Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d37e137-9b85-356b-b8d3-fe0187dde68c.roa
File:                     1d37e137-9b85-356b-b8d3-fe0187dde68c.roa (raw, json)
Hash identifier:          TjD+AXpfqnZNphPb0vePLwTkedtfbuFmM+krgKti6ME=
Subject key identifier:   0F:98:4A:0C:56:AA:DB:27:F2:89:B1:20:C9:D8:0F:76:46:1C:8F:1D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A172061021740289D6EF80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d37e137-9b85-356b-b8d3-fe0187dde68c.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.118.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:72:06:10:21:74:02:89:d6:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=0c023808-5501-454d-93c4-dc76243560be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:c5:7c:b0:fd:53:63:56:08:7f:c2:cd:ca:
                    c4:9b:4d:c4:fb:16:71:2e:59:80:ab:88:3c:df:ec:
                    54:2f:24:4f:aa:9d:13:60:ec:06:5e:5d:ba:86:b7:
                    ba:6e:3d:f9:cb:24:54:ca:fa:58:c0:9b:56:01:56:
                    40:37:b9:04:c2:24:16:62:90:af:3f:c9:7e:f9:9c:
                    be:bd:3d:15:4d:e7:4a:ad:c7:55:d7:43:f7:cd:25:
                    e8:72:62:69:eb:5b:b1:c8:96:bb:dd:cc:01:54:12:
                    5c:24:0a:a1:98:f0:6f:c9:6a:fa:12:ed:4d:3f:6d:
                    79:cd:75:ac:1e:f1:bf:c1:57:36:ec:8b:b8:4f:4d:
                    b7:83:04:89:03:46:e8:b6:5c:22:30:62:1a:97:a5:
                    25:68:d8:f1:03:1e:13:25:e7:cf:4b:dc:ed:b0:3a:
                    90:44:0f:2c:0c:69:9f:61:15:4d:9b:57:ff:a9:94:
                    2e:ae:0a:17:2c:c6:3b:a5:3a:f3:4c:44:c2:bc:f7:
                    7e:eb:2a:f6:e3:f9:00:7c:2c:4b:33:24:d1:cd:a7:
                    c5:65:26:53:c1:f5:17:49:35:bd:fd:19:fe:5c:6c:
                    8b:54:b4:40:3a:2e:01:94:a3:27:7a:6a:cd:cf:ef:
                    89:4d:2c:67:b7:4a:a7:70:ef:1a:b1:08:db:94:f3:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:98:4A:0C:56:AA:DB:27:F2:89:B1:20:C9:D8:0F:76:46:1C:8F:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d37e137-9b85-356b-b8d3-fe0187dde68c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.118.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:2e:74:94:0c:83:2a:3c:0f:b4:16:e7:5b:b8:7d:82:7c:7f:
         ea:0f:ea:0b:d9:7c:dc:e2:f0:22:e6:c2:2f:b3:03:56:32:38:
         e7:2b:a3:23:1f:4a:9b:6d:db:93:25:3e:28:80:74:7f:6b:91:
         4c:db:32:97:64:66:b4:df:cd:07:cf:5b:48:fc:96:f6:33:2d:
         86:21:e3:e8:35:2f:bb:d9:4c:69:06:48:62:6c:79:33:b9:ed:
         17:9a:4a:4a:87:64:98:75:85:be:67:ef:88:77:28:6d:b4:f9:
         44:4a:18:45:ec:8d:c2:12:ee:9d:0c:34:12:1d:7b:4a:21:7f:
         43:ef:9f:71:84:ff:93:40:19:07:45:c2:49:d2:35:21:51:3e:
         63:7b:73:29:18:bd:fb:ee:dc:4d:f4:9f:1b:eb:e9:b8:0b:27:
         eb:08:c8:c3:9a:7d:b6:38:e6:90:d2:b6:9e:71:87:9e:01:71:
         78:d1:8e:b3:53:82:21:9c:e3:fa:f5:6f:ae:7f:a9:a0:2c:c1:
         d0:39:ed:21:e4:94:66:23:ab:21:1c:f2:69:c9:15:40:78:96:
         00:ee:18:72:ca:96:54:36:ca:82:2e:90:c9:a1:10:c7:e8:c5:
         e0:b9:d5:36:66:e1:7b:89:da:37:97:5e:a0:c3:73:b1:5f:09:
         2e:59:7f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:31 2024 by rpki-client on console-ams.rpki-client.org