Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fb54082-2ca2-366e-a48e-e9ad5d7b8149.roa
File:                     5fb54082-2ca2-366e-a48e-e9ad5d7b8149.roa (raw, json)
Hash identifier:          3vY/IRLMdmHcdfybSEFy6TEB3QqF4AJZzPRo6ugqsEA=
Subject key identifier:   36:98:46:9B:7D:61:D1:86:7A:78:D0:17:06:0E:19:87:04:66:78:46
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D18291025BBB53B3E4FB80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fb54082-2ca2-366e-a48e-e9ad5d7b8149.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        68.114.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:82:91:02:5b:bb:53:b3:e4:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=f869201f-3de2-44b2-8449-3522933888cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:04:5e:c0:32:81:d3:e1:68:05:e2:ca:90:4e:
                    24:f8:f8:29:45:e7:3b:1b:8f:f2:7a:b9:b2:27:20:
                    24:fe:49:05:2d:1a:5d:bd:88:e5:a6:a6:e0:d0:c0:
                    db:60:90:0e:70:be:15:a5:2c:da:aa:41:5d:d2:96:
                    46:d0:59:2c:28:78:93:c3:fd:b8:cb:74:5c:61:af:
                    3b:62:9b:dd:99:e6:b7:75:4b:6f:6f:a5:dd:8a:9d:
                    2b:e7:0e:46:3d:0f:f5:b9:d4:ee:3e:3b:24:fd:92:
                    f3:0e:a0:28:86:6e:75:4b:8e:b3:f2:a5:3b:54:9f:
                    14:34:50:8b:b1:b7:32:e9:71:49:3c:ed:66:95:41:
                    24:25:f2:58:af:ce:d9:37:da:b0:a9:b6:10:71:06:
                    98:69:db:14:1c:86:41:71:e7:86:9f:58:0b:83:fd:
                    95:27:40:4c:fe:d9:f9:eb:37:02:5f:67:ec:09:9f:
                    71:1c:4e:c9:7d:7f:6f:f0:32:1b:a8:97:c7:9a:65:
                    f1:86:77:66:cb:2f:85:9c:07:fd:32:aa:e7:34:0d:
                    1c:9f:b0:f2:9c:a0:01:0c:bd:9d:04:52:c9:3a:03:
                    d0:06:43:28:68:67:c3:94:4e:15:4e:55:df:6c:2d:
                    3e:df:d3:34:eb:b0:6e:e5:b4:99:df:32:01:29:6a:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:98:46:9B:7D:61:D1:86:7A:78:D0:17:06:0E:19:87:04:66:78:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fb54082-2ca2-366e-a48e-e9ad5d7b8149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.114.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:0b:73:29:6a:df:42:ab:fc:a7:88:3a:5c:7d:76:8f:e5:
         3b:42:a5:9f:b5:8d:cc:8e:a2:3c:e2:df:95:a6:4c:da:2c:82:
         b1:73:71:08:ae:a0:50:f5:8d:b0:3a:04:24:d9:5e:53:ac:2c:
         04:aa:7e:49:86:e4:67:49:0a:f3:46:3b:ba:54:b7:38:4d:b8:
         94:da:4d:22:5d:84:8f:91:f9:b1:66:65:ac:81:97:86:5d:fe:
         01:77:23:53:68:fb:03:cb:32:ca:fc:c8:f4:e5:e9:67:04:ec:
         d5:ed:6a:59:b4:59:a1:83:43:ff:dd:cb:a0:31:9c:06:df:bb:
         ce:f2:6a:de:6c:46:2e:38:ea:ce:d8:c7:b7:51:fd:6a:2e:97:
         16:67:33:45:f2:e3:9e:ee:e0:49:79:55:5e:61:91:d0:0e:e9:
         bd:2e:ea:6a:68:88:3c:cb:27:3f:fb:cc:26:6f:f7:7d:a7:67:
         2e:57:30:b9:77:85:d3:c5:5a:ae:69:63:0e:cb:97:97:f3:1e:
         f7:b0:48:c6:eb:bd:76:f1:15:de:34:ef:47:0c:93:28:04:6f:
         57:02:a1:58:aa:e3:ba:d6:da:f4:6c:b0:e4:b7:21:c0:e2:f6:
         53:2f:71:91:92:be:1a:88:53:55:f7:53:6d:6b:63:78:59:0c:
         97:c9:49:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0YKRAlu7U7Pk+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
Zjg2OTIwMWYtM2RlMi00NGIyLTg0NDktMzUyMjkzMzg4OGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QRewDKB0+FoBeLKkE4k+PgpRec7G4/yermy
JyAk/kkFLRpdvYjlpqbg0MDbYJAOcL4VpSzaqkFd0pZG0FksKHiTw/24y3RcYa87
Ypvdmea3dUtvb6Xdip0r5w5GPQ/1udTuPjsk/ZLzDqAohm51S46z8qU7VJ8UNFCL
sbcy6XFJPO1mlUEkJfJYr87ZN9qwqbYQcQaYadsUHIZBceeGn1gLg/2VJ0BM/tn5
6zcCX2fsCZ9xHE7JfX9v8DIbqJfHmmXxhndmyy+FnAf9MqrnNA0cn7DynKABDL2d
BFLJOgPQBkMoaGfDlE4VTlXfbC0+39M067Bu5bSZ3zIBKWrKMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDaYRpt9YdGGenjQFwYOGYcEZnhGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNWZiNTQwODItMmNhMi0z
NjZlLWE0OGUtZTlhZDVkN2I4MTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHJQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABp2C3Mpat9Cq/yniDpcfXaP5TtCpZ+1jcyOojzi35WmTNosgrFzcQiu
oFD1jbA6BCTZXlOsLASqfkmG5GdJCvNGO7pUtzhNuJTaTSJdhI+R+bFmZayBl4Zd
/gF3I1No+wPLMsr8yPTl6WcE7NXtalm0WaGDQ//dy6AxnAbfu87yat5sRi446s7Y
x7dR/WoulxZnM0Xy457u4El5VV5hkdAO6b0u6mpoiDzLJz/7zCZv932nZy5XMLl3
hdPFWq5pYw7Ll5fzHvewSMbrvXbxFd4070cMkygEb1cCoViq47rW2vRssOS3IcDi
9lMvcZGSvhqIU1X3U21rY3hZDJfJSdY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:45:26 2025 by rpki-client