Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/049de3f3-c194-3d5e-92c9-54fbca167df6.roa
File:                     049de3f3-c194-3d5e-92c9-54fbca167df6.roa (raw, json)
Hash identifier:          Bacm6jkTI3AFV/F2XmDUlwMkdVQv2LbycTnSfrkx3OY=
Subject key identifier:   CB:E6:0D:3F:19:FC:82:48:47:BE:C2:03:B8:D5:22:47:D8:1A:09:FD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584953C4197D281B1058A8B8B7C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/049de3f3-c194-3d5e-92c9-54fbca167df6.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     16787
IP address blocks:        68.114.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:19:7d:28:1b:10:58:a8:b8:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=d2ee959e-f1a9-44c1-b15b-4c33e3ba3f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:aa:2b:a4:6a:5e:5f:9e:73:d0:d9:f7:5f:
                    ba:ae:26:0c:8f:5c:1f:c1:ef:76:c0:19:7a:58:f0:
                    b7:70:aa:ba:cb:1a:6f:07:3d:fc:f6:3b:8e:34:f6:
                    92:f1:da:7c:71:33:62:a2:c8:42:6a:79:73:60:5e:
                    26:3e:9c:fe:a0:5d:e3:db:38:2a:40:0d:58:87:fb:
                    ec:fc:79:e8:4c:ae:ea:67:f0:33:e4:85:1c:77:9a:
                    bf:f3:ec:64:05:b1:3d:e6:cc:f8:b1:17:64:79:f5:
                    5b:33:10:14:a9:f6:25:d8:1f:26:41:47:b2:92:57:
                    d6:9b:e3:68:45:e7:a4:b6:db:b9:6b:3c:0a:4e:28:
                    33:25:e5:79:06:58:0a:4d:43:c7:ca:19:0c:61:14:
                    f8:1b:a4:32:79:57:c2:fd:7e:02:36:79:a5:ec:7d:
                    80:06:8b:c8:f2:cc:06:7c:f7:95:3e:6b:62:c6:7f:
                    8c:9f:f6:a6:ae:36:42:a0:ad:1d:16:a4:7d:08:b7:
                    dd:f7:60:3c:cf:36:7d:55:7b:0c:4a:7b:fe:7c:55:
                    d9:ea:50:f3:5a:da:b1:74:56:09:ae:62:1d:6b:1f:
                    f6:55:ce:92:f8:a4:94:2d:0a:45:57:f5:63:c5:8d:
                    2e:bb:4f:05:76:be:0c:33:6e:72:49:db:c0:a7:3e:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E6:0D:3F:19:FC:82:48:47:BE:C2:03:B8:D5:22:47:D8:1A:09:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/049de3f3-c194-3d5e-92c9-54fbca167df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.114.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d5:68:19:e1:bc:8e:e8:3b:92:5b:c7:48:08:b9:42:58:2b:
         71:38:66:07:9d:1a:1c:4d:68:5d:bf:80:dc:35:f9:4f:db:17:
         45:f6:8d:5d:94:7a:9b:2d:e4:01:d7:e4:db:1f:88:2c:c1:b0:
         50:8a:fd:fe:1e:17:a6:89:01:63:b4:fd:60:b5:dc:af:5a:1f:
         2a:3f:96:06:8a:98:f6:74:e0:cf:98:b3:65:f3:b6:81:a1:ec:
         80:1a:5c:2c:60:0f:16:8e:29:d0:a1:58:a9:03:a4:8b:17:e5:
         f5:01:7f:d3:81:f8:bc:00:b1:42:87:25:bf:e4:e7:51:8e:17:
         4b:cb:07:57:58:07:e1:27:85:0c:22:fa:ce:9b:a1:4f:fc:99:
         9a:af:b6:f6:4b:d6:a9:e0:6d:7d:ae:fc:95:4e:60:f0:57:d8:
         0c:f8:f0:c3:73:4d:35:08:b7:aa:2f:14:28:a4:cb:f0:c5:65:
         53:93:72:27:b0:c2:68:bd:47:a8:05:a9:9f:c0:a1:84:d0:71:
         6c:21:b7:8b:cd:98:5c:fc:62:19:4d:b8:20:43:07:94:f9:f2:
         b8:05:7e:9d:93:72:48:ff:c5:e1:1a:87:a6:af:c0:f2:ef:85:
         8b:8f:5d:8e:ab:c3:f1:84:3c:bf:4b:0a:6e:39:f1:96:9a:d3:
         dc:a1:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:28 2025 by rpki-client