Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1b202fcb-222d-3a43-95ff-e4f9378581ae.roa
File:                     1b202fcb-222d-3a43-95ff-e4f9378581ae.roa (raw, json)
Hash identifier:          GsdvUt6goCOhWnJm9wkhIkYndfugs1yTvZcXtLjXlAY=
Subject key identifier:   32:E3:5E:E5:0E:43:5A:9E:04:42:AB:0B:22:7E:02:34:3F:38:32:CB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D183BBA80081C0A8F0D6B6
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1b202fcb-222d-3a43-95ff-e4f9378581ae.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        68.119.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:83:bb:a8:00:81:c0:a8:f0:d6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=52525261-cde8-4fcf-bee8-00fd74d9c180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:07:2a:26:e9:ba:73:d2:db:52:ad:78:bb:91:
                    f4:76:aa:ce:e3:a8:bc:58:10:04:c2:c8:94:97:8b:
                    c7:71:f3:b2:19:d4:50:d9:4c:5c:c0:c5:df:34:7f:
                    76:83:c4:47:41:8a:b7:5b:cb:4a:a9:61:90:56:68:
                    a0:40:37:47:3f:14:b8:ea:c3:47:22:41:39:11:eb:
                    bf:26:dc:e2:a0:99:4e:86:fb:97:2f:64:16:49:e2:
                    3e:a8:03:83:7b:d7:fe:62:22:ca:cb:72:1b:76:64:
                    7f:ff:7f:62:fe:7e:12:3a:d1:cc:0e:2e:17:28:d7:
                    67:e9:c0:5e:c8:ff:25:38:de:95:c9:2d:33:01:6c:
                    f6:3b:54:4c:d0:0e:61:fd:9c:5b:d5:7c:8d:9b:21:
                    62:9d:9f:59:43:01:17:60:13:25:bb:8c:3d:37:e4:
                    59:38:54:bb:49:17:d3:ea:39:34:f5:72:52:a7:b5:
                    e9:ac:0d:12:38:df:f5:4c:88:a5:2b:34:68:85:31:
                    10:d1:83:ba:1e:53:83:f7:28:0d:95:73:b9:bf:a3:
                    ae:50:10:19:da:bc:b3:bb:38:8d:4f:5a:18:e1:13:
                    6d:66:7a:0e:50:10:6d:36:32:10:92:a2:68:a4:1e:
                    85:48:d6:12:1a:36:24:2e:ba:80:6b:e0:4e:b5:40:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E3:5E:E5:0E:43:5A:9E:04:42:AB:0B:22:7E:02:34:3F:38:32:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1b202fcb-222d-3a43-95ff-e4f9378581ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.119.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:62:b9:b6:40:94:92:4b:95:04:90:af:0f:fe:59:ed:20:49:
         76:b2:8b:e6:69:0c:ba:de:b0:07:3a:59:7a:88:49:b8:c1:ae:
         59:41:ca:bd:16:4f:94:f1:bc:b4:63:b3:64:df:45:23:fc:28:
         95:14:91:ae:f2:05:e2:22:52:53:cc:89:2b:a4:1d:67:d5:ca:
         2f:ea:dc:e5:5d:58:22:f1:46:46:81:68:fa:23:a5:4a:dd:b1:
         77:ad:e9:26:1c:28:ac:78:a7:0d:33:59:ea:bd:6b:b1:bf:48:
         95:61:b0:ae:d0:2c:67:29:09:4c:a9:ba:72:ad:3e:72:5a:ff:
         28:a8:59:61:1d:fd:3a:d8:38:7b:b3:24:c7:8b:99:cd:41:23:
         20:8b:ab:5f:54:36:a1:0c:46:69:a7:28:c3:c7:e0:62:75:fa:
         c1:64:d8:e7:90:40:c4:c2:e4:50:9e:bb:40:36:cc:fd:14:30:
         e1:e6:ca:b6:c3:48:31:87:52:b0:2e:1f:34:37:fb:b6:0f:3e:
         d6:01:6c:45:39:a7:f1:9e:c2:ce:e9:9a:d4:94:28:c9:2d:14:
         80:b2:ca:93:16:da:ff:bf:37:92:fe:1c:21:3a:6f:ef:50:64:
         34:23:90:c3:16:70:06:9e:63:72:3d:50:14:56:d4:94:7b:75:
         6f:cc:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:28:08 2025 by rpki-client