Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2003c81d-6c5f-3260-9c16-9b7fd8818fb1.roa
File:                     2003c81d-6c5f-3260-9c16-9b7fd8818fb1.roa (raw, json)
Hash identifier:          kQWj4tFvj/aqZeCKGCm8zHXcZaqn7BaLP4Mi/UdPYn0=
Subject key identifier:   2A:20:0C:AB:B9:3F:32:F3:05:A4:0D:B7:7E:60:42:6B:96:70:88:F3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E0A5362719F65043BF980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2003c81d-6c5f-3260-9c16-9b7fd8818fb1.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        68.185.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:0a:53:62:71:9f:65:04:3b:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=a50fd48f-511f-47bd-ba56-0606ed65e2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:bf:76:ef:ca:ef:51:19:81:31:c5:92:66:
                    c6:f2:de:13:c0:41:b9:5a:5c:1f:e6:26:6f:3d:8b:
                    0b:19:45:43:8f:9b:9f:d6:18:16:e8:f4:cd:e5:62:
                    fb:ae:bd:16:8c:3e:8e:e6:03:c2:00:14:50:97:05:
                    76:69:68:64:5f:5f:90:3b:cb:65:c0:f9:80:c4:d7:
                    54:71:95:0a:9e:55:b8:c4:08:d0:2d:93:c7:90:3d:
                    61:ed:98:7a:8c:38:65:c3:01:8c:88:52:17:17:dd:
                    c3:6a:5b:55:6f:37:19:8b:80:06:61:0d:fd:a9:31:
                    c1:99:f9:3f:b0:e0:f2:99:f2:10:1c:7a:48:da:04:
                    12:7c:a7:6f:93:8e:2b:6e:fa:3d:29:27:a1:da:07:
                    69:fc:cb:c7:76:18:86:4f:b8:0b:61:f3:7b:2e:13:
                    7d:8e:23:53:36:38:cd:fd:46:0c:e5:cb:74:32:93:
                    f5:a4:f0:9a:40:e1:ae:68:38:4a:ab:fc:e5:d8:24:
                    6f:0e:23:b2:74:35:9b:43:50:e1:84:b3:82:97:35:
                    e2:38:e6:f3:81:be:a0:da:27:e6:7b:c4:a1:ae:37:
                    86:59:ea:a6:8f:6d:e9:dc:a3:6c:ae:ae:51:3d:07:
                    62:1d:0a:a0:39:14:13:d6:80:ad:6e:1d:90:cc:61:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:20:0C:AB:B9:3F:32:F3:05:A4:0D:B7:7E:60:42:6B:96:70:88:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2003c81d-6c5f-3260-9c16-9b7fd8818fb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.185.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:65:7d:9b:70:57:d5:1f:24:35:fb:9b:51:db:90:53:6d:fc:
         84:9d:f5:16:c0:51:d3:61:0c:b1:af:3d:0d:6d:4d:44:86:de:
         7d:36:0a:5a:41:c9:82:51:c7:c6:de:82:79:76:aa:f6:69:39:
         b2:1c:ef:be:6b:ec:af:72:fb:99:0b:5e:2d:41:75:f9:31:9f:
         82:2f:1a:c4:6e:7c:63:dc:40:f6:9f:b2:8d:a8:70:6f:f4:2b:
         90:64:25:b3:78:63:6a:c4:6c:9b:6a:c0:a0:07:e5:c9:dd:9a:
         21:9e:79:e3:87:b8:e0:77:3a:94:13:16:07:22:35:bc:29:61:
         7b:2d:1d:6d:19:f0:5a:44:0e:04:40:19:f1:53:93:2a:7f:a8:
         d1:92:86:95:99:ad:55:e3:86:b1:0a:84:dc:9b:55:be:8a:20:
         05:5c:ad:8a:d8:90:6c:63:a8:28:e8:a5:a8:8b:6a:6d:3e:f7:
         f0:36:24:ff:fd:72:8f:f7:f7:be:0a:06:10:f3:cf:4f:52:76:
         e2:17:1a:99:d9:f2:46:73:46:b8:4a:f8:1b:f9:6c:7f:55:52:
         07:86:6d:89:d2:22:06:df:be:2d:15:39:40:38:61:72:58:a6:
         f0:1c:99:bf:ed:80:9a:a7:63:26:2c:58:6f:f8:db:31:da:da:
         29:0a:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:03:48 2024 by rpki-client on console-fra.rpki-client.org