Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2df9d1cf-2745-38a1-b4f2-8f3ae2e3071e.roa
File:                     2df9d1cf-2745-38a1-b4f2-8f3ae2e3071e.roa (raw, json)
Hash identifier:          AxQ70dNhBuaidEUHpdMeRFui3eNxyW7FyDugd/nocSI=
Subject key identifier:   DF:75:60:48:50:DA:98:73:7C:1D:53:C0:83:56:07:64:64:D4:BC:78
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A16E0DA33ED9BD7CA2CE80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2df9d1cf-2745-38a1-b4f2-8f3ae2e3071e.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.115.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:6e:0d:a3:3e:d9:bd:7c:a2:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=d5e2c0b7-d33a-4e17-98eb-2467013fa382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:16:0d:b1:6d:f1:8c:78:8b:78:81:26:5b:45:
                    72:3f:3f:52:05:15:c5:f0:d7:e4:22:0a:23:11:0d:
                    f1:40:cf:b0:05:3e:82:f4:02:36:07:92:87:b2:ff:
                    68:fd:53:c0:de:ed:17:86:c2:ca:a2:1c:3b:5b:db:
                    58:84:5a:67:c2:f1:cd:48:d8:48:6c:10:fe:c2:b6:
                    59:11:97:8c:e4:57:3b:f5:db:a8:36:2b:83:78:c8:
                    24:bd:46:5a:d6:5a:4c:35:71:d4:0e:c2:77:e8:2a:
                    62:51:be:91:80:c1:c2:2d:6d:ba:0d:25:df:6a:48:
                    64:65:7e:c3:b9:4f:5f:99:bb:fd:9a:15:f9:d4:68:
                    58:d3:a3:fa:ae:51:36:ec:84:97:63:42:9b:e6:01:
                    6a:ba:8c:31:75:82:9c:03:4e:80:32:c3:7a:1e:30:
                    17:b9:95:e2:21:7e:cf:ba:d3:8c:60:c3:bc:50:f9:
                    dd:90:e4:a6:c3:61:9d:6e:82:0b:4d:a1:13:3c:f2:
                    e7:2e:b9:90:65:05:b0:f3:0f:5e:01:17:a8:c8:9c:
                    d9:9b:a6:8e:76:f9:26:67:1a:c0:21:a9:57:6b:e4:
                    f8:4a:18:cf:54:a7:7f:4a:5b:c8:bc:cb:58:3d:e8:
                    0c:67:bb:69:10:78:8c:5b:d5:e2:ab:6a:66:ed:fc:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:75:60:48:50:DA:98:73:7C:1D:53:C0:83:56:07:64:64:D4:BC:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2df9d1cf-2745-38a1-b4f2-8f3ae2e3071e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.115.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:ad:b1:91:c3:7a:3f:a1:ac:9b:50:7b:a8:ba:f8:4b:65:
         a1:ab:b5:8d:8a:74:62:43:78:ee:fa:e0:03:a4:ca:e1:0e:94:
         4a:7a:b2:f4:fc:33:44:c7:55:88:e9:30:f8:cf:6d:28:10:d8:
         71:eb:f1:71:9d:2b:da:ac:d7:64:ed:45:d6:ea:ab:01:b8:57:
         82:6b:80:6b:d1:eb:c5:60:13:03:b7:4f:55:1e:c1:47:f0:d9:
         b9:5e:59:df:c6:65:e2:37:6d:4b:4f:bb:16:0b:c0:cd:eb:a6:
         1e:d4:46:3a:7b:c3:51:26:cd:ef:0e:17:58:39:a6:56:f6:0b:
         fa:4c:82:fa:95:d6:62:64:80:40:25:eb:6c:51:df:dc:cc:a4:
         d3:06:52:f6:0a:fe:82:9f:cf:54:22:ff:03:b9:15:3b:83:37:
         44:ab:22:b0:f9:fd:f8:22:86:82:4c:49:b4:14:dd:27:28:64:
         50:32:dc:4d:8e:97:bb:70:42:ff:92:f4:b0:8f:2c:ae:b8:4f:
         05:78:1a:b9:cc:b6:d0:d1:5f:4f:fc:66:2c:9d:04:78:bf:1d:
         21:67:2e:17:23:d2:7c:0e:ff:b4:3a:47:42:ad:0b:89:d0:6f:
         ac:fb:d1:93:0c:7b:ad:4e:08:9f:e6:21:59:88:00:d5:7d:42:
         2c:04:40:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:05 2024 by rpki-client on console-fra.rpki-client.org