Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3c59e029-c57a-32fd-b2d1-f12876f2df23.roa
File:                     3c59e029-c57a-32fd-b2d1-f12876f2df23.roa (raw, json)
Hash identifier:          rfttW8rztxtavIQaK8Li85Qw1az9hRThLttVdDx3QwM=
Subject key identifier:   BE:91:3D:73:73:86:37:E4:C8:E9:BD:70:53:79:31:6D:CB:A0:09:E3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D18076B2E0BD04BC249600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3c59e029-c57a-32fd-b2d1-f12876f2df23.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        68.117.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:80:76:b2:e0:bd:04:bc:24:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=7bc41481-bc22-46af-9ae0-8c4e8ac26a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:d3:b7:d1:1a:17:f8:1f:9f:26:ce:73:11:
                    aa:8d:b4:15:df:df:1c:73:15:c0:33:0c:cb:77:8d:
                    40:78:1a:e8:5d:0b:06:60:32:6a:1f:0b:77:27:08:
                    5f:e0:4b:a8:bc:95:bf:6c:fe:b9:eb:56:fa:9e:d7:
                    bd:bf:6e:03:7c:75:dc:ec:7f:7b:8a:38:d1:d5:aa:
                    95:33:a2:aa:71:a0:35:c1:b2:3f:ab:f3:da:d1:c5:
                    2d:65:f6:0f:37:d6:4a:f5:3d:61:40:34:ed:73:d1:
                    3f:af:90:9f:58:f8:a2:a4:8e:b6:4e:c6:86:b0:ab:
                    62:2c:3f:bc:52:3d:3f:65:da:b5:2c:f6:59:f9:00:
                    91:88:d0:b0:5a:42:92:e1:58:3f:24:84:11:4a:bb:
                    d0:e8:de:71:af:b4:7c:f7:ab:53:7e:33:22:5b:ef:
                    67:41:0c:35:5d:a6:99:6d:32:a0:89:04:45:d2:5b:
                    51:de:bb:d7:31:e7:00:e1:bb:65:99:dd:ed:32:83:
                    c3:bb:86:32:0b:37:7e:3a:c6:a4:f6:e7:04:df:96:
                    60:db:55:97:12:90:98:b3:f3:32:3b:22:9f:ca:8a:
                    e0:2e:4d:3d:a8:05:50:3f:ae:4e:56:11:9b:0e:69:
                    06:d4:84:94:20:d3:59:ca:1c:82:26:38:9e:20:ee:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:91:3D:73:73:86:37:E4:C8:E9:BD:70:53:79:31:6D:CB:A0:09:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3c59e029-c57a-32fd-b2d1-f12876f2df23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:f9:85:31:45:4e:58:da:b0:9f:9d:9e:81:3f:61:e7:4a:a4:
         ca:6a:48:90:ea:74:4a:5d:cc:60:3c:4c:f6:4e:ea:f8:d6:cd:
         88:a4:90:83:9c:a1:e0:49:ce:ef:fc:42:93:2a:db:98:e4:b0:
         03:f4:a5:93:6a:f2:db:4e:4e:1a:94:cf:9c:24:6e:d9:c8:59:
         bf:98:ea:5f:75:c2:d7:c4:eb:52:79:c6:95:75:dd:73:bb:c4:
         51:26:da:8e:f2:3c:60:af:0b:85:ed:19:bd:dd:5a:9c:cc:8e:
         a1:c9:66:84:86:82:9b:33:71:26:e2:7d:0a:2d:b7:93:9e:0b:
         55:73:63:9f:bf:97:81:c9:c5:7c:ec:94:3e:da:2f:02:2b:69:
         ab:3c:b8:37:55:c5:48:db:5b:b2:e6:3c:b6:52:46:e6:a6:ca:
         42:d5:9e:c1:83:39:e2:bb:fb:56:34:a6:02:40:c2:2f:55:52:
         21:ef:28:22:67:a6:2a:28:44:8c:f1:a5:5e:10:83:b3:f3:b3:
         a0:58:c9:e9:a0:1a:81:a0:2e:18:ab:27:5e:ca:1d:8e:0d:4b:
         98:db:b4:5e:b6:ee:65:aa:db:9b:48:d4:3e:76:89:01:11:b3:
         03:6d:c5:a4:72:ac:e1:8b:49:87:9c:55:02:03:a6:61:09:77:
         62:07:3a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:08:05 2025 by rpki-client