Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8f58f7-002e-3d7d-afd2-cab8d90abd25.roa
File:                     be8f58f7-002e-3d7d-afd2-cab8d90abd25.roa (raw, json)
Hash identifier:          LM7GqQITxhAxbXj4djZM9ACTGfm3hqcGBJTbnYmPL1U=
Subject key identifier:   65:FF:60:73:11:02:1C:05:32:D7:84:2C:62:21:F3:6E:59:70:A9:E6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A16BEC49742C70BCE36300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8f58f7-002e-3d7d-afd2-cab8d90abd25.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        66.188.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:6b:ec:49:74:2c:70:bc:e3:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=07164b64-a55a-455f-852e-5735c195e7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:59:2e:dc:60:8c:4a:1a:04:6b:70:c2:9b:
                    b1:d7:f0:c6:86:c2:21:70:46:e4:dc:cf:f3:51:f0:
                    ea:4b:48:aa:f1:41:73:cd:fd:70:e8:93:33:5b:5d:
                    ad:7e:9c:b9:13:da:f2:3d:27:04:5a:4f:78:e2:f2:
                    1f:49:ec:31:0e:84:f7:1e:a2:85:57:d2:cd:43:a0:
                    fb:fa:78:d8:e9:73:ad:5a:a5:fc:a2:ba:ea:a7:7c:
                    0c:b5:f5:bd:be:d8:74:52:9f:39:67:20:9f:66:45:
                    44:0e:9b:47:7d:40:88:cb:c3:2c:53:26:cc:f6:bf:
                    5d:8a:7c:25:32:60:3d:01:99:30:5a:bd:3d:d8:de:
                    ea:05:fd:11:05:d7:1a:48:e6:f6:91:61:58:3e:8f:
                    24:90:7f:22:91:88:ae:a5:07:14:81:ba:a7:ae:e1:
                    b5:d6:9e:7a:ed:38:76:54:21:13:1f:c8:0c:68:7a:
                    22:3c:58:64:0f:29:33:0f:e5:3d:8d:08:ca:ec:bd:
                    bc:2b:3f:d1:e4:52:4c:83:33:d1:48:1c:8e:18:fc:
                    bf:b6:d6:a1:f5:04:a3:c3:48:08:a4:ee:55:56:a8:
                    ba:66:4f:31:38:fa:6d:5f:4f:6d:f4:cd:9a:b8:50:
                    d1:e4:4b:c4:00:7e:4b:a2:71:7e:5a:60:7a:35:f4:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FF:60:73:11:02:1C:05:32:D7:84:2C:62:21:F3:6E:59:70:A9:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8f58f7-002e-3d7d-afd2-cab8d90abd25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.188.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:1d:74:ca:bb:4c:19:09:3a:4c:c3:90:20:a8:2c:41:f4:65:
         39:0c:03:43:9a:54:fd:35:2f:a5:b8:a5:c0:2f:4e:ac:75:97:
         34:21:75:06:c4:8e:20:68:8a:89:79:67:53:1e:40:8f:ff:34:
         13:1c:b5:79:2f:46:d6:4c:75:61:c4:1b:4f:a4:c7:e5:22:62:
         b1:cd:55:64:1e:5c:c5:90:83:db:0c:8b:57:f7:8d:71:d0:95:
         a7:5d:d9:7b:2d:6e:cd:71:90:18:e5:aa:b4:c1:ac:21:20:0c:
         54:84:0f:87:33:39:07:86:cf:d9:e8:44:fa:c1:38:e9:10:f6:
         e3:90:c0:90:9d:d1:20:13:d7:94:35:33:be:22:8d:13:b1:e6:
         cd:67:e2:b3:2e:92:21:8e:a6:eb:a0:2a:ff:ce:40:50:ee:47:
         7a:79:8b:ff:62:24:ca:d2:ea:6e:d2:3c:b5:47:3a:2d:0a:d8:
         29:bd:de:b4:63:63:f3:32:18:f5:bf:95:b0:b5:19:4d:03:d0:
         cb:36:65:c6:3f:75:ce:db:14:ab:9c:c7:d3:e2:d8:68:f9:6b:
         b1:a8:08:64:82:dc:69:80:50:f7:88:bb:4f:c2:08:24:e1:b6:
         11:47:a3:b8:54:98:f6:bb:3d:97:a1:cd:a6:64:29:5c:ed:b9:
         13:7e:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:19 2024 by rpki-client on console-fra.rpki-client.org