Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a35afa90-14ad-3d46-9ac7-c07d17db68de.roa
File:                     a35afa90-14ad-3d46-9ac7-c07d17db68de.roa (raw, json)
Hash identifier:          drtURbTaVlOcRK5bBrCwTy3l5kpoTSTR8mxIlEPeWXE=
Subject key identifier:   6B:76:A7:11:BD:7B:A0:70:F0:A5:64:11:49:2A:15:46:AC:0F:AC:01
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583C68F16050B27166B3977B5980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a35afa90-14ad-3d46-9ac7-c07d17db68de.roa
Signing time:             Tue 28 Dec 2021 05:00:00 +0000
ROA not before:           Tue 28 Dec 2021 05:00:00 +0000
ROA not after:            Tue 21 Dec 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        192.61.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:68:f1:60:50:b2:71:66:b3:97:7b:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 28 05:00:00 2021 GMT
            Not After : Dec 21 05:00:00 2027 GMT
        Subject: CN=40c8cff4-32b1-4b80-bd13-b8ad50419399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:0e:d9:eb:81:7a:56:f1:6b:ea:06:c8:ed:
                    03:38:b7:51:f9:b4:08:4e:b8:4a:ca:b0:cc:ae:25:
                    ce:11:2d:33:a0:aa:72:cc:66:d3:2b:1d:1c:12:3a:
                    ff:43:2e:ef:83:08:f3:15:5d:1c:7e:3b:e2:e9:3f:
                    71:d1:cf:26:76:5c:2d:34:ee:ff:65:d9:f3:d4:bd:
                    5f:72:af:3f:93:0a:e7:da:4a:5c:b3:60:90:be:85:
                    44:a0:77:d7:0a:3c:17:fc:bb:60:e4:ce:ee:41:f1:
                    fb:2b:99:84:a5:20:0d:ca:6c:6b:cf:54:14:ca:39:
                    de:d0:2d:96:27:0a:33:38:7e:09:56:3f:5d:5b:bb:
                    c7:68:c8:7b:ae:3d:ae:6f:bd:d8:2c:9e:b9:dc:ce:
                    bb:80:36:3a:2d:87:5f:2a:36:4a:ac:5b:83:ca:9a:
                    d2:94:72:dc:43:d7:bd:97:94:81:19:9a:e2:7b:0e:
                    bc:aa:68:b2:17:af:b3:44:b5:ee:5e:41:c4:22:d5:
                    af:4f:48:7b:de:c6:67:5d:83:6c:7b:bc:a5:f2:6d:
                    62:1d:47:64:c8:75:b5:89:fb:da:cd:ef:bf:ee:69:
                    3c:fd:40:38:eb:ce:44:84:44:7c:4d:97:ce:c7:1d:
                    6f:07:77:5d:12:13:24:61:3c:e0:4c:29:8d:a8:53:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:76:A7:11:BD:7B:A0:70:F0:A5:64:11:49:2A:15:46:AC:0F:AC:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a35afa90-14ad-3d46-9ac7-c07d17db68de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.61.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:46:f1:21:db:a2:80:f6:4f:3e:25:e0:b9:00:a4:5e:21:
         0a:84:aa:a8:5e:59:d2:24:10:dc:f8:c9:e8:e5:e3:96:70:69:
         3d:a6:a4:19:b2:18:74:15:67:a7:7a:34:26:1c:8c:24:d4:5a:
         b1:c1:0c:33:92:03:a7:ae:52:8a:c3:f6:2a:ef:db:08:5e:ae:
         da:77:5c:fe:12:ae:6c:2e:0e:78:b3:50:09:9f:63:82:64:c5:
         9e:33:09:3d:c6:fc:0d:9d:67:8a:06:b8:68:9b:3b:6a:64:bf:
         56:bd:0d:31:b8:e9:6a:1e:99:26:ab:c5:84:45:51:5c:e6:60:
         ef:74:1f:a2:08:39:08:e1:73:90:b8:f0:2d:7d:5e:c2:01:f4:
         e7:38:73:5c:91:df:f8:14:c1:50:54:8e:31:31:83:89:68:cd:
         6b:72:6d:d9:b2:b3:77:8b:c5:89:27:cc:e6:f4:80:57:12:44:
         af:66:1c:a0:30:c4:f1:1f:86:d6:2a:91:f1:6b:01:cc:7a:f2:
         75:59:5a:b4:cd:08:40:fc:b6:24:e7:aa:f3:ce:14:f9:7b:f9:
         5a:7f:62:5c:e3:a4:d6:69:41:0f:80:7a:36:c1:91:10:d4:58:
         fc:be:c4:88:84:a7:c2:f5:06:5c:7b:f8:10:45:e6:7a:30:6f:
         cc:23:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:16 2024 by rpki-client on console-fra.rpki-client.org