Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/838913c4-08a4-32e6-a801-472157de19ac.roa
File:                     838913c4-08a4-32e6-a801-472157de19ac.roa (raw, json)
Hash identifier:          I3V6Z/Mf9UK1ndQXr+i6YlBnWroOQlCDlDSV4p9rgsI=
Subject key identifier:   C2:B5:15:F1:F3:DB:5E:0F:C1:E5:FD:E1:50:20:EC:56:A9:7C:B1:EB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DF1690A9D47518853A880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/838913c4-08a4-32e6-a801-472157de19ac.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        66.227.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:f1:69:0a:9d:47:51:88:53:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=b4a18562-6fca-48f3-bd36-a248b9813802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:20:95:93:fa:7a:32:66:41:91:51:73:51:28:
                    eb:fb:98:39:40:a9:07:f0:87:83:c4:80:79:0e:30:
                    40:23:0c:29:3b:ef:7c:2e:29:02:0d:dd:f0:8a:52:
                    86:43:0e:13:ee:4d:26:10:c4:fc:71:96:8d:d1:b1:
                    59:56:04:be:95:c0:28:a2:50:13:a7:0a:a3:40:c4:
                    8d:6c:31:c4:2f:07:e5:3d:bf:27:ac:a7:8e:99:16:
                    f5:a8:77:46:2e:46:e4:e1:98:ab:c6:11:7f:8d:10:
                    e6:fc:c5:59:05:77:65:ef:8a:82:3a:53:55:7e:41:
                    60:49:de:9e:01:9a:70:bf:a4:7b:23:a4:3f:db:ab:
                    0c:c1:85:0a:39:86:5b:f8:38:ec:f3:22:a6:57:af:
                    d8:73:f9:f2:10:0e:5c:43:0c:c3:c0:ec:aa:25:8f:
                    78:19:39:8e:15:38:76:af:e4:03:78:92:9b:84:52:
                    96:a0:63:5e:43:be:b4:5b:3b:26:77:ed:e7:f6:6a:
                    cf:13:d6:b6:97:f3:00:19:5c:7e:0f:08:84:22:25:
                    90:fd:fc:e0:8e:c2:c4:b1:9b:07:bb:91:0c:dd:57:
                    66:e3:1b:09:3d:de:9d:97:5a:dc:25:8e:1f:8c:0b:
                    02:bd:ee:0b:b7:a3:06:2a:94:2b:c6:fb:8b:46:85:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B5:15:F1:F3:DB:5E:0F:C1:E5:FD:E1:50:20:EC:56:A9:7C:B1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/838913c4-08a4-32e6-a801-472157de19ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.227.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:10:9a:e8:85:62:b0:5d:b7:0a:a8:e4:87:c1:0b:43:0e:1d:
         63:60:8f:49:69:1a:ca:d2:ec:9f:12:81:2d:4a:3e:a1:e4:aa:
         65:63:67:e6:74:a6:6b:a4:f6:99:99:21:18:7f:e2:46:d9:4d:
         4c:8b:4f:ed:d5:48:7d:e5:0a:28:7c:36:d8:ad:44:62:49:51:
         8b:19:e4:ac:dd:76:42:a3:06:85:69:ca:a2:2c:c2:5c:9e:4e:
         be:c3:f9:50:dd:c2:45:72:6a:65:f0:31:ba:e1:29:d9:89:05:
         bd:9d:85:3b:c3:6a:ab:98:4b:ee:53:f1:97:51:2a:5e:bf:dd:
         db:2b:6e:b1:f6:34:0c:7d:dd:12:d2:30:d3:fc:20:23:9f:27:
         71:b5:ff:1d:da:50:44:d1:aa:c5:63:3f:30:c1:33:e0:65:2d:
         fc:9f:b4:8c:97:7e:75:0b:3b:8a:c3:38:c6:86:85:6e:4b:c8:
         04:c7:0b:86:0d:b8:21:63:a0:d6:c2:fe:c1:75:5f:74:4f:1f:
         b5:8f:52:9a:45:a5:4b:03:f6:60:eb:22:07:b0:27:ed:00:dd:
         37:19:24:ef:b4:56:04:db:68:c2:0e:0f:cd:7f:2c:6d:38:d7:
         96:06:45:1c:e3:17:57:58:63:19:69:4b:3e:3e:a9:f2:77:2a:
         d2:ed:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:42:50 2024 by rpki-client on console-fra.rpki-client.org