Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/36fba0e6-aec7-3009-9463-bad4512277c9.roa
File:                     36fba0e6-aec7-3009-9463-bad4512277c9.roa (raw, json)
Hash identifier:          0GAgVNvHqdfh3HRDsg+RnNCr+MnXyJYvKbX2ZLpfegA=
Subject key identifier:   7C:AB:C0:01:91:71:D1:65:52:B5:45:6B:07:1B:AC:06:A7:24:D3:D3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A16D2483C2D96C63BA2C40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/36fba0e6-aec7-3009-9463-bad4512277c9.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.190.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:6d:24:83:c2:d9:6c:63:ba:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=6a32989e-777f-4210-87f7-1e599a1db23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5d:1c:b7:f0:6b:a4:30:1c:14:1b:c4:64:03:
                    dd:cb:ff:1c:7b:03:2c:e5:af:ee:9f:c7:cd:93:cc:
                    fd:87:d4:ff:fa:40:13:53:ad:20:31:ea:af:70:8f:
                    e3:1a:82:2b:87:a0:c5:43:80:ae:d7:07:45:06:66:
                    bf:6d:79:f2:df:60:e2:d4:3a:6e:90:df:3d:a9:fb:
                    69:c3:75:ed:03:90:59:85:c5:04:bd:dd:b0:12:10:
                    b8:e5:48:cb:8b:41:6b:bf:b2:9f:71:9a:6f:25:89:
                    eb:5f:31:d1:f9:49:ed:56:fb:c2:de:96:66:69:9b:
                    ab:83:84:ce:fc:93:66:80:c4:a0:bc:b9:2f:e7:d8:
                    ab:5d:d4:b0:f0:11:b1:b7:50:33:ea:ea:5c:3e:33:
                    d7:ba:9a:ab:d6:75:9e:1c:aa:d7:bf:95:e2:89:3f:
                    ea:70:5a:d7:98:4d:e3:56:1a:2b:6f:1f:5d:a8:a7:
                    72:c0:26:c1:20:f6:85:17:1c:a4:e5:e3:fd:4e:15:
                    06:55:20:0e:d6:e8:22:0f:68:db:ef:0b:e7:65:9d:
                    43:01:ce:7e:b6:b5:2f:cc:17:ed:27:78:0f:e7:b3:
                    13:26:83:f1:ab:e0:05:76:98:52:cf:77:55:e8:41:
                    52:1e:b4:bb:59:3b:49:47:8e:a9:82:66:c1:ae:b8:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AB:C0:01:91:71:D1:65:52:B5:45:6B:07:1B:AC:06:A7:24:D3:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/36fba0e6-aec7-3009-9463-bad4512277c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.190.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:e3:07:a8:03:f1:ab:29:17:13:3e:9f:ec:44:a9:f1:12:19:
         ce:93:0a:27:6c:6e:e5:44:2c:ec:81:80:70:45:08:63:1b:79:
         62:22:10:f9:3c:1f:35:05:74:d5:e1:ad:5b:1d:38:68:b5:78:
         23:2d:3e:e1:3c:be:48:cd:78:de:d9:4c:03:e6:8b:9a:6a:5b:
         71:f5:45:9d:6b:ca:5d:eb:02:ce:e2:5a:1b:81:9b:bb:94:0b:
         48:0c:e4:43:9c:a9:ce:33:d6:7f:e9:9b:15:75:e7:6a:7a:64:
         88:b8:ed:08:ef:c5:29:f1:61:22:7a:89:70:2f:02:f2:40:0a:
         dd:47:70:8d:d5:33:ce:a7:36:b0:ae:61:64:b3:6a:8d:93:74:
         b1:49:90:61:ed:e9:57:3e:4d:ed:61:18:58:44:23:55:fc:34:
         df:fe:17:d5:91:97:16:0c:58:f3:99:f3:84:93:78:c6:01:18:
         02:19:d4:b0:48:3b:dd:48:53:a2:5d:c7:50:72:b6:c6:97:39:
         d2:bb:73:be:1e:11:fb:55:41:39:f8:c1:75:19:5a:dd:6d:7e:
         4d:72:db:cd:3e:37:0d:dd:e4:6f:3a:cc:79:af:41:28:38:99:
         f5:1c:44:91:7d:27:de:24:71:79:c9:06:db:87:a2:0a:11:1a:
         03:60:66:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioW0kg8LZbGO6LEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
NmEzMjk4OWUtNzc3Zi00MjEwLTg3ZjctMWU1OTlhMWRiMjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF0ct/BrpDAcFBvEZAPdy/8cewMs5a/un8fN
k8z9h9T/+kATU60gMeqvcI/jGoIrh6DFQ4Cu1wdFBma/bXny32Di1DpukN89qftp
w3XtA5BZhcUEvd2wEhC45UjLi0Frv7KfcZpvJYnrXzHR+UntVvvC3pZmaZurg4TO
/JNmgMSgvLkv59irXdSw8BGxt1Az6upcPjPXupqr1nWeHKrXv5XiiT/qcFrXmE3j
Vhorbx9dqKdywCbBIPaFFxyk5eP9ThUGVSAO1ugiD2jb7wvnZZ1DAc5+trUvzBft
J3gP57MTJoPxq+AFdphSz3dV6EFSHrS7WTtJR46pgmbBrrilEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHyrwAGRcdFlUrVFawcbrAanJNPTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzZmYmEwZTYtYWVjNy0z
MDA5LTk0NjMtYmFkNDUxMjI3N2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMHjB6gD8aspFxM+n+xEqfESGc6TCidsbuVELOyBgHBFCGMbeWIiEPk8
HzUFdNXhrVsdOGi1eCMtPuE8vkjNeN7ZTAPmi5pqW3H1RZ1ryl3rAs7iWhuBm7uU
C0gM5EOcqc4z1n/pmxV152p6ZIi47QjvxSnxYSJ6iXAvAvJACt1HcI3VM86nNrCu
YWSzao2TdLFJkGHt6Vc+Te1hGFhEI1X8NN/+F9WRlxYMWPOZ84STeMYBGAIZ1LBI
O91IU6Jdx1BytsaXOdK7c74eEftVQTn4wXUZWt1tfk1y280+Nw3d5G86zHmvQSg4
mfUcRJF9J94kcXnJBtuHogoRGgNgZjI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:05 2024 by rpki-client on console-fra.rpki-client.org