Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/388ce861-e1db-372e-8f8a-3744ad8e3b68.roa
File:                     388ce861-e1db-372e-8f8a-3744ad8e3b68.roa (raw, json)
Hash identifier:          M1ecmP2D329sdDkEnRvMs4LOgKb91MRw//pxSu2hEU4=
Subject key identifier:   CA:7D:80:F9:25:D2:03:31:EA:A6:4F:F5:64:C1:C0:0E:67:64:85:34
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0E687A9C905EB0F3A96F8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/388ce861-e1db-372e-8f8a-3744ad8e3b68.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.113.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:e6:87:a9:c9:05:eb:0f:3a:96:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=e2937722-2580-45bd-a66d-dd5f873bf6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:8a:f5:df:68:d0:f1:f8:9b:37:c9:9d:a2:
                    31:d5:fc:6e:af:2a:62:03:5c:8d:6e:ab:9f:1a:7b:
                    40:fc:88:1a:dc:52:6d:c3:ca:07:9f:ca:fb:0b:d2:
                    10:77:24:5c:f1:b0:52:76:a8:fb:ee:c5:6a:7b:6a:
                    96:f1:f0:6f:ce:22:f8:d3:47:fc:79:60:80:93:de:
                    9c:a5:27:8a:c8:34:d7:a2:c8:22:5d:74:c9:01:90:
                    fd:b0:52:8d:30:14:52:da:98:02:24:89:07:73:e7:
                    72:c6:8f:0c:5a:43:fb:6f:3f:33:d8:bf:85:cf:f7:
                    a8:55:ba:0e:0b:2e:ac:3c:97:de:e9:b8:7c:02:6d:
                    e3:b7:c3:18:b6:3f:f4:29:24:ab:15:b2:a9:df:d7:
                    30:28:12:b9:82:3a:d4:65:85:79:07:58:52:56:1a:
                    e0:26:23:cc:1b:48:ff:68:86:cb:9d:da:61:65:da:
                    7b:eb:85:4b:25:89:d6:3c:67:dd:cf:a6:bc:ce:1e:
                    64:a0:79:a6:45:9a:f0:31:e5:a2:76:fc:2b:d4:f1:
                    18:b5:d6:01:54:d8:49:c4:6d:7d:32:fb:4b:76:00:
                    97:61:bb:5e:59:db:4a:f9:2d:6a:7f:68:37:c8:e7:
                    03:bc:33:55:de:e7:04:de:e5:2d:29:67:3a:df:22:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7D:80:F9:25:D2:03:31:EA:A6:4F:F5:64:C1:C0:0E:67:64:85:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/388ce861-e1db-372e-8f8a-3744ad8e3b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.113.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:de:df:a9:a3:3a:1b:15:04:0d:f3:c9:cc:ff:0d:87:32:48:
         fb:2c:28:78:10:a0:3a:30:35:b8:c6:91:f7:ef:cd:c5:69:fe:
         2d:15:a7:b2:25:ae:fb:96:cc:20:63:26:9a:fd:ec:2b:78:95:
         2d:87:1b:b7:fa:c3:2f:ad:39:93:d7:0f:56:30:df:9b:02:36:
         1f:8c:9a:90:02:cf:b8:45:6f:d2:b9:b4:ab:ab:da:8d:b1:ae:
         b2:0a:31:a5:65:26:73:96:cf:62:27:55:63:17:b5:2b:64:2f:
         c9:91:52:7a:9d:19:2c:51:4b:de:95:81:d7:db:6f:fe:4c:24:
         6e:1d:7c:9a:d4:0b:7f:ce:8c:4f:63:4d:7b:5b:64:ea:e9:2f:
         9a:d6:4f:7e:94:d9:79:f5:68:32:e2:57:65:40:c9:f1:b2:4f:
         50:ca:9d:d4:66:5a:06:fd:be:36:4d:24:19:f8:3c:34:61:98:
         33:65:b0:6f:47:c5:3e:3d:24:7f:8d:3f:83:45:cb:3c:75:f2:
         1e:c1:4e:73:e2:02:7f:32:fe:3c:97:9f:41:6f:e1:ef:fa:77:
         c5:cc:45:64:32:70:48:dd:97:27:2a:19:f2:ae:51:e1:30:b7:
         2a:d6:4d:c6:07:41:73:96:c7:23:b0:b6:aa:ec:9a:2f:28:2e:
         28:83:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:05 2024 by rpki-client on console-fra.rpki-client.org