Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d47119e2-66f3-3edc-ac72-d8d0ee561366.roa
File:                     d47119e2-66f3-3edc-ac72-d8d0ee561366.roa (raw, json)
Hash identifier:          4WnF8R3W0wjGGpgFl+wUsE6/IUBVsfaErqI26vPE36U=
Subject key identifier:   3F:A5:14:E0:1F:4A:DE:0E:68:B8:8C:55:E7:53:C1:5F:B3:91:06:D8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A164507B9EEC2C37C23D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d47119e2-66f3-3edc-ac72-d8d0ee561366.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        66.191.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:64:50:7b:9e:ec:2c:37:c2:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=3cc6f857-2060-46d5-93ab-42292021333f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:e9:81:ca:ed:46:47:95:3d:f4:9e:6c:3b:
                    37:89:81:e9:57:00:e1:c6:12:81:d4:f4:ce:f6:53:
                    bb:8c:b7:69:22:87:a6:b8:94:dd:1f:68:b3:1e:14:
                    f5:73:e4:ed:4f:5e:af:06:07:b5:a7:58:7b:de:27:
                    76:44:3b:21:1b:e0:7a:59:8c:67:da:5f:62:bd:d1:
                    b5:e0:15:43:f2:91:27:5f:ed:53:21:ad:ff:ba:da:
                    34:2e:30:c4:20:85:58:09:b4:67:46:cf:b8:10:e1:
                    cc:89:a4:ec:09:a0:9c:e8:7d:9c:96:33:30:c2:ca:
                    46:57:00:fb:d0:fa:e2:da:d3:e3:3c:2e:7e:10:54:
                    a1:17:e6:bf:93:cf:71:10:f5:1f:e3:21:a2:1d:ab:
                    36:83:1e:59:d8:aa:3f:c9:c4:aa:9f:a6:12:6a:63:
                    bf:e6:c0:ee:99:0c:7b:53:3d:9a:ee:68:63:8e:b3:
                    98:41:15:0b:07:ae:12:49:d7:8e:bd:43:8d:15:7b:
                    71:17:ec:93:0e:17:79:34:c9:a5:82:63:b2:a3:51:
                    3a:e6:94:41:00:c7:14:68:a6:6d:5f:ca:a8:46:d4:
                    21:82:de:6a:e3:3a:f9:c3:4c:81:7b:76:10:c1:59:
                    2f:fe:d9:96:8f:bb:fa:8d:7f:cd:20:bf:1d:cd:2a:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A5:14:E0:1F:4A:DE:0E:68:B8:8C:55:E7:53:C1:5F:B3:91:06:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d47119e2-66f3-3edc-ac72-d8d0ee561366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fb:25:d4:8e:c3:fa:42:d6:e8:d6:98:0b:1c:69:63:0f:78:
         02:85:88:83:dc:99:3c:4e:51:0b:33:a9:71:11:e4:38:10:eb:
         1e:4a:d3:5e:17:f9:ae:f1:6a:e5:63:cd:7c:a5:44:b5:1d:22:
         2f:f9:d1:97:3c:a5:ff:52:4b:1e:cd:40:ed:a5:06:22:e6:56:
         88:9d:49:15:ec:27:de:ae:1b:82:eb:89:31:de:9a:c9:28:0e:
         a5:e2:70:c2:b1:66:9c:df:c0:5d:fb:0c:0d:fe:78:f5:22:43:
         b2:44:04:c7:cd:b7:0d:f6:c4:1f:b4:19:69:2a:ee:fe:84:aa:
         7a:c6:fc:55:0b:52:30:23:f5:64:29:29:5f:20:86:ad:0f:7d:
         0c:5a:d6:2a:80:d5:7e:eb:42:10:9c:c5:7f:cf:37:aa:f3:8a:
         fc:a2:26:0f:f4:e3:eb:37:13:22:44:c8:89:4f:26:63:e0:92:
         af:43:b6:84:46:d0:fb:4e:32:46:e3:31:20:02:37:d8:03:2a:
         ba:9d:bb:65:f3:c7:3a:e3:85:ef:ba:06:1a:09:21:5b:0d:3c:
         99:20:97:1a:62:75:e9:ed:83:87:cd:61:2f:af:71:f4:be:dd:
         05:a8:b9:a5:36:0a:83:d2:9b:f6:bd:d3:46:e8:e4:39:7f:bc:
         b3:65:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:02 2024 by rpki-client on console-ams.rpki-client.org