Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f848e92b-3253-36ae-b5e3-b2e783270580.roa
File:                     f848e92b-3253-36ae-b5e3-b2e783270580.roa (raw, json)
Hash identifier:          WosV27QU7T5PKzcTAHQ/AOxT6OUikJtCcpcSY/lxQQA=
Subject key identifier:   84:1E:59:61:A2:1E:B4:53:F2:F0:BE:57:D8:CD:1C:53:A5:85:56:7F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D184F3E89F3605795DAE10
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f848e92b-3253-36ae-b5e3-b2e783270580.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        68.187.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:84:f3:e8:9f:36:05:79:5d:ae:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=95124ff6-a40f-43d1-94e7-45bb1b961c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ba:5b:2a:0c:cb:a2:3d:9a:23:39:9d:ac:82:
                    f8:39:9c:62:b4:4a:c4:37:01:b4:97:0b:c5:21:5e:
                    cb:bc:4b:b1:db:86:fd:e5:44:5e:a1:31:31:83:dd:
                    f3:fa:65:b8:7e:97:78:db:d9:b7:a1:ce:b1:e9:d0:
                    c0:18:61:98:30:fb:f3:c0:2e:db:03:67:e6:f2:d4:
                    07:f6:70:0f:f0:2c:87:81:ab:02:87:59:29:5f:57:
                    ae:88:02:6f:2a:7f:a9:00:de:2a:20:b8:0f:81:c5:
                    62:52:6d:4b:b5:f3:88:fc:46:b9:47:75:62:b2:e4:
                    e1:88:3a:5d:f2:e9:4f:0c:9c:1d:9e:b1:42:6a:2f:
                    93:4a:0d:5f:3e:90:7d:5a:1c:73:bc:a5:16:a2:6d:
                    f3:2f:09:65:89:55:a0:b2:21:51:c6:e4:1c:fa:cf:
                    01:51:49:68:84:d0:72:6d:ad:d3:77:d5:c5:2f:e8:
                    3b:c4:f2:df:66:2b:1b:07:61:2a:96:e7:56:1a:9d:
                    95:19:11:9c:72:de:41:1e:2f:f6:f7:30:91:1f:e9:
                    e8:6a:a9:af:c1:c4:dd:c7:2a:ee:53:89:2e:1e:ae:
                    09:a3:23:15:4f:36:6d:af:69:fd:8b:d9:e4:85:27:
                    85:7c:a7:e4:92:5c:72:45:e6:5d:da:79:4a:b1:30:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1E:59:61:A2:1E:B4:53:F2:F0:BE:57:D8:CD:1C:53:A5:85:56:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f848e92b-3253-36ae-b5e3-b2e783270580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.187.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:19:7f:d9:41:e6:79:12:64:be:5f:f9:d5:d8:90:57:86:6e:
         a6:ae:e4:f0:7e:c8:97:5b:5c:d0:34:6a:ff:25:7b:96:aa:ff:
         7c:75:77:9f:c8:61:af:49:48:5a:94:ae:5c:98:a8:af:b5:10:
         a7:47:ec:d9:0e:db:e4:7a:bc:1f:43:af:1a:a7:08:39:bb:f8:
         b1:e0:4a:9d:97:3d:20:b5:ad:f1:5c:d5:8f:36:75:e8:a4:c8:
         3b:28:33:d2:5f:08:18:3f:9d:fd:b9:1d:2f:35:e0:de:ac:6d:
         94:f9:5b:fa:50:b9:bc:f4:a1:07:bd:9c:2f:7d:a7:5b:03:eb:
         fa:ad:8c:a1:cb:34:57:47:46:bf:3d:52:bb:51:90:8a:84:cf:
         7d:d8:e1:9f:66:34:32:42:75:22:a1:ee:5e:0b:6c:c9:22:9a:
         52:dc:ad:6b:f0:e5:34:ab:2f:23:10:9c:b2:1f:d8:30:bc:e5:
         4d:a9:23:93:d6:df:21:c6:5a:9d:f9:f7:dd:0f:30:b1:84:52:
         11:25:59:0e:9f:37:96:7e:ca:1a:60:81:78:9d:37:b3:c9:2a:
         22:2d:6a:af:75:17:9a:70:9e:a3:58:f4:9f:5e:04:72:04:45:
         b6:0b:af:6f:13:c4:64:15:ea:09:ad:30:14:a4:0a:64:3f:38:
         1e:ab:29:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0YTz6J82BXldrhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
OTUxMjRmZjYtYTQwZi00M2QxLTk0ZTctNDViYjFiOTYxYzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibpbKgzLoj2aIzmdrIL4OZxitErENwG0lwvF
IV7LvEux24b95UReoTExg93z+mW4fpd429m3oc6x6dDAGGGYMPvzwC7bA2fm8tQH
9nAP8CyHgasCh1kpX1euiAJvKn+pAN4qILgPgcViUm1LtfOI/Ea5R3VisuThiDpd
8ulPDJwdnrFCai+TSg1fPpB9WhxzvKUWom3zLwlliVWgsiFRxuQc+s8BUUlohNBy
ba3Td9XFL+g7xPLfZisbB2EqludWGp2VGRGcct5BHi/29zCRH+noaqmvwcTdxyru
U4kuHq4JoyMVTzZtr2n9i9nkhSeFfKfkklxyReZd2nlKsTDGHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIQeWWGiHrRT8vC+V9jNHFOlhVZ/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjg0OGU5MmItMzI1My0z
NmFlLWI1ZTMtYjJlNzgzMjcwNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLtQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACoZf9lB5nkSZL5f+dXYkFeGbqau5PB+yJdbXNA0av8le5aq/3x1d5/I
Ya9JSFqUrlyYqK+1EKdH7NkO2+R6vB9DrxqnCDm7+LHgSp2XPSC1rfFc1Y82deik
yDsoM9JfCBg/nf25HS814N6sbZT5W/pQubz0oQe9nC99p1sD6/qtjKHLNFdHRr89
UrtRkIqEz33Y4Z9mNDJCdSKh7l4LbMkimlLcrWvw5TSrLyMQnLIf2DC85U2pI5PW
3yHGWp35990PMLGEUhElWQ6fN5Z+yhpggXidN7PJKiItaq91F5pwnqNY9J9eBHIE
RbYLr28TxGQV6gmtMBSkCmQ/OB6rKck=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:23:19 2025 by rpki-client