Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ee3cc0a2-5d20-3b01-9822-ed3407e470a2.roa
File:                     ee3cc0a2-5d20-3b01-9822-ed3407e470a2.roa (raw, json)
Hash identifier:          FZuL8DdJ3Vrzjz4uhb7upsxQXR75RC6ciE0DPpSFBMY=
Subject key identifier:   28:A7:63:F6:C1:57:76:0E:91:93:65:0D:EE:8E:8C:AF:2E:75:CE:8D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E04CADC61FF1791B1DDC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ee3cc0a2-5d20-3b01-9822-ed3407e470a2.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        66.189.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:04:ca:dc:61:ff:17:91:b1:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=cc257aa4-b088-41ce-9db5-11a15493fdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:9a:7c:a3:21:04:3e:d8:cf:fd:68:bf:53:
                    e7:90:e5:33:0a:b1:54:d5:9a:f0:4b:3f:79:7b:73:
                    f8:83:79:28:48:33:4e:1c:e4:fb:b6:48:02:a3:1e:
                    4c:ba:1d:0d:5c:c5:d5:74:08:82:be:5d:cf:5b:fa:
                    61:f8:35:0b:cb:1a:f7:26:68:56:8f:0d:d4:9f:0c:
                    1d:05:7a:8a:3d:68:06:0b:d0:a1:b1:38:47:b0:46:
                    97:08:a2:28:52:60:86:44:5a:58:04:84:e0:d5:6a:
                    f4:7d:e8:ec:b1:c3:b7:a1:ef:39:d9:66:5c:96:c9:
                    db:e4:46:a0:46:65:03:f4:43:f4:01:1a:4a:17:5b:
                    11:fa:10:48:0a:d1:8f:f4:71:dc:fd:ce:06:a7:0c:
                    a1:1b:04:1d:ed:d9:cc:0e:26:40:fd:67:54:9b:d0:
                    da:e6:c8:81:7f:0e:f3:05:b7:36:67:4d:f0:09:37:
                    de:be:e3:85:c8:3e:5c:6a:0f:e8:0e:80:6e:20:ef:
                    a7:0c:50:1c:74:24:07:75:e0:28:07:de:aa:e3:a8:
                    d8:40:ff:c1:82:15:bf:4f:c2:e1:a1:a9:d4:fd:8c:
                    30:2d:c1:70:29:47:0f:7f:f3:e0:2c:ff:55:b8:7d:
                    69:3b:de:07:5f:4f:26:2c:92:d7:aa:78:b3:98:0e:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A7:63:F6:C1:57:76:0E:91:93:65:0D:EE:8E:8C:AF:2E:75:CE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ee3cc0a2-5d20-3b01-9822-ed3407e470a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.189.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:ce:76:b6:b7:85:f3:36:a7:c9:e9:c4:25:19:1e:b3:b1:0d:
         b8:f5:83:ef:a0:05:59:af:dc:58:ee:34:3a:56:5e:b0:57:31:
         88:13:90:05:6d:d6:a1:b9:7a:e2:90:89:07:2f:03:ec:26:b8:
         91:38:eb:8d:9d:82:8f:8b:cf:a3:7c:35:7c:a9:8e:ff:87:1b:
         71:d8:c1:ae:ec:87:7c:f1:2c:3d:2a:6e:5d:85:44:b8:77:82:
         4f:64:c9:4a:e8:2c:f0:83:23:94:d6:c3:8b:ca:a4:54:f3:30:
         02:0b:86:1b:56:03:de:ef:cd:e8:63:43:4b:1c:bb:a1:f8:d1:
         e5:c1:32:00:93:fa:26:59:bb:fc:14:30:b2:9a:23:6c:9f:f6:
         20:3f:50:47:09:ce:07:81:2c:48:a9:d0:b5:24:c7:a4:e7:db:
         62:80:09:ca:99:f1:ec:52:ee:33:5c:d6:d8:cf:ad:51:e1:d9:
         03:ff:bf:a7:9c:76:57:85:d0:e1:f8:21:5e:e3:3f:3e:43:7b:
         a0:2b:ea:80:9f:25:66:f6:10:3d:91:32:0c:89:4f:18:3c:fe:
         cf:94:e8:55:3d:1e:a9:61:cd:0b:f4:80:b4:ec:24:3a:21:75:
         2b:1c:dc:a7:5c:ee:46:5f:76:dd:fb:f2:af:37:3c:53:e9:32:
         44:42:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 19:44:33 2024 by rpki-client on console-ams.rpki-client.org