Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/978a6b0e-06da-3f7e-bde5-af27af995fbc.roa
File:                     978a6b0e-06da-3f7e-bde5-af27af995fbc.roa (raw, json)
Hash identifier:          JrRoyXrraxAu4SwSaYxMnhAIVFljF3qVtPIF+YMwTyc=
Subject key identifier:   F0:F0:DD:FD:90:A3:58:BC:16:4B:28:DC:F1:64:03:B7:BC:63:C7:C1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858385DD377495D6095AFDD1F5140
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/978a6b0e-06da-3f7e-bde5-af27af995fbc.roa
Signing time:             Wed 23 Dec 2020 05:00:00 +0000
ROA not before:           Wed 23 Dec 2020 05:00:00 +0000
ROA not after:            Wed 16 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        66.214.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:5d:d3:77:49:5d:60:95:af:dd:1f:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 23 05:00:00 2020 GMT
            Not After : Dec 16 05:00:00 2026 GMT
        Subject: CN=1b1931a1-4bd3-46c6-9654-2de9a5d6fe5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:94:b3:01:b2:85:80:3f:6c:5a:18:d4:b2:e4:
                    59:93:fc:e9:d3:5e:3f:c8:b0:94:83:0e:b2:30:11:
                    ec:e0:9a:4d:00:a0:4e:cc:3c:ea:35:8f:d9:5c:5b:
                    41:33:4c:f1:a1:b1:10:4e:6e:db:3e:4a:d6:fe:b4:
                    2d:81:60:9e:0b:49:6b:a9:34:9c:dd:ff:63:58:9f:
                    6f:ee:27:3d:39:6f:a1:ee:b9:03:27:ec:f1:63:77:
                    76:a3:b7:07:3b:fb:58:83:86:4a:5b:aa:70:e9:37:
                    fc:72:0d:48:49:9b:7f:3a:4e:1a:29:86:4a:cd:bf:
                    a5:d1:95:6d:58:37:21:79:5c:e1:40:5b:42:cc:73:
                    db:b7:e6:c6:65:14:df:ac:e6:e9:52:3e:dd:b0:68:
                    ce:e5:bb:12:22:c1:36:d9:07:0b:c5:29:9c:5d:c3:
                    8f:9b:0d:bd:44:01:d2:67:04:f7:df:0a:f0:dd:ea:
                    9d:a7:db:a0:8f:d0:c1:47:5c:1b:5b:71:51:e8:36:
                    5b:ed:47:8c:54:25:c7:53:ba:b5:40:25:53:c1:f1:
                    49:b8:5a:14:f8:c2:a1:18:36:94:c5:d9:b2:40:e7:
                    b5:40:d0:c1:c1:00:ae:09:f8:e4:04:55:35:7c:65:
                    6f:03:10:fd:b9:01:cf:05:13:b0:9e:5f:56:fd:ec:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F0:DD:FD:90:A3:58:BC:16:4B:28:DC:F1:64:03:B7:BC:63:C7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/978a6b0e-06da-3f7e-bde5-af27af995fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.214.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1c:44:a8:39:4a:f9:8c:01:00:62:d9:9d:48:0c:c1:be:de:
         1f:b8:59:36:b8:27:7b:c7:65:7a:e6:84:73:98:50:fd:2c:c2:
         88:95:df:ec:b5:90:e5:9a:22:61:3e:37:69:1a:49:0c:81:ea:
         74:65:d3:cd:11:f8:61:07:7a:5d:06:b5:d9:cd:3d:5f:46:47:
         8c:c5:33:43:54:61:fb:fc:f2:cf:ca:6e:cc:53:ec:30:fd:5a:
         e2:8c:90:b1:a1:ce:e7:a0:c6:df:95:a8:23:91:3c:35:a9:a0:
         e0:d7:60:90:27:17:e2:4b:f0:c3:04:a5:05:f0:07:f2:d3:97:
         8b:85:41:1b:40:e6:a2:47:80:1a:a6:9c:ff:95:66:a4:b5:34:
         f4:47:d8:7c:e7:03:13:b7:24:2f:9a:eb:b6:43:6e:37:84:fa:
         c6:90:2c:35:56:25:08:3f:7c:12:36:6d:66:ad:a7:3a:21:42:
         b5:96:41:5e:00:97:f4:06:3c:7a:80:0e:61:96:65:49:1d:87:
         50:7c:b9:db:bb:db:93:41:7a:82:96:bb:b5:4a:34:ff:55:24:
         92:e7:b0:1a:36:0b:6c:eb:1e:f9:5f:6f:ac:f1:24:5d:0a:03:
         91:d6:58:60:21:ab:28:71:a7:bb:8d:e1:57:bc:4c:05:bd:95:
         75:37:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:04:02 2024 by rpki-client on console-fra.rpki-client.org