Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc3af7ee-ecec-3a72-9902-de2c168733c1.roa
File:                     dc3af7ee-ecec-3a72-9902-de2c168733c1.roa (raw, json)
Hash identifier:          BaIwRdP76gET3KWcAzw4radY1CBag9U/L/UeXadnABc=
Subject key identifier:   1A:FB:E6:08:0D:CA:18:B0:BC:E3:2D:F2:38:06:33:EF:30:F5:D4:DD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858385DD37731873ED6B2B3A9C000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc3af7ee-ecec-3a72-9902-de2c168733c1.roa
Signing time:             Wed 23 Dec 2020 05:00:00 +0000
ROA not before:           Wed 23 Dec 2020 05:00:00 +0000
ROA not after:            Wed 16 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        66.168.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:5d:d3:77:31:87:3e:d6:b2:b3:a9:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 23 05:00:00 2020 GMT
            Not After : Dec 16 05:00:00 2026 GMT
        Subject: CN=a97f7386-b523-4111-bc4a-0ac68d54b499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:13:84:4c:7d:ea:00:01:58:11:fe:a9:25:39:
                    b7:1a:8a:dd:02:52:1b:fc:c6:1a:20:07:0a:1a:1b:
                    ea:00:10:1a:63:7f:b1:c7:0b:b4:b6:d9:88:83:a5:
                    61:a0:b8:0e:6a:95:f5:59:4b:3c:0d:50:20:62:f1:
                    3b:35:a2:75:89:9c:e5:c6:3e:9f:2f:04:de:41:25:
                    11:d2:39:7d:06:87:bc:b1:14:e0:2e:62:2b:35:3e:
                    2f:ca:9a:c2:98:e8:c1:aa:04:6f:89:1a:44:96:bc:
                    3d:41:38:f2:b3:66:39:6b:58:7a:78:6c:0c:a7:05:
                    b6:3f:ce:f3:b5:23:a9:be:f4:55:14:30:32:c5:0d:
                    d6:82:00:2f:55:3c:75:07:25:e2:46:98:47:5b:8a:
                    1a:1e:67:54:14:60:69:c7:f8:2f:79:ce:ed:f6:b3:
                    df:b5:ac:9c:62:37:69:63:8e:5e:57:33:18:8b:6b:
                    60:84:09:83:ba:d6:47:8b:31:ec:c3:a9:11:30:35:
                    ce:62:e7:ee:af:94:9c:30:90:c7:31:ec:48:8c:4f:
                    ba:d4:50:81:b4:60:ee:c2:97:c2:ce:0a:8f:bf:6c:
                    46:76:ac:c5:0a:d0:2e:1a:44:c7:04:08:6e:1e:12:
                    a9:9a:ff:e6:75:4e:64:bb:1e:0b:a4:07:c9:aa:b5:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FB:E6:08:0D:CA:18:B0:BC:E3:2D:F2:38:06:33:EF:30:F5:D4:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc3af7ee-ecec-3a72-9902-de2c168733c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0c:f1:41:fd:5a:4b:c1:fb:1a:7a:1f:01:56:d2:dd:6d:10:
         8b:b0:bd:53:d2:e3:e9:06:a7:ae:a5:8b:0d:ec:7c:12:38:49:
         3e:99:9f:09:4a:53:22:d3:11:e5:f3:0e:a9:80:70:77:c0:b6:
         f2:a0:56:3b:87:5d:d2:56:a6:bd:52:e7:96:48:bc:1d:da:57:
         58:af:6f:dd:57:35:cb:42:d4:c7:57:d0:c3:2d:0e:9f:36:81:
         31:22:49:f6:0f:cf:a0:71:47:9c:2e:d0:cf:5c:ae:83:9d:ba:
         df:31:cc:01:f1:35:8f:03:9d:4a:52:33:cc:4e:35:6d:01:d4:
         16:7e:7e:d7:20:5e:ae:5f:bd:f2:75:65:f4:77:4c:3d:89:2f:
         0a:66:33:44:ae:6a:bd:a4:85:12:53:33:7a:ba:82:4e:cb:d0:
         ff:e7:da:75:82:af:6b:c7:de:74:97:37:1b:e8:4b:54:3e:7e:
         70:a2:5e:28:3f:11:0b:a8:a4:63:67:c9:a6:83:f4:1e:82:be:
         2f:fb:54:fe:67:f7:31:91:9d:d7:bf:69:c1:54:e0:20:2a:3f:
         6a:fb:60:84:26:63:8f:2a:71:4e:84:57:ef:d2:88:5e:9d:a9:
         ce:7c:4e:ef:ee:30:38:ab:d9:a8:54:4b:c5:c9:d2:bd:f1:56:
         46:91:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:02 2024 by rpki-client on console-ams.rpki-client.org