Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa
File:                     86dd6601-3722-3e53-99be-3f9149517813.roa (raw, json)
Hash identifier:          tmTCu3vAkGlgEw+AJud8e1XnBdT3phCG/H1sogVQ+R4=
Subject key identifier:   1D:08:94:8D:F8:04:E8:25:02:7F:5F:D5:8A:F2:53:45:12:81:47:A4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D18145BD72E406B30D1E50
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        68.191.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:81:45:bd:72:e4:06:b3:0d:1e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=76eb0ce6-36b2-4f2d-836a-d997e7beec26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:50:aa:46:d6:c6:db:8a:ba:30:eb:b7:26:
                    55:1f:f5:0e:92:e5:4b:e9:28:b7:3f:f3:37:5a:7b:
                    90:98:b8:19:4e:f0:47:8d:2a:5a:eb:1e:4e:f1:5c:
                    b5:53:7a:ee:9b:ee:c2:c3:9f:f5:f4:23:a2:ba:f2:
                    ff:a3:65:b4:fc:27:f6:8f:50:00:ef:dd:20:c2:43:
                    1c:b3:c9:2b:42:8e:89:e8:d6:87:7e:f1:35:da:fb:
                    d0:cb:84:1f:d0:cb:ec:73:64:3b:88:42:81:b8:55:
                    50:48:66:d3:02:3c:02:87:64:fd:a5:65:81:c3:0f:
                    56:a8:0d:01:20:d0:fe:a2:9b:ea:23:a4:31:b9:b3:
                    fc:05:57:3a:94:b7:ca:59:dd:7a:21:70:11:7b:84:
                    7c:8b:ba:84:8d:77:d7:f1:c2:b1:5a:ea:27:48:00:
                    09:c4:80:91:ce:8f:24:16:85:82:25:81:1e:86:19:
                    1b:7a:a3:9c:7e:b1:db:7b:3e:1c:0e:50:83:88:88:
                    a1:df:cf:a5:b5:50:5d:91:eb:e9:ae:05:f5:8f:40:
                    70:36:e7:71:6f:64:c3:0d:7e:09:22:9d:1e:e3:12:
                    99:c1:56:7e:9e:c3:04:cc:c1:6b:97:f8:a2:9c:4b:
                    fd:14:c4:b8:31:65:99:40:8f:4d:8e:0b:4e:cd:5e:
                    16:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:08:94:8D:F8:04:E8:25:02:7F:5F:D5:8A:F2:53:45:12:81:47:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.191.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fe:e3:d1:4b:8a:85:f2:23:eb:ea:75:ad:32:0d:8b:f1:82:
         58:d8:45:89:a2:3f:9c:b7:d5:9f:cc:3d:5b:58:15:e8:eb:83:
         9d:86:54:53:17:12:04:0d:db:4f:5d:b2:ef:71:2a:44:48:d8:
         36:45:e5:a0:e0:ba:a6:4a:79:d4:ad:0b:0a:51:9e:53:ac:b6:
         29:ff:38:28:2a:e9:fe:17:75:f7:35:28:aa:b6:61:bc:01:d8:
         75:45:32:f3:f0:50:a6:57:15:39:a9:e7:e5:66:bd:23:46:e0:
         b5:5d:ab:3f:63:08:6f:ef:af:c9:c5:44:15:e2:9f:1c:88:bc:
         48:9e:55:3b:f0:ba:ee:d6:47:70:1e:5b:2c:f7:ae:bc:91:98:
         05:99:9a:6d:aa:54:0d:4f:34:40:47:fe:8f:25:58:67:fe:dc:
         b7:91:c5:51:e9:65:2c:49:86:25:cc:64:87:ce:86:99:61:cc:
         36:56:f2:1a:19:21:93:35:72:74:7e:9c:ac:e0:6d:f5:78:a0:
         94:34:0e:d2:e7:4b:4e:b5:2d:48:60:4c:a1:f7:87:4f:20:3b:
         d8:24:58:77:0b:81:ba:65:75:78:f6:01:9a:60:07:95:69:34:
         02:3a:e7:ed:f4:30:47:71:80:61:fd:dc:80:59:32:4b:72:d8:
         bb:34:e1:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0YFFvXLkBrMNHlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NzZlYjBjZTYtMzZiMi00ZjJkLTgzNmEtZDk5N2U3YmVlYzI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqVQqkbWxtuKujDrtyZVH/UOkuVL6Si3P/M3
WnuQmLgZTvBHjSpa6x5O8Vy1U3rum+7Cw5/19COiuvL/o2W0/Cf2j1AA790gwkMc
s8krQo6J6NaHfvE12vvQy4Qf0Mvsc2Q7iEKBuFVQSGbTAjwCh2T9pWWBww9WqA0B
IND+opvqI6QxubP8BVc6lLfKWd16IXARe4R8i7qEjXfX8cKxWuonSAAJxICRzo8k
FoWCJYEehhkbeqOcfrHbez4cDlCDiIih38+ltVBdkevprgX1j0BwNudxb2TDDX4J
Ip0e4xKZwVZ+nsMEzMFrl/iinEv9FMS4MWWZQI9NjgtOzV4WkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0IlI34BOglAn9f1YryU0USgUekMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODZkZDY2MDEtMzcyMi0z
ZTUzLTk5YmUtM2Y5MTQ5NTE3ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL9wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHr+49FLioXyI+vqda0yDYvxgljYRYmiP5y31Z/MPVtYFejrg52GVFMX
EgQN209dsu9xKkRI2DZF5aDguqZKedStCwpRnlOstin/OCgq6f4Xdfc1KKq2YbwB
2HVFMvPwUKZXFTmp5+VmvSNG4LVdqz9jCG/vr8nFRBXinxyIvEieVTvwuu7WR3Ae
Wyz3rryRmAWZmm2qVA1PNEBH/o8lWGf+3LeRxVHpZSxJhiXMZIfOhplhzDZW8hoZ
IZM1cnR+nKzgbfV4oJQ0DtLnS061LUhgTKH3h08gO9gkWHcLgbpldXj2AZpgB5Vp
NAI65+30MEdxgGH93IBZMkty2Ls04X0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:25:25 2025 by rpki-client