Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2316228b-f3ea-3c5a-8231-ab02bf713e70.roa
File:                     2316228b-f3ea-3c5a-8231-ab02bf713e70.roa (raw, json)
Hash identifier:          zSrMwg+Vdp9/G+ttbySG1j9M7IcJyYbupv8ZSPzYHL4=
Subject key identifier:   B1:60:65:7A:FF:1A:F0:46:AD:F1:4E:50:AE:5D:4E:63:67:CB:3A:98
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EA983DC964B447B92AF00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2316228b-f3ea-3c5a-8231-ab02bf713e70.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        68.190.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:a9:83:dc:96:4b:44:7b:92:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=e2718ebc-6fb8-43da-974a-b2dfd5ff5fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b1:0d:db:d7:23:a9:b8:b0:a8:0b:a9:58:1e:
                    6f:a1:1e:af:8a:7b:bc:84:85:58:e7:07:68:5a:1a:
                    c6:75:38:44:21:bf:11:15:39:81:4a:9c:23:0a:9b:
                    34:ea:87:7e:93:b1:e0:fc:db:84:14:1e:d2:50:ca:
                    87:39:8e:cd:90:71:46:a1:bc:58:af:9e:27:f7:c3:
                    46:b7:5a:4f:cd:02:6b:a5:50:47:b4:70:46:69:ea:
                    b4:cb:d2:1a:f4:2b:0a:73:47:2b:61:3e:c2:eb:e2:
                    53:0f:14:54:1d:20:2e:a7:ee:82:d8:34:92:91:ab:
                    da:8a:18:a0:2e:b7:4f:23:13:55:ff:47:94:ec:6c:
                    ea:4d:33:e8:c6:9f:49:2d:45:c6:6e:50:a8:f4:ac:
                    6f:44:db:4d:47:4d:c8:7c:60:61:48:52:8f:25:77:
                    f1:02:19:73:5f:0e:56:3f:02:c5:a1:76:6b:ce:c9:
                    cb:83:af:bb:e2:f6:c7:b0:29:1b:29:5d:04:8b:39:
                    2c:fd:10:23:39:e0:c2:83:c2:4b:85:21:e0:fb:3d:
                    15:95:9a:ee:1c:36:2e:87:bf:76:ab:bb:e6:dc:ff:
                    fc:3e:29:8a:a1:2b:36:11:a1:b5:80:d2:7b:5e:d5:
                    50:9c:25:de:33:51:4d:cc:28:3a:62:3a:61:4f:99:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:60:65:7A:FF:1A:F0:46:AD:F1:4E:50:AE:5D:4E:63:67:CB:3A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2316228b-f3ea-3c5a-8231-ab02bf713e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.190.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e1:15:0d:b1:1f:58:3c:30:41:d2:4c:9f:f0:b6:be:0c:1a:
         b0:a5:60:8b:3b:f4:36:83:5e:1c:57:73:a0:b9:1b:fc:e0:11:
         c1:ba:d6:d7:e9:4e:05:cc:cc:eb:b7:ff:39:d4:1f:8e:bd:d7:
         4d:3a:0d:c6:ab:28:e6:6a:02:32:dd:da:c1:37:56:a2:fd:74:
         e0:9b:81:3d:55:42:96:f6:26:2d:fe:84:be:c1:a1:fa:50:e4:
         b6:1e:d3:78:eb:b4:97:c6:8f:51:4e:a8:21:23:ea:56:26:c6:
         0d:d2:35:d5:0b:da:9b:71:e7:19:b8:c4:6e:ca:95:6e:90:87:
         13:13:87:9b:fd:ce:25:40:e1:dd:55:a3:52:c9:33:aa:3c:e5:
         fb:af:08:c4:9a:25:35:7c:26:f7:27:56:91:f9:7f:24:5f:7a:
         29:5b:b2:6d:b9:c6:50:62:45:8f:8d:8f:15:85:61:07:be:a3:
         3b:7b:4c:51:fb:3f:0a:82:f6:5c:e5:3f:89:c0:89:05:b3:7f:
         27:d2:d4:64:04:78:43:fc:48:37:58:38:96:71:3b:b5:27:ac:
         7d:12:4c:dc:58:d2:ec:b0:47:d5:61:65:bd:17:96:46:cb:82:
         26:5d:bb:97:c6:83:ba:68:48:e3:09:cd:72:f4:49:0c:f4:c7:
         de:71:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:45:49 2024 by rpki-client on console-fra.rpki-client.org