Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4100d234-1a2b-3285-9f6f-102630868c99.roa
File:                     4100d234-1a2b-3285-9f6f-102630868c99.roa (raw, json)
Hash identifier:          +slWiFxyL7KndpgQy8akynkf3BwFwTSH/K2b2e62mjY=
Subject key identifier:   29:1D:EC:D0:F3:76:86:87:7C:3E:90:07:37:43:B4:CD:E8:D8:0B:98
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A174E63C11295067817D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4100d234-1a2b-3285-9f6f-102630868c99.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.117.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:74:e6:3c:11:29:50:67:81:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=2518aa9b-a18f-4437-812d-eb100ac1e8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b4:d0:6c:5c:92:83:1e:12:93:3e:dc:80:e5:
                    08:3d:b4:7b:e7:09:61:cb:aa:50:e9:a7:6f:1d:85:
                    85:99:84:40:57:ef:3e:89:ec:8e:24:2d:1e:bd:75:
                    88:a5:75:4a:17:2e:7a:e8:f9:ce:29:18:30:7d:3e:
                    1e:a7:ab:9c:4e:89:04:b4:41:10:21:b6:bc:f2:90:
                    9e:25:62:07:70:7e:e0:a9:6d:6a:ab:71:e1:6d:d8:
                    f2:7a:40:fe:70:a2:4f:11:ad:9b:2f:9e:e1:e1:4b:
                    d2:52:e5:fa:f2:02:95:81:15:56:26:57:4a:74:ae:
                    3d:90:4c:7c:17:8e:16:fa:d8:5f:3c:98:de:46:72:
                    50:07:01:ec:25:fd:56:c7:56:aa:7e:e5:68:62:cb:
                    2d:41:3f:7c:ba:51:69:c2:bb:86:7f:7a:ed:2d:6b:
                    6d:51:69:3c:62:c0:52:67:52:98:29:d5:9b:05:7a:
                    b0:52:75:e9:61:44:45:1c:02:e6:b5:3e:4b:5d:f8:
                    08:51:a6:bc:b6:e3:65:d5:b3:bb:d4:a4:33:dd:e7:
                    82:94:0d:82:bf:d9:3d:f5:f2:57:c9:9e:e0:dd:78:
                    b4:e0:fd:3d:3b:72:ca:3c:9b:2f:8a:2a:87:da:24:
                    0d:31:7b:1c:06:bb:b7:6e:ac:af:7a:d3:66:1a:d6:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1D:EC:D0:F3:76:86:87:7C:3E:90:07:37:43:B4:CD:E8:D8:0B:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4100d234-1a2b-3285-9f6f-102630868c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e5:85:c4:33:bb:2a:e5:93:2a:23:44:9a:3b:2b:7b:02:cf:
         b8:ec:35:1c:15:54:2b:a8:c0:d8:62:ce:e3:46:ca:06:11:88:
         4e:d3:cf:28:c6:7b:32:99:66:9c:cf:39:65:a7:ff:79:c6:8c:
         5a:ea:8b:40:62:77:ef:d7:15:66:6e:4f:87:38:e2:76:f6:7c:
         dc:66:34:32:86:f9:ca:9c:f5:a2:f7:58:05:ef:78:61:01:43:
         d1:ea:bd:26:f7:cb:25:7f:43:37:bb:63:67:15:5b:7b:41:2d:
         4e:1a:42:1b:4b:ec:4e:1a:2e:b8:f1:64:d6:71:e3:a1:a6:8b:
         d4:83:50:80:ad:76:36:06:30:46:8d:53:fe:52:50:68:9b:7d:
         80:1b:42:47:d6:32:8c:0c:a7:4d:ae:44:e8:69:d3:79:0b:f3:
         2d:a3:6d:64:cf:b5:20:c8:94:00:1c:01:be:87:97:54:23:a3:
         fb:41:3a:a4:d2:72:b9:5c:ad:18:10:9d:f9:51:87:3d:69:29:
         2c:6a:77:16:b6:35:ed:c9:9a:73:90:3b:ab:4b:0e:4e:30:8e:
         59:50:13:3d:72:ec:f4:d7:44:e0:a0:32:b2:99:6b:70:29:25:
         8e:8e:44:a2:57:5c:f8:10:16:bd:4c:52:32:bf:1a:3a:69:f0:
         34:0f:04:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioXTmPBEpUGeBfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
MjUxOGFhOWItYTE4Zi00NDM3LTgxMmQtZWIxMDBhYzFlOGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbTQbFySgx4Skz7cgOUIPbR75wlhy6pQ6adv
HYWFmYRAV+8+ieyOJC0evXWIpXVKFy566PnOKRgwfT4ep6ucTokEtEEQIba88pCe
JWIHcH7gqW1qq3HhbdjyekD+cKJPEa2bL57h4UvSUuX68gKVgRVWJldKdK49kEx8
F44W+thfPJjeRnJQBwHsJf1Wx1aqfuVoYsstQT98ulFpwruGf3rtLWttUWk8YsBS
Z1KYKdWbBXqwUnXpYURFHALmtT5LXfgIUaa8tuNl1bO71KQz3eeClA2Cv9k99fJX
yZ7g3Xi04P09O3LKPJsviiqH2iQNMXscBru3bqyvetNmGtYKwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCkd7NDzdoaHfD6QBzdDtM3o2AuYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDEwMGQyMzQtMWEyYi0z
Mjg1LTlmNmYtMTAyNjMwODY4Yzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRHUgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGblhcQzuyrlkyojRJo7K3sCz7jsNRwVVCuowNhizuNGygYRiE7TzyjG
ezKZZpzPOWWn/3nGjFrqi0Bid+/XFWZuT4c44nb2fNxmNDKG+cqc9aL3WAXveGEB
Q9HqvSb3yyV/Qze7Y2cVW3tBLU4aQhtL7E4aLrjxZNZx46Gmi9SDUICtdjYGMEaN
U/5SUGibfYAbQkfWMowMp02uROhp03kL8y2jbWTPtSDIlAAcAb6Hl1Qjo/tBOqTS
crlcrRgQnflRhz1pKSxqdxa2Ne3JmnOQO6tLDk4wjllQEz1y7PTXROCgMrKZa3Ap
JY6ORKJXXPgQFr1MUjK/Gjpp8DQPBEs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:06 2024 by rpki-client on console-fra.rpki-client.org