Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49bf6b1f-e31e-3f18-b6a1-b4f867a469b8.roa
File:                     49bf6b1f-e31e-3f18-b6a1-b4f867a469b8.roa (raw, json)
Hash identifier:          DSCa1/6RiblVeSHvFczzlIiI9xs3TJsQfqsDewEoFGk=
Subject key identifier:   26:AE:FE:E7:D9:B8:E5:5D:BC:82:27:C9:44:FE:30:90:08:10:E2:6A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732ABA6F57
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49bf6b1f-e31e-3f18-b6a1-b4f867a469b8.roa
Signing time:             Tue 07 Jul 2020 19:22:08 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Sat 06 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        40.74.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:ba:6f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Apr  6 04:00:00 2030 GMT
        Subject: CN=45955843-49cc-420a-8c00-50e1342bb595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:bc:97:b2:54:9e:c6:a2:dd:7d:f6:63:ca:
                    a3:3c:b2:5c:0f:15:49:f8:d7:67:09:69:62:d8:04:
                    9f:30:5b:8f:85:80:36:ec:5a:20:ff:b0:df:bc:cf:
                    ad:6b:85:af:33:61:02:01:c1:53:57:b6:8c:46:33:
                    58:f1:68:61:de:7e:3d:91:9a:e7:02:83:75:ce:a2:
                    43:b6:af:b6:0d:f3:64:81:bd:3e:f1:83:4f:18:0c:
                    64:b1:65:03:f5:72:53:b7:f3:a3:d7:e4:ae:77:ce:
                    ed:97:7b:1d:42:1c:df:ac:d5:11:a1:8c:d7:87:02:
                    bf:a2:19:38:de:2f:bf:48:e1:42:d1:74:d6:e0:f3:
                    fa:d0:8d:c4:8c:f5:4c:0d:40:8b:00:4b:af:37:3b:
                    63:2e:40:bf:45:16:e6:04:ea:02:ca:58:2f:e5:a5:
                    98:cc:5f:20:49:d4:84:8b:74:cd:2b:80:64:87:87:
                    d6:4b:7e:32:01:0b:93:7d:e9:6f:55:5a:69:a3:0e:
                    78:73:4f:fb:80:73:51:e3:ba:11:fa:74:0e:f9:e0:
                    e7:e2:5f:90:22:a7:3f:45:c0:db:67:30:bf:40:a6:
                    30:3c:9a:1b:ea:32:eb:8f:02:e5:87:de:23:b7:8d:
                    5b:b9:a6:3f:b7:f8:21:c1:62:40:b1:ad:ab:ae:21:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AE:FE:E7:D9:B8:E5:5D:BC:82:27:C9:44:FE:30:90:08:10:E2:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49bf6b1f-e31e-3f18-b6a1-b4f867a469b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.74.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:82:26:64:c3:54:58:d1:9d:f2:98:0e:31:d6:88:9b:d2:
         c8:a1:ff:43:59:80:a4:3a:54:ba:00:0d:25:dd:cc:0f:3b:25:
         8a:bc:3c:14:b5:f0:7e:b8:14:f7:b2:09:ed:96:5b:4c:8c:86:
         3b:32:ef:f8:63:43:3d:f9:b9:a9:17:b9:ed:82:43:24:34:1e:
         46:1d:8a:db:d2:cc:07:aa:94:d5:c9:96:b6:cc:28:9b:28:25:
         c0:b6:7f:9d:62:47:4d:5c:bc:da:18:7c:23:76:60:d7:0e:3d:
         34:58:63:78:67:d6:9f:34:26:b4:ab:e9:aa:a4:9f:71:7e:d5:
         8d:99:61:ce:17:51:71:50:e1:a8:2d:69:4e:8d:85:b8:f7:71:
         a6:d5:73:f6:36:fa:b5:d8:31:cf:18:a8:1a:a0:f9:ed:62:06:
         41:6a:2e:2a:e6:5b:2f:3d:2a:fa:c1:68:2f:9c:a2:af:3d:0a:
         ad:02:d2:7c:cd:f7:d5:1d:05:21:1d:e5:b4:23:18:ee:9b:ce:
         e4:8e:3c:ac:e2:59:58:69:d6:98:e2:fd:ae:ef:1a:93:9c:e1:
         31:75:d4:b5:40:76:80:e8:cd:a4:cf:cf:07:33:e1:e4:71:ed:
         98:49:18:d4:54:25:a0:09:5f:98:0b:ed:98:67:63:1a:d3:a9:
         80:08:e8:3f
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcyq6b1cwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA3MDcwNDAwMDBaFw0zMDA0MDYwNDAwMDBaMC8xLTArBgNVBAMTJDQ1
OTU1ODQzLTQ5Y2MtNDIwYS04YzAwLTUwZTEzNDJiYjU5NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKCPvJeyVJ7Got199mPKozyyXA8VSfjXZwlpYtgE
nzBbj4WANuxaIP+w37zPrWuFrzNhAgHBU1e2jEYzWPFoYd5+PZGa5wKDdc6iQ7av
tg3zZIG9PvGDTxgMZLFlA/VyU7fzo9fkrnfO7Zd7HUIc36zVEaGM14cCv6IZON4v
v0jhQtF01uDz+tCNxIz1TA1AiwBLrzc7Yy5Av0UW5gTqAspYL+WlmMxfIEnUhIt0
zSuAZIeH1kt+MgELk33pb1VaaaMOeHNP+4BzUeO6Efp0Dvng5+JfkCKnP0XA22cw
v0CmMDyaG+oy648C5YfeI7eNW7mmP7f4IcFiQLGtq64hm0ECAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBQmrv7n2bjlXbyCJ8lE/jCQCBDiajCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzQ5YmY2YjFmLWUzMWUtM2Yx
OC1iNmExLWI0Zjg2N2E0NjliOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAShKMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQAvkIImZMNUWNGd8pgOMdaIm9LIof9DWYCkOlS6AA0l3cwPOyWKvDwUtfB+uBT3
sgntlltMjIY7Mu/4Y0M9+bmpF7ntgkMkNB5GHYrb0swHqpTVyZa2zCibKCXAtn+d
YkdNXLzaGHwjdmDXDj00WGN4Z9afNCa0q+mqpJ9xftWNmWHOF1FxUOGoLWlOjYW4
93Gm1XP2Nvq12DHPGKgaoPntYgZBai4q5lsvPSr6wWgvnKKvPQqtAtJ8zffVHQUh
HeW0Ixjum87kjjys4llYadaY4v2u7xqTnOExddS1QHaA6M2kz88HM+Hkce2YSRjU
VCWgCV+YC+2YZ2Ma06mACOg/
-----END CERTIFICATE-----
Generated at Sun Jun 2 14:33:32 2024 by rpki-client on console-fra.rpki-client.org