Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a78b0060-8dc3-3377-b8dc-ca8262b12e34.roa
File:                     a78b0060-8dc3-3377-b8dc-ca8262b12e34.roa (raw, json)
Hash identifier:          h4/PLAUHZefcb4nuT9OKypa9JTOxt/FNfGr84fZylUE=
Subject key identifier:   60:78:8D:0B:8F:82:67:74:8B:9D:80:E9:B2:A3:D7:DD:0A:42:F5:92
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DF22E596437A80B388380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a78b0060-8dc3-3377-b8dc-ca8262b12e34.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        66.227.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:f2:2e:59:64:37:a8:0b:38:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=aafc913b-8b11-4853-824c-352edce56f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8c:fc:5b:35:7c:90:a7:63:21:a0:72:3c:32:
                    ee:30:d7:09:4a:72:af:6d:5e:f4:33:6a:4e:e9:be:
                    64:0a:d4:8c:ee:c0:3e:21:75:1a:e9:1e:68:76:67:
                    0d:16:08:11:19:cb:cb:d5:7d:8c:bd:7e:f9:91:13:
                    86:96:d8:d2:13:dd:47:90:08:4e:ef:54:83:0c:8a:
                    34:e3:4f:ac:d3:e6:a1:22:3f:16:e5:f7:c1:31:63:
                    42:49:4f:20:d8:e6:5a:3b:44:9f:3f:de:31:0f:06:
                    bf:8a:f8:f3:64:a6:98:26:15:51:38:62:01:7b:10:
                    a4:75:93:c6:9e:52:cd:be:a8:e4:b8:40:c6:67:14:
                    e3:96:37:b5:72:88:6c:bd:be:ef:44:74:74:cd:df:
                    c5:65:a4:a0:aa:73:ea:82:49:0c:4d:9c:0c:8e:97:
                    22:72:00:a6:f0:b0:7a:bc:94:8d:63:5d:4d:69:a6:
                    83:e0:a1:66:ba:fa:0c:9c:38:91:a2:66:74:04:a7:
                    53:0e:f2:15:f1:7b:f6:cf:7e:2d:05:cd:2d:26:fc:
                    2e:49:f7:76:1c:6a:53:4a:29:f6:e0:66:ba:19:f5:
                    65:77:3a:e8:e9:01:23:e1:93:a0:97:cb:d6:fc:24:
                    9e:20:2d:a9:cb:19:42:20:e6:63:c0:49:58:11:5a:
                    2d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:78:8D:0B:8F:82:67:74:8B:9D:80:E9:B2:A3:D7:DD:0A:42:F5:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a78b0060-8dc3-3377-b8dc-ca8262b12e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.227.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:8d:8f:67:95:db:84:06:b1:1a:52:da:92:67:6d:8c:44:
         34:24:b2:31:8d:bf:97:20:e8:d7:09:56:46:e5:86:58:65:9f:
         8e:b4:cb:3f:62:ad:28:bb:45:05:ca:94:c2:3f:64:2b:6d:9d:
         ef:08:59:79:17:01:2f:39:a2:0f:61:49:b0:19:4c:a1:60:6e:
         0a:f5:4e:ce:ab:9c:8b:3a:3e:a7:75:2e:55:77:db:d6:8f:76:
         c1:d8:b2:87:44:6d:a7:a0:fe:1c:f3:f8:e9:8e:16:40:ee:bd:
         61:0e:3d:7e:1c:ae:b6:30:65:de:a4:7a:00:b9:09:9b:23:e7:
         b6:1b:30:bf:d0:cf:8b:9d:01:06:fb:77:58:67:e1:48:21:40:
         28:8d:dc:84:e3:78:ec:41:24:bf:0f:c4:b6:5a:f0:43:76:95:
         c7:93:33:9e:dc:67:29:a8:d0:1a:61:37:cb:24:6b:46:7b:97:
         fd:91:4b:c1:9d:01:d7:c9:4c:d5:69:06:5d:c8:a6:84:40:68:
         e6:92:b6:a1:34:2a:cf:cd:c2:7b:54:72:84:a6:61:30:5a:82:
         15:20:50:36:2d:a4:63:1b:e2:34:56:2a:7c:8d:65:13:92:b4:
         4e:c5:a7:e3:ae:19:67:ff:2c:ab:e0:04:a2:28:9d:ea:77:0d:
         75:2f:55:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijfIuWWQ3qAs4g4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
YWFmYzkxM2ItOGIxMS00ODUzLTgyNGMtMzUyZWRjZTU2ZjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Iz8WzV8kKdjIaByPDLuMNcJSnKvbV70M2pO
6b5kCtSM7sA+IXUa6R5odmcNFggRGcvL1X2MvX75kROGltjSE91HkAhO71SDDIo0
40+s0+ahIj8W5ffBMWNCSU8g2OZaO0SfP94xDwa/ivjzZKaYJhVROGIBexCkdZPG
nlLNvqjkuEDGZxTjlje1cohsvb7vRHR0zd/FZaSgqnPqgkkMTZwMjpcicgCm8LB6
vJSNY11NaaaD4KFmuvoMnDiRomZ0BKdTDvIV8Xv2z34tBc0tJvwuSfd2HGpTSin2
4Ga6GfVldzro6QEj4ZOgl8vW/CSeIC2pyxlCIOZjwElYEVotzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGB4jQuPgmd0i52A6bKj190KQvWSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTc4YjAwNjAtOGRjMy0z
Mzc3LWI4ZGMtY2E4MjYyYjEyZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQuPoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAt5jY9nlduEBrEaUtqSZ22MRDQksjGNv5cg6NcJVkblhlhln460yz9i
rSi7RQXKlMI/ZCttne8IWXkXAS85og9hSbAZTKFgbgr1Ts6rnIs6Pqd1LlV329aP
dsHYsodEbaeg/hzz+OmOFkDuvWEOPX4crrYwZd6kegC5CZsj57YbML/Qz4udAQb7
d1hn4UghQCiN3ITjeOxBJL8PxLZa8EN2lceTM57cZymo0BphN8ska0Z7l/2RS8Gd
AdfJTNVpBl3IpoRAaOaStqE0Ks/NwntUcoSmYTBaghUgUDYtpGMb4jRWKnyNZROS
tE7Fp+OuGWf/LKvgBKIonep3DXUvVb0=
-----END CERTIFICATE-----
Generated at Mon May 13 01:45:13 2024 by rpki-client on console-ams.rpki-client.org