Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/840e5a1b-40b3-370d-9336-c3122d4c0fa8.roa
File:                     840e5a1b-40b3-370d-9336-c3122d4c0fa8.roa (raw, json)
Hash identifier:          nQ84G1i+t6EHLxrRHFx3B2DU6Zd2uOKBC3d4X3tycQ4=
Subject key identifier:   4F:F6:6E:56:5D:9F:8F:3D:9C:3B:7D:2D:7B:9C:FA:53:03:74:A5:72
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583934D2BAB50957C8DED7014B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/840e5a1b-40b3-370d-9336-c3122d4c0fa8.roa
Signing time:             Wed 10 Mar 2021 05:00:00 +0000
ROA not before:           Wed 10 Mar 2021 05:00:00 +0000
ROA not after:            Wed 03 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        66.189.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:34:d2:ba:b5:09:57:c8:de:d7:01:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 10 05:00:00 2021 GMT
            Not After : Mar  3 05:00:00 2027 GMT
        Subject: CN=1c159628-e5fa-42a2-954b-eba42dcddfe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:72:d1:66:ef:b3:5b:b9:a7:1e:d7:11:ad:
                    fa:05:9a:76:5a:9e:f9:15:85:c0:a1:7a:93:80:97:
                    cc:94:e0:7a:05:98:33:3c:6f:d6:bb:cb:23:c9:29:
                    cd:79:3c:67:17:64:bb:09:dc:6e:10:63:18:cf:c4:
                    f4:b7:c4:92:04:52:a2:11:1d:58:8c:45:fb:6b:84:
                    6e:3e:66:32:dc:e3:81:6c:dd:9c:67:cf:1e:ca:56:
                    99:c7:4b:42:d3:e1:cc:ec:11:3b:56:da:c0:d8:6d:
                    fb:65:b0:47:c6:4c:d9:92:c0:66:2f:aa:dc:d4:b0:
                    29:90:53:41:1e:b0:f6:e7:a2:7f:c9:fe:08:00:9e:
                    28:de:11:2a:49:88:a6:2f:d4:ce:9a:b4:0c:e6:91:
                    a4:63:43:77:40:ab:f4:2c:33:cd:b3:18:9b:7e:1b:
                    93:0d:53:86:86:b1:37:f4:35:51:b8:c8:d8:04:96:
                    f0:ff:66:ad:d7:54:db:81:10:02:9d:74:4c:cb:67:
                    19:61:a7:03:18:6b:11:43:d0:60:9c:76:c3:1e:06:
                    21:3e:ab:0e:cb:f3:54:79:4e:52:7c:c3:cf:a3:e5:
                    7a:7b:82:fc:b6:cb:92:65:f8:b6:8f:87:99:06:49:
                    fc:e4:a0:88:53:96:92:73:17:34:77:31:15:d8:15:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F6:6E:56:5D:9F:8F:3D:9C:3B:7D:2D:7B:9C:FA:53:03:74:A5:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/840e5a1b-40b3-370d-9336-c3122d4c0fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.189.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:28:8c:82:00:4f:cc:56:02:5e:98:1a:55:4e:a1:df:d7:5e:
         07:fd:36:d5:c8:66:27:01:5b:6c:9e:f4:95:d8:94:e7:78:7f:
         71:2f:bb:96:f9:18:76:9b:a6:bf:c2:94:43:14:16:2f:0e:77:
         02:38:97:ec:31:d0:94:c2:a4:87:da:a8:3c:d9:bf:9a:7b:35:
         01:0a:7e:26:4e:1b:3e:95:96:6c:e5:ad:4e:d2:f9:3c:b5:c2:
         b7:ba:e5:93:14:1b:9f:35:06:56:7c:2a:7e:af:8b:f1:33:13:
         10:a6:bf:15:7d:aa:16:2c:7e:a5:3c:b0:43:12:1b:bc:b2:7f:
         29:f7:57:86:c8:c0:02:83:5c:95:83:ee:78:d0:b3:3c:2f:93:
         4c:7e:2a:26:f2:3e:74:cc:ca:18:d7:32:16:b1:82:78:8b:2f:
         a7:c4:4c:2a:f9:18:a1:ef:55:27:ba:c1:73:dc:d1:50:6b:44:
         df:e8:35:f0:b4:94:8c:4c:0e:de:4d:64:d7:21:45:cd:21:7b:
         ce:09:b2:4a:53:70:3b:ac:d4:a2:dd:e6:ac:51:99:d0:67:ba:
         e8:92:f5:21:08:d6:af:57:55:fc:0f:c1:8e:63:2e:86:3d:2f:
         b3:67:c3:58:10:ae:a5:04:31:fb:21:05:57:2e:ef:d8:1f:32:
         07:4a:a6:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDk00rq1CVfI3tcBSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDMxMDA1MDAwMFoXDTI3MDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
MWMxNTk2MjgtZTVmYS00MmEyLTk1NGItZWJhNDJkY2RkZmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+dy0Wbvs1u5px7XEa36BZp2Wp75FYXAoXqT
gJfMlOB6BZgzPG/Wu8sjySnNeTxnF2S7CdxuEGMYz8T0t8SSBFKiER1YjEX7a4Ru
PmYy3OOBbN2cZ88eylaZx0tC0+HM7BE7VtrA2G37ZbBHxkzZksBmL6rc1LApkFNB
HrD256J/yf4IAJ4o3hEqSYimL9TOmrQM5pGkY0N3QKv0LDPNsxibfhuTDVOGhrE3
9DVRuMjYBJbw/2at11TbgRACnXRMy2cZYacDGGsRQ9BgnHbDHgYhPqsOy/NUeU5S
fMPPo+V6e4L8tsuSZfi2j4eZBkn85KCIU5aScxc0dzEV2BXL1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/2blZdn489nDt9LXuc+lMDdKVyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODQwZTVhMWItNDBiMy0z
NzBkLTkzMzYtYzMxMjJkNGMwZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQr0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcojIIAT8xWAl6YGlVOod/XXgf9NtXIZicBW2ye9JXYlOd4f3Evu5b5
GHabpr/ClEMUFi8OdwI4l+wx0JTCpIfaqDzZv5p7NQEKfiZOGz6VlmzlrU7S+Ty1
wre65ZMUG581BlZ8Kn6vi/EzExCmvxV9qhYsfqU8sEMSG7yyfyn3V4bIwAKDXJWD
7njQszwvk0x+KibyPnTMyhjXMhaxgniLL6fETCr5GKHvVSe6wXPc0VBrRN/oNfC0
lIxMDt5NZNchRc0he84JskpTcDus1KLd5qxRmdBnuuiS9SEI1q9XVfwPwY5jLoY9
L7Nnw1gQrqUEMfshBVcu79gfMgdKpik=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:49 2024 by rpki-client on console-ams.rpki-client.org