Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58da3ecb-d300-33e8-87c8-ea1e8c76f2f4.roa
File:                     58da3ecb-d300-33e8-87c8-ea1e8c76f2f4.roa (raw, json)
Hash identifier:          br7uqE5oj1b4FGLgTm4Iet9NL1yU0Rs1aD3M8UIcbCA=
Subject key identifier:   98:FB:0D:40:1B:FE:E4:01:8B:59:B7:51:F6:37:3B:F8:0C:6B:72:A4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DFCA22B83E82954E0C7C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58da3ecb-d300-33e8-87c8-ea1e8c76f2f4.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        68.112.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:fc:a2:2b:83:e8:29:54:e0:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=e9c303e9-ea71-4d22-90a9-998fe53126ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:70:d1:52:8f:39:f6:e9:d5:38:f9:b9:4c:5c:
                    1e:a9:71:76:20:85:5d:71:bd:70:d1:9e:42:c8:5d:
                    d3:b1:db:b6:2b:05:4f:a7:7c:5b:45:24:33:89:cd:
                    5a:15:63:a3:d7:d3:d8:23:b8:c0:3e:57:e5:22:fe:
                    7b:59:f5:5b:be:91:e0:dd:12:c6:d4:8c:d4:ba:98:
                    6f:a9:7b:14:79:05:ff:6a:40:ba:d9:3a:67:1f:74:
                    2c:13:76:11:f2:96:b6:75:47:11:80:81:a3:c8:b0:
                    db:cb:63:b8:84:54:2a:c5:a7:ff:5d:77:3c:5c:48:
                    7f:ed:48:a9:6c:1b:29:3a:84:63:d3:41:86:11:d7:
                    53:ce:f8:03:ad:1c:60:20:d1:7f:11:8b:50:28:4f:
                    b3:7b:b2:29:04:16:3a:90:8c:d9:40:be:f0:43:e5:
                    fb:ac:31:70:b9:5a:84:26:25:cc:50:1b:c7:ba:40:
                    0b:56:b1:3b:95:03:2a:d2:52:ce:70:a5:60:0f:05:
                    72:a2:26:5c:a7:ef:fe:aa:9a:db:4a:7c:03:1e:46:
                    a0:b7:fd:df:68:9c:85:6f:4d:8b:d0:be:8c:fa:b1:
                    26:98:ac:ec:0b:32:b3:ad:c8:27:ab:0b:6f:2f:95:
                    ef:9f:48:8d:88:0d:77:5c:01:1e:2e:86:ce:7d:b8:
                    85:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FB:0D:40:1B:FE:E4:01:8B:59:B7:51:F6:37:3B:F8:0C:6B:72:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58da3ecb-d300-33e8-87c8-ea1e8c76f2f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:15:06:44:2a:66:28:bc:18:59:30:46:52:19:9c:14:b9:bd:
         c2:9a:ef:df:ea:f8:c0:c4:ef:50:ea:66:db:14:15:b5:94:8f:
         a3:c9:ed:94:f2:35:84:5b:d6:f0:54:69:ab:16:d0:de:d8:e5:
         10:38:40:eb:be:83:ef:16:d6:6b:43:80:6f:cb:23:41:0d:45:
         44:15:40:5b:54:9c:65:62:12:b6:12:a4:58:b7:d5:38:d8:d9:
         47:df:52:21:51:c1:21:57:f4:21:58:91:2f:68:36:e6:29:64:
         98:27:ac:0f:3c:6d:0d:f7:6d:ee:f8:e9:b0:cd:96:a5:ad:a2:
         e4:8c:cd:b9:fb:ef:16:87:11:ef:d9:a8:66:0c:1c:b5:a7:d0:
         ee:00:c8:1a:ff:47:1e:e5:c0:00:b4:6c:7a:41:35:11:d3:5a:
         49:2c:41:f9:ba:37:95:52:19:fa:d2:8c:43:1c:b3:a6:ad:8f:
         4c:cc:a6:e6:46:64:05:e6:c7:ac:86:15:be:99:07:50:d1:f8:
         20:24:6f:61:67:fa:07:df:da:00:73:29:24:64:30:5a:d5:ec:
         64:0c:e9:c8:55:64:c1:a3:40:12:c3:0e:6b:57:fb:60:1f:f2:
         2d:19:a0:39:ef:d6:51:e6:fc:ff:a8:eb:95:1f:f0:e5:36:24:
         dd:7d:3b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:05:02 2024 by rpki-client on console-fra.rpki-client.org