Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7723fb13-47fa-3801-908a-4d93758b73a1.roa
File:                     7723fb13-47fa-3801-908a-4d93758b73a1.roa (raw, json)
Hash identifier:          jxCVxyb/YHgxLMfK7kpZG5YGW1GOB2Ec1+H51GXAzfU=
Subject key identifier:   87:EF:34:FA:EE:10:8B:46:40:98:A5:8E:D1:22:B6:6B:3B:AE:89:35
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583934D29AE95DD1F4EC785B2C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7723fb13-47fa-3801-908a-4d93758b73a1.roa
Signing time:             Wed 10 Mar 2021 05:00:00 +0000
ROA not before:           Wed 10 Mar 2021 05:00:00 +0000
ROA not after:            Wed 03 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        66.188.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:34:d2:9a:e9:5d:d1:f4:ec:78:5b:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 10 05:00:00 2021 GMT
            Not After : Mar  3 05:00:00 2027 GMT
        Subject: CN=043fc535-bd4c-449a-b15a-e6c31761a3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:4e:1b:a1:02:9e:89:e6:5e:1e:f9:21:df:
                    cd:67:4a:08:19:70:41:b2:e4:36:a7:ba:33:66:4c:
                    10:53:d1:2d:5d:95:bc:9a:97:c4:6b:82:ce:eb:7f:
                    e7:9a:2e:42:d6:ae:cd:47:71:e1:4c:7f:fd:97:4f:
                    d4:c7:a4:0c:14:db:29:6e:6b:b8:29:c9:a5:90:1d:
                    5f:86:2d:e3:24:a0:0c:c4:03:26:d6:18:28:47:ae:
                    b4:7f:e0:0d:f7:87:fb:37:04:93:df:05:f4:c5:2a:
                    8c:fd:9c:2b:7d:15:ab:b9:c1:64:2b:d5:cf:1a:81:
                    5e:d4:af:6a:ed:e0:0e:ff:52:97:32:4f:b3:1d:bd:
                    29:f0:8c:c9:ea:f7:af:ec:ef:dc:b5:8f:6c:8a:db:
                    59:9b:92:48:ad:5b:c3:88:fd:94:77:03:21:94:c9:
                    00:86:13:70:b2:4f:52:cc:64:ba:93:67:6c:08:55:
                    45:a8:c4:16:8f:72:d8:83:8c:67:e1:59:cb:9e:2f:
                    55:c4:7a:fb:99:86:3b:7f:f3:89:cc:38:25:4f:01:
                    96:53:78:0e:2d:9f:98:7f:48:74:b8:47:72:03:07:
                    75:02:22:a2:53:bf:ce:31:43:94:6b:9d:d9:37:11:
                    75:65:1d:bc:76:9c:9c:91:9f:15:6d:36:aa:35:74:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EF:34:FA:EE:10:8B:46:40:98:A5:8E:D1:22:B6:6B:3B:AE:89:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7723fb13-47fa-3801-908a-4d93758b73a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.188.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0b:2f:40:6d:42:67:40:bf:62:9d:d7:9d:64:63:89:e0:82:
         e0:76:ae:f8:a7:a7:ee:7b:28:64:e4:5f:8c:e5:bb:cd:c0:8c:
         5c:e7:12:d0:12:c3:65:08:17:18:2e:f3:0b:09:ca:bb:87:e9:
         17:38:d0:6f:95:b6:8b:5c:01:e3:e9:59:be:00:9b:3c:c1:a9:
         59:c9:36:23:27:66:8b:4c:bd:51:e6:36:bc:fe:b7:4c:c0:1e:
         b1:18:de:da:b6:ac:64:ba:6f:cc:ff:4a:33:ae:09:ef:ec:98:
         96:c3:c0:fd:7f:2b:3e:1e:91:be:bf:0c:f7:a3:39:c7:ce:88:
         45:aa:a2:08:6b:16:d1:8a:37:fc:79:12:1b:11:06:c2:96:00:
         d7:c5:76:9c:8d:57:80:6c:ab:09:be:76:bc:58:3b:0a:9f:33:
         a5:cd:f9:97:27:2d:dd:cc:c3:5a:82:e4:57:27:9b:90:46:73:
         ef:ee:13:23:0f:27:a0:39:67:01:c1:97:e3:c5:3f:c6:8f:34:
         44:0d:fa:07:7b:0f:0e:ca:44:c0:de:91:34:42:f7:9b:60:3a:
         e9:0d:b6:df:ae:c8:64:16:7c:f3:ea:bb:fe:3d:24:b2:69:4a:
         8a:ad:72:54:4b:c1:74:7a:c0:c2:09:4b:db:32:b0:99:eb:97:
         8c:0a:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:12 2024 by rpki-client on console-fra.rpki-client.org