Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/44cb7084-a29f-3ec7-beaa-314306022ebb.roa
File:                     44cb7084-a29f-3ec7-beaa-314306022ebb.roa (raw, json)
Hash identifier:          aoQodUAbmg6oFOQAQet2XZZlb31w8qOxLKZqvm7xsNw=
Subject key identifier:   C6:78:6C:BD:B2:C2:B3:18:AB:8A:BC:8D:84:4E:52:2C:29:86:5E:34
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D164C6BBF547BE53E3AA80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/44cb7084-a29f-3ec7-beaa-314306022ebb.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        68.184.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:64:c6:bb:f5:47:be:53:e3:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=b4c26eb8-ab73-474d-abaf-24d68f62e4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:7b:d8:fe:f6:68:a6:cb:95:50:37:23:f3:
                    ab:73:aa:e0:05:d4:63:71:75:18:4e:b1:bb:bd:68:
                    9c:77:df:fb:ec:26:46:3c:14:16:39:43:5d:92:56:
                    95:27:21:1c:79:d6:aa:91:8d:56:12:5e:10:1e:ee:
                    36:b5:19:97:ad:8b:45:f1:d2:97:a3:02:3a:41:54:
                    e1:3b:90:f8:61:ec:13:03:4b:10:61:0d:85:eb:8c:
                    42:b7:c9:fc:09:ec:e7:a4:f0:c6:8a:1c:d4:c5:1b:
                    78:26:bb:f7:60:a6:74:61:26:06:9c:fc:b0:80:d7:
                    06:d5:b2:e8:f3:95:e6:ed:e2:6f:58:cf:d2:83:44:
                    7f:69:7e:a5:c2:1f:07:28:fa:2e:ec:0c:3f:bd:cd:
                    c4:6c:f0:16:19:39:cc:37:77:22:e4:a8:1a:53:c0:
                    9a:07:64:bf:97:66:3f:be:de:51:e0:63:21:fc:e2:
                    9c:26:68:2f:30:50:4b:85:0e:58:e5:ba:4b:b5:98:
                    80:ee:6b:63:9e:70:e0:75:84:ae:a8:c0:b2:6e:96:
                    be:9a:8e:86:d9:8e:87:8a:29:6b:7a:45:20:2d:88:
                    28:df:fb:65:a3:e0:d3:66:f8:bf:c7:9e:be:01:8d:
                    ff:3a:4e:65:d1:19:07:01:86:63:b0:0a:fb:87:74:
                    e9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:78:6C:BD:B2:C2:B3:18:AB:8A:BC:8D:84:4E:52:2C:29:86:5E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/44cb7084-a29f-3ec7-beaa-314306022ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.184.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c2:7f:68:a7:b1:70:0f:b3:ed:fd:ba:87:e8:ab:11:d0:c5:
         1d:ee:0d:5d:39:55:f8:69:0d:af:1e:ce:07:18:b2:a7:9f:e3:
         77:ae:6a:08:e5:50:27:0a:26:c7:3c:18:2d:68:9c:4a:7f:d0:
         e4:f3:67:22:fc:df:bb:14:b7:8d:1b:ce:eb:1f:fd:49:5f:4f:
         71:b4:49:bd:ab:2c:b1:4b:57:a2:6b:54:2b:be:09:dc:98:60:
         c7:6b:64:5c:85:8a:aa:f5:13:5d:59:bd:b0:93:f7:1d:10:7f:
         aa:7d:21:d4:4b:b5:8a:a5:8d:25:75:a7:f7:5d:c9:21:38:dd:
         a7:ed:f9:bf:f2:06:6b:99:dc:1f:c3:3a:f5:0d:2f:7a:5f:77:
         b3:77:74:76:d1:01:da:42:45:0b:a2:53:66:af:c8:f9:c4:ad:
         bd:58:b3:b6:7a:a1:04:6b:fc:81:cb:c0:9f:c5:72:70:a4:d7:
         ec:f1:05:d0:5b:57:57:1e:b0:64:d4:cd:09:78:e1:f9:b0:a5:
         72:46:3e:8e:d8:51:37:25:24:06:72:bf:1a:57:50:79:40:2d:
         fa:ce:05:ab:ad:5a:f7:68:8e:d8:b9:d1:40:15:49:19:41:9c:
         14:76:9d:62:9a:a0:6e:80:8c:ee:ef:ba:f2:5d:0f:a1:85:94:
         99:31:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:18:30 2025 by rpki-client