Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa
File:                     2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa (raw, json)
Hash identifier:          dv1H7u1gZMNlB0oIFjocbhkNc3PUy8PjwqFJgEoZ9ic=
Subject key identifier:   0B:F0:8F:0F:F3:45:9C:EB:5E:01:01:5B:DD:8A:B2:D2:26:93:FB:B6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A16784AB6F0C5332DB3C10
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.113.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:67:84:ab:6f:0c:53:32:db:3c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=db500ce5-c2ee-46b8-b51d-94843363079e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:db:4c:1a:14:91:43:15:8c:af:f0:53:3a:
                    38:f8:ff:ca:d6:58:99:e7:3a:5c:26:e4:b2:56:f5:
                    88:21:23:a4:1f:9e:95:7a:8b:77:8f:97:27:26:67:
                    a5:f9:14:ff:d5:15:8d:80:4b:1f:34:c8:85:25:75:
                    b4:28:b6:b9:85:85:fe:fd:e8:73:3d:be:ad:e6:cf:
                    36:db:3a:f5:9d:96:28:1c:80:5c:42:96:06:77:b2:
                    df:62:60:e7:10:b7:44:3f:f9:6b:83:a9:c3:39:64:
                    a2:e5:9c:4d:05:40:e6:c7:2b:1d:15:f6:57:48:36:
                    1b:2c:6c:eb:87:fb:32:9f:fc:4a:67:3e:e4:47:29:
                    54:19:ff:c4:37:9e:db:d7:6b:fe:c3:3e:2c:e6:8f:
                    cd:42:89:e0:75:4e:6e:da:71:14:61:38:51:88:43:
                    57:94:2c:df:48:d1:64:a1:d4:6c:0c:0c:b6:64:e4:
                    e3:ef:eb:13:e3:d6:23:04:21:75:07:eb:5a:4e:42:
                    8a:ba:93:b0:ab:ed:9c:81:02:30:6c:6c:b3:3b:45:
                    35:bc:a4:3f:c5:12:4d:b7:c4:e6:b1:81:f9:6a:73:
                    b1:4d:a4:0b:5e:64:09:d8:f7:67:61:ca:4f:33:75:
                    bf:cb:18:a8:fe:cd:aa:47:e6:2c:25:75:ba:05:fb:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F0:8F:0F:F3:45:9C:EB:5E:01:01:5B:DD:8A:B2:D2:26:93:FB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.113.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:ca:17:60:aa:23:b6:a4:95:83:14:93:d9:9c:f1:16:a6:3b:
         1c:73:37:8f:e5:8a:e8:db:27:45:d2:72:2d:b8:d6:bb:c5:ce:
         46:a2:48:72:74:fe:9a:0f:81:0f:ac:03:f6:b7:7f:6b:4c:e8:
         6c:a9:f9:c2:15:90:66:51:4d:f4:c4:c3:8b:0b:f4:c5:8e:17:
         d9:00:9b:3f:12:d3:93:00:9a:50:ce:2a:49:81:94:b9:d1:6d:
         18:9b:88:b3:e6:b5:a6:3d:07:c6:5c:63:4f:eb:dd:02:54:0c:
         7a:41:23:b8:38:3a:e1:d5:73:af:a3:91:ef:58:3e:75:4e:50:
         bd:8b:11:1e:cf:73:d3:a3:28:40:87:d0:24:60:4d:40:1a:ce:
         67:35:3f:3f:c9:e9:14:f6:b6:0a:70:7d:36:5e:72:61:f7:01:
         23:f4:49:1c:84:87:46:a5:0e:ee:e4:af:02:41:7e:ee:e4:f6:
         ae:02:66:b2:b0:08:5f:00:5b:97:b0:bc:f3:83:90:02:3d:cd:
         12:9a:b7:0b:64:0f:17:8a:2b:da:d3:b6:60:b6:12:67:86:a6:
         4b:1e:39:fd:27:83:48:02:99:65:f8:5b:07:4b:2f:2b:b8:97:
         55:0f:5d:80:f2:d6:90:9c:39:20:b5:c5:80:61:34:b0:ae:42:
         dc:5a:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:05 2024 by rpki-client on console-fra.rpki-client.org