Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/116856f6-bc4c-3861-b315-f4198cd4f9aa.roa
File:                     116856f6-bc4c-3861-b315-f4198cd4f9aa.roa (raw, json)
Hash identifier:          jVa3bv8ym8QAtojF3IMB43o1XHd2DnBolvqFutT54uY=
Subject key identifier:   B3:3C:FD:94:65:6F:5C:E9:93:4E:6D:E5:DD:3E:5D:0E:9E:AD:A0:54
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D180BB011F6FB457629880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/116856f6-bc4c-3861-b315-f4198cd4f9aa.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        68.118.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:80:bb:01:1f:6f:b4:57:62:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=65198a7c-c4aa-4db6-8df9-3b2053a0ec25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:f3:81:03:08:a3:c7:b7:12:e8:57:21:5f:
                    46:28:44:80:e9:8e:4b:ce:b5:30:e6:1a:f1:31:b4:
                    39:43:85:a7:65:1e:1f:1e:01:0c:f4:1f:71:db:61:
                    31:7e:a1:e1:7b:35:1c:4b:d6:20:0f:69:bc:91:35:
                    5c:a6:50:63:50:3f:ee:a2:8a:84:04:a1:b0:27:d0:
                    44:7b:b4:5b:ca:62:20:e6:7d:59:c9:0a:9a:1b:3d:
                    0d:c5:96:7e:5d:1d:75:6c:c6:a8:8d:7c:b3:57:5f:
                    6b:04:f4:56:5b:5c:90:f4:c1:d0:4f:f8:86:11:58:
                    19:f2:f2:5f:10:6d:3e:1a:d5:04:d5:fb:c1:b8:d6:
                    e0:3b:6b:ac:33:e1:21:37:b2:00:2f:8e:dc:6b:65:
                    a2:38:3a:d5:76:1c:f1:62:9a:9a:d7:5e:db:45:83:
                    24:ac:34:9c:1c:a7:b8:0a:46:04:7d:8c:a1:68:cd:
                    0a:03:36:49:10:b4:42:73:bc:d5:f5:f5:60:e4:9d:
                    2a:23:68:4b:e7:36:9d:a9:7d:f4:9a:8e:1f:74:39:
                    88:a2:f3:90:66:93:8d:2e:5e:b5:ae:1d:e5:8d:de:
                    ed:ac:e7:e7:a3:7a:a9:b6:6a:c3:ad:8f:6c:a6:e8:
                    c7:56:e1:fb:57:22:00:df:5c:8a:2d:c4:c3:7c:b0:
                    07:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3C:FD:94:65:6F:5C:E9:93:4E:6D:E5:DD:3E:5D:0E:9E:AD:A0:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/116856f6-bc4c-3861-b315-f4198cd4f9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.118.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:6e:ab:2b:22:da:49:91:a1:39:27:f7:6b:2e:f9:46:20:62:
         6d:27:f1:ae:aa:27:02:73:bf:56:cf:77:42:24:54:31:27:c4:
         94:d0:75:d6:89:e3:4d:c8:8b:cf:1c:a9:b4:6d:5f:0d:54:c3:
         e2:24:a7:6f:10:4d:32:f9:9d:d7:1a:b3:ee:dc:92:4c:3e:79:
         4e:2c:13:b1:97:d2:2d:a0:7c:bc:cf:a3:cc:e3:61:97:ab:5a:
         51:3a:57:54:8b:3a:88:91:57:4b:4c:f7:ec:0c:96:69:7f:b6:
         54:f7:fc:f7:90:4a:fb:db:60:46:5c:53:90:39:49:81:5c:e1:
         fe:6b:65:8b:24:34:15:13:f3:48:84:99:0b:6d:58:9b:8c:d2:
         cf:fe:b6:db:fa:c2:a7:a2:87:2f:3b:ac:d7:45:20:12:f8:4b:
         b5:db:7a:1c:6a:02:85:4c:00:3d:c7:a8:d1:19:7f:4e:cb:ea:
         e7:ef:15:09:7d:98:db:31:5e:0e:0a:87:c1:f8:50:54:77:4e:
         e4:f2:71:bc:72:15:73:d4:9d:91:d6:83:ac:7d:26:8b:92:21:
         78:cc:9e:ab:ce:44:4b:31:54:43:9b:40:f3:b6:cc:aa:96:e5:
         3f:c4:64:05:d5:34:dc:ff:33:db:8f:11:ac:e1:2b:6f:50:7d:
         d9:fe:72:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0YC7AR9vtFdimIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NjUxOThhN2MtYzRhYS00ZGI2LThkZjktM2IyMDUzYTBlYzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyrzgQMIo8e3EuhXIV9GKESA6Y5LzrUw5hrx
MbQ5Q4WnZR4fHgEM9B9x22ExfqHhezUcS9YgD2m8kTVcplBjUD/uooqEBKGwJ9BE
e7RbymIg5n1ZyQqaGz0NxZZ+XR11bMaojXyzV19rBPRWW1yQ9MHQT/iGEVgZ8vJf
EG0+GtUE1fvBuNbgO2usM+EhN7IAL47ca2WiODrVdhzxYpqa117bRYMkrDScHKe4
CkYEfYyhaM0KAzZJELRCc7zV9fVg5J0qI2hL5zadqX30mo4fdDmIovOQZpONLl61
rh3ljd7trOfno3qptmrDrY9spujHVuH7VyIA31yKLcTDfLAHswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLM8/ZRlb1zpk05t5d0+XQ6eraBUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMTE2ODU2ZjYtYmM0Yy0z
ODYxLWIzMTUtZjQxOThjZDRmOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRHYYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBuqysi2kmRoTkn92su+UYgYm0n8a6qJwJzv1bPd0IkVDEnxJTQddaJ
403Ii88cqbRtXw1Uw+Ikp28QTTL5ndcas+7ckkw+eU4sE7GX0i2gfLzPo8zjYZer
WlE6V1SLOoiRV0tM9+wMlml/tlT3/PeQSvvbYEZcU5A5SYFc4f5rZYskNBUT80iE
mQttWJuM0s/+ttv6wqeihy87rNdFIBL4S7XbehxqAoVMAD3HqNEZf07L6ufvFQl9
mNsxXg4Kh8H4UFR3TuTycbxyFXPUnZHWg6x9JouSIXjMnqvOREsxVEObQPO2zKqW
5T/EZAXVNNz/M9uPEazhK29Qfdn+coc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:23:05 2025 by rpki-client