Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d7267a90-5ddb-3d75-a5e5-86ade0e3fa8e.roa
File:                     d7267a90-5ddb-3d75-a5e5-86ade0e3fa8e.roa (raw, json)
Hash identifier:          hMehzl+aXFrm7Rr2TMPX+tAhX+FzvSzIxOQARF8nny8=
Subject key identifier:   41:D7:EB:64:56:B2:75:C0:76:3B:AB:C8:D1:82:FA:D8:41:86:EE:70
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838AC1197C55759F4B73C204530
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d7267a90-5ddb-3d75-a5e5-86ade0e3fa8e.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        66.227.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:11:97:c5:57:59:f4:b7:3c:20:45:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=717b7fd6-2149-4d9a-81d9-6d808fea8af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:4e:37:cc:dd:bd:94:c5:ef:1e:57:89:27:
                    d8:00:df:57:cb:12:f7:1c:c3:1e:1f:0f:47:a8:cc:
                    0c:b6:80:81:68:99:a9:09:3b:26:bb:b9:21:50:57:
                    30:ba:e6:31:6e:7c:d6:78:0f:ef:c6:2b:ca:bc:0a:
                    f6:8e:bc:ff:44:26:97:65:bd:74:e1:db:a4:6e:de:
                    8f:11:c8:e6:be:4b:04:29:29:a5:39:6e:54:4e:52:
                    c4:64:2b:60:ad:48:e4:5e:79:f0:4b:75:1e:76:ad:
                    6d:00:3b:0b:09:6b:81:f4:ae:99:0e:b0:06:95:92:
                    61:b8:2f:b8:98:04:c6:69:6f:d8:0e:fe:28:f3:5e:
                    7c:ae:d4:ef:72:5b:9e:95:2c:1c:82:9e:72:1c:c5:
                    d8:c5:ae:a2:37:cf:c8:b1:a1:30:53:f2:47:c8:9d:
                    62:5c:fa:e7:4b:9f:4a:35:9e:15:d0:02:5f:ac:dd:
                    b8:0c:28:a5:e5:ba:87:b9:fe:5a:4c:b6:ba:f8:d1:
                    0d:b1:6b:60:9a:a7:ce:7c:97:61:0c:6d:17:31:88:
                    18:ad:17:f3:07:f8:79:b8:c6:53:0b:e4:04:76:fb:
                    97:6e:1e:70:cf:79:ae:a1:bb:88:61:ba:29:68:1f:
                    ac:72:2a:43:d4:8f:ea:4f:df:3f:21:7d:cf:06:bd:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D7:EB:64:56:B2:75:C0:76:3B:AB:C8:D1:82:FA:D8:41:86:EE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d7267a90-5ddb-3d75-a5e5-86ade0e3fa8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.227.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f1:4d:8d:2d:db:72:d0:ff:f4:26:8a:c6:67:53:27:86:5e:
         c3:bd:e2:6f:e2:0b:e8:b2:9f:bb:2e:1b:98:56:55:16:5a:86:
         57:e6:23:32:58:97:d4:1c:93:e8:bc:c5:0e:dc:00:47:4f:e4:
         5e:5c:7f:e4:67:9b:92:9c:b0:52:18:18:af:fd:0e:09:4d:b6:
         bd:f3:d8:05:25:75:01:db:20:a9:f5:0e:b9:6d:ed:53:89:39:
         0c:8e:e9:0a:53:c4:0e:e3:90:d0:8b:9f:5b:27:ed:7f:48:0a:
         26:6d:e3:d2:36:94:c5:68:28:0d:d5:67:35:7a:8b:27:63:10:
         98:1d:1e:79:8e:1d:ef:e8:1c:b4:d4:b6:0c:4b:df:d4:b0:e6:
         89:4d:dc:93:b6:21:48:ce:f3:87:cc:3f:29:4f:b5:ec:68:28:
         31:11:fa:58:4f:c0:36:6f:20:1a:da:5b:78:37:3c:70:16:b7:
         89:f4:a7:c3:2f:78:f7:ac:76:43:79:82:3e:d1:00:a2:be:a7:
         f2:38:be:d1:6e:f9:92:91:1a:70:30:4c:97:22:48:b3:e5:c3:
         48:81:10:01:12:bb:7d:8a:ec:a3:20:6b:6c:08:23:36:a7:3e:
         72:a8:d3:79:55:ef:90:24:14:30:2d:c2:df:ca:61:4e:d3:eb:
         06:09:45:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDisEZfFV1n0tzwgRTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDEyMDA1MDAwMFoXDTI3MDExMzA1MDAwMFowLzEtMCsGA1UEAxMk
NzE3YjdmZDYtMjE0OS00ZDlhLTgxZDktNmQ4MDhmZWE4YWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30lON8zdvZTF7x5XiSfYAN9XyxL3HMMeHw9H
qMwMtoCBaJmpCTsmu7khUFcwuuYxbnzWeA/vxivKvAr2jrz/RCaXZb104dukbt6P
EcjmvksEKSmlOW5UTlLEZCtgrUjkXnnwS3Uedq1tADsLCWuB9K6ZDrAGlZJhuC+4
mATGaW/YDv4o8158rtTvcluelSwcgp5yHMXYxa6iN8/IsaEwU/JHyJ1iXPrnS59K
NZ4V0AJfrN24DCil5bqHuf5aTLa6+NENsWtgmqfOfJdhDG0XMYgYrRfzB/h5uMZT
C+QEdvuXbh5wz3muobuIYbopaB+scipD1I/qT98/IX3PBr1TAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHX62RWsnXAdjuryNGC+thBhu5wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDcyNjdhOTAtNWRkYi0z
ZDc1LWE1ZTUtODZhZGUwZTNmYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQuPwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbxTY0t23LQ//QmisZnUyeGXsO94m/iC+iyn7suG5hWVRZahlfmIzJY
l9Qck+i8xQ7cAEdP5F5cf+Rnm5KcsFIYGK/9DglNtr3z2AUldQHbIKn1Drlt7VOJ
OQyO6QpTxA7jkNCLn1sn7X9ICiZt49I2lMVoKA3VZzV6iydjEJgdHnmOHe/oHLTU
tgxL39Sw5olN3JO2IUjO84fMPylPtexoKDER+lhPwDZvIBraW3g3PHAWt4n0p8Mv
ePesdkN5gj7RAKK+p/I4vtFu+ZKRGnAwTJciSLPlw0iBEAESu32K7KMga2wIIzan
PnKo03lV75AkFDAtwt/KYU7T6wYJRSU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:22 2024 by rpki-client on console-fra.rpki-client.org