         53:c1:e7:6d:84:69:0a:3e:b6:b4:84:f5:bc:df:33:30:8c:98:
         a5:89:52:32:c7:90:fa:ac:eb:a4:53:74:e6:8d:ce:87:60:3f:
         a2:3f:f8:cc:66:2f:d2:57:9a:9d:6f:74:92:7f:d7:72:45:98:
         b6:f2:63:9c:dd:b2:ed:64:6f:9f:02:8b:a5:cd:de:39:2f:b4:
         bc:43:30:cc:fd:e0:9d:24:78:50:65:4b:7a:63:52:a0:d6:f3:
         ad:69:65:9b:ff:75:cc:be:dc:fb:7e:dd:cf:46:e5:cd:ec:73:
         07:e9:e2:26:37:ae:40:80:f3:b3:c5:0d:88:7f:de:25:bf:6f:
         e9:f3:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:44 2024 by rpki-client on console-ams.rpki-client.org