Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/574e82dd-634b-3134-ab71-1c5b81159ba6.roa
File:                     574e82dd-634b-3134-ab71-1c5b81159ba6.roa (raw, json)
Hash identifier:          4I7t5YMU8ZWHkqo3rHTMEiVmp90UKYcJeHOCJnE061k=
Subject key identifier:   1B:AF:F5:09:FB:D7:F2:EB:2D:BC:2D:60:6A:66:24:74:24:90:D6:D7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EABC2768515B07FC25440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/574e82dd-634b-3134-ab71-1c5b81159ba6.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        68.187.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:ab:c2:76:85:15:b0:7f:c2:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=72c915f6-345a-4e5b-998c-656ccd847873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:66:e9:38:c9:3a:ce:79:e4:62:02:ae:c5:
                    59:9a:5f:f4:cf:66:be:27:7c:ad:36:9a:5c:01:b1:
                    79:24:d8:79:b1:76:e3:dc:50:5f:e9:91:72:3d:b3:
                    a3:21:08:d0:d1:a7:79:64:e1:08:be:a3:fb:ea:41:
                    4a:34:59:e8:f6:b2:41:c2:3f:70:d1:51:50:80:50:
                    a0:13:bb:2c:fe:f5:c2:b3:5b:a8:b0:7a:ee:a3:b9:
                    43:59:ab:5b:b8:d3:8f:6c:3f:30:3a:ab:d5:99:49:
                    f5:20:a7:a9:5a:23:4a:d8:ee:c5:ee:ba:1a:ed:98:
                    c7:dc:8c:9f:2d:99:11:5f:87:9a:76:e6:86:c7:23:
                    44:18:e1:5a:c2:e0:dd:85:16:94:97:9f:b7:6d:4c:
                    38:66:78:f5:b1:87:6b:62:6f:3f:6e:4d:a8:79:7f:
                    af:9c:95:9a:48:e2:4b:b4:ff:07:3c:af:62:e6:b2:
                    0d:7d:8e:50:2f:72:c4:0d:42:b0:8e:ac:90:cf:ba:
                    9f:10:57:92:bf:f4:5f:13:c6:8c:45:85:e4:bd:50:
                    d9:c9:ca:50:7f:3d:d4:84:8f:77:91:a0:f1:3e:84:
                    ba:ac:42:46:4b:dd:df:73:39:45:0a:32:e2:c7:6e:
                    5a:27:dc:50:be:73:69:6a:e2:a2:08:ef:e8:b4:75:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AF:F5:09:FB:D7:F2:EB:2D:BC:2D:60:6A:66:24:74:24:90:D6:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/574e82dd-634b-3134-ab71-1c5b81159ba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.187.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:7c:0e:da:b9:d9:16:27:b1:2e:42:3c:63:48:cc:3f:7a:45:
         57:c1:01:f8:49:01:04:0b:38:f0:e8:b1:4d:0c:ad:37:1a:23:
         03:b2:91:21:d8:f2:6a:ca:5d:58:1f:e4:81:5c:2b:46:3f:b2:
         df:9c:f0:7a:cf:84:b1:16:d6:6b:01:6e:a1:a9:e7:29:72:bf:
         80:7c:a8:70:f2:f8:ed:66:f0:71:4b:70:b4:91:d2:ae:fb:d4:
         34:c7:ae:e7:41:d4:ae:12:ea:89:1b:52:58:87:c5:3f:11:be:
         f5:51:1c:21:7b:6a:31:1a:3f:0f:cc:5e:67:50:bc:c4:3b:5f:
         ba:2f:1e:3f:44:31:3d:fd:11:b4:a0:23:3e:8f:89:d3:3e:86:
         2f:05:b0:64:07:a0:95:15:61:ca:a7:bf:34:e3:c8:6f:be:c8:
         8c:a2:e1:ff:9a:6b:b2:dc:8f:9e:95:04:da:a4:13:85:cf:b6:
         4c:ac:5f:4c:53:ac:f3:aa:88:4d:f7:01:46:11:2e:b2:2e:99:
         ca:11:73:02:88:66:bb:36:6a:02:9c:2b:f6:01:68:3a:f3:1b:
         2c:d8:8a:b6:d5:17:93:d8:43:72:f4:ee:52:1a:9b:b8:06:b3:
         0d:81:31:aa:43:a9:b2:29:7d:61:3c:24:f2:ea:d9:15:b1:97:
         a2:5d:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 14:41:24 2024 by rpki-client on console-ams.rpki-client.org