Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/110567ef-b0ad-3eeb-b272-26d1a1140e02.roa
File:                     110567ef-b0ad-3eeb-b272-26d1a1140e02.roa (raw, json)
Hash identifier:          XD9VBbaMm9EtUXQkJUu8tGmMqmHye5X0hvPhLfVdww0=
Subject key identifier:   66:2C:1D:A3:CB:69:F3:58:CF:BA:EF:02:5D:9F:60:26:D9:33:6C:B5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A171824EBD722CEB9EDF20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/110567ef-b0ad-3eeb-b272-26d1a1140e02.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.191.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:71:82:4e:bd:72:2c:eb:9e:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=529f29b2-1a0f-4f73-a7e9-0ee18d89492a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:63:42:f8:3b:ed:39:2f:8e:31:f4:c6:1e:
                    d9:7e:19:21:48:98:fe:18:b0:ad:98:bf:01:af:b4:
                    94:39:4a:24:9d:b4:70:f2:c6:13:bd:b0:6e:fc:6a:
                    47:c5:20:98:ed:ad:29:0e:61:21:75:7e:51:97:65:
                    83:56:7f:f0:da:eb:4a:c8:de:eb:62:5d:81:84:80:
                    fb:16:77:a9:dd:92:19:97:84:ce:3a:a1:f9:fb:9b:
                    10:31:37:5f:75:6c:8d:b5:7f:af:52:06:ff:72:b6:
                    5d:d0:2a:81:d6:09:ac:c5:61:b0:24:aa:38:0d:83:
                    b4:02:1c:28:96:1e:3d:0d:8b:13:35:17:88:3e:46:
                    91:48:0c:e8:88:e8:d5:f9:49:59:ae:af:86:39:fb:
                    38:52:f0:c0:53:f0:69:e9:06:9d:ba:ad:1e:9c:51:
                    5e:ab:0e:71:0b:ec:1d:0d:2e:36:85:12:2d:87:dd:
                    b5:1e:e8:f7:8c:71:ce:e4:19:80:fc:ca:2b:a1:33:
                    be:95:47:c3:55:09:22:aa:c5:6f:62:19:34:10:2b:
                    6a:94:13:fc:d9:91:6a:f5:b7:3b:63:96:43:48:aa:
                    ba:fa:15:ac:30:36:2f:fc:e0:0f:ea:a2:aa:2b:0c:
                    3a:5e:ff:c1:61:32:06:f9:81:91:25:5e:1a:d2:7e:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2C:1D:A3:CB:69:F3:58:CF:BA:EF:02:5D:9F:60:26:D9:33:6C:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/110567ef-b0ad-3eeb-b272-26d1a1140e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.191.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:5e:77:d3:3d:bb:21:d2:a9:09:00:56:f4:c9:b5:d9:ed:
         22:13:ed:9a:91:ee:6a:37:a4:51:e8:5f:5a:69:33:06:b6:c2:
         d5:8f:8b:61:32:21:52:6a:fd:6b:54:fe:8e:0a:1d:e6:b9:2e:
         5c:c5:ce:9a:c6:9b:57:3b:cd:94:d9:23:f8:1b:db:d3:3e:a6:
         26:e2:03:c1:68:73:fb:0e:bf:1c:1a:a4:50:6b:52:52:d0:aa:
         a6:ce:bb:00:2b:ca:6d:87:04:c8:a1:8e:25:d5:01:57:10:7c:
         0d:6c:8b:0d:7f:e5:c2:a1:1c:0d:5e:95:a6:87:3b:07:62:15:
         84:8a:9c:26:fb:92:f2:db:d4:ad:86:19:b7:38:05:8a:64:a4:
         a2:b5:10:04:33:c4:4f:6c:a2:48:b0:b6:fb:36:84:4b:4b:17:
         bd:11:ea:67:e0:d9:6f:99:5e:3d:b3:97:23:7c:ce:36:3e:3c:
         c3:26:af:4c:a6:e8:33:18:d1:b3:0a:15:cc:8c:44:5d:69:73:
         18:99:da:a1:77:66:6e:fc:60:7f:ab:15:d8:26:1c:90:b0:60:
         a3:1f:2c:fd:5c:d6:04:a6:9c:73:f2:58:b0:e8:be:a1:45:1e:
         b3:17:b3:f1:55:64:a2:ad:84:0d:18:71:26:a6:94:ec:80:64:
         ca:af:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:29 2024 by rpki-client on console-ams.rpki-client.org