Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/652ed124-518f-3f27-b542-1d303b23a83e.roa
File:                     652ed124-518f-3f27-b542-1d303b23a83e.roa (raw, json)
Hash identifier:          lqa/zMec/BKVb9lhwkZIhJSn48eusUJN0MhW9OvdQpA=
Subject key identifier:   60:C5:0B:30:61:9F:4D:05:03:84:A4:3A:DC:01:CB:E1:95:9C:C9:5D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E993DCB73E7616053D080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/652ed124-518f-3f27-b542-1d303b23a83e.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        68.112.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:99:3d:cb:73:e7:61:60:53:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=a28f7f98-c337-4514-b218-6c48cbb51bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:99:da:1d:c3:a9:88:b1:75:0b:90:3d:6e:
                    e7:fd:37:d0:b7:db:fd:4f:81:09:a2:6a:bd:ae:ec:
                    b7:54:a7:71:d2:bb:99:4b:6e:98:15:6f:46:93:bd:
                    cf:8b:50:0f:54:f7:85:55:98:ed:76:76:10:f7:7b:
                    fc:98:75:44:f2:17:e3:dd:d1:25:0c:73:cc:00:67:
                    bb:a6:ae:65:5a:d0:f8:59:38:6c:ab:f0:94:7a:f8:
                    2f:21:c8:ad:52:65:9f:3d:6c:2b:6d:0c:3e:7f:ea:
                    de:99:d0:be:91:cc:6f:ce:91:9d:34:27:89:44:5f:
                    f4:2f:10:51:1a:04:5f:e7:8d:ed:ad:ce:cf:8e:ff:
                    18:4f:e0:35:b9:ca:ad:8f:af:37:bc:40:09:08:37:
                    30:30:3e:fa:e0:83:51:09:9a:47:9c:d7:00:a6:3d:
                    db:21:a9:77:a2:56:44:9f:fa:22:a8:95:2c:22:68:
                    a2:5e:c2:9a:8e:32:fd:63:48:5f:40:9b:35:1d:b2:
                    6a:73:b5:20:60:7e:6e:b9:d2:9e:67:73:6f:58:66:
                    cc:bd:1d:9a:f5:5e:54:d2:c7:33:3b:ce:f8:72:b9:
                    de:e9:e6:35:ff:6d:ff:63:e7:99:f5:ff:96:1b:c1:
                    bc:11:79:77:78:18:b5:b2:ac:cc:b1:ba:50:0a:5c:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C5:0B:30:61:9F:4D:05:03:84:A4:3A:DC:01:CB:E1:95:9C:C9:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/652ed124-518f-3f27-b542-1d303b23a83e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:60:02:db:0f:7b:40:85:8d:77:b0:b2:07:73:ec:f7:d3:37:
         ea:40:89:34:f7:34:ef:8f:f4:74:e1:2a:15:bb:87:24:b1:b0:
         9d:1d:89:88:ad:59:c4:37:a7:e5:a5:34:cb:ee:7a:ff:2c:0f:
         9c:68:e5:c1:56:17:06:1e:94:9e:30:97:de:b0:28:55:05:fa:
         45:91:05:62:39:06:f6:a0:b7:0e:9f:ee:25:39:91:45:6b:54:
         39:b1:85:ce:58:a1:4e:23:ac:4e:95:c9:23:8e:27:ff:79:85:
         70:ae:25:b6:46:52:6d:b2:62:1b:5e:69:f4:d1:f2:6a:12:be:
         ed:8e:d6:01:d8:07:f0:ae:76:6b:50:1c:df:d9:d3:64:fd:11:
         54:22:84:1b:eb:7d:09:0d:32:e3:10:f3:a5:51:8d:2f:a5:ee:
         31:88:54:75:4b:c4:42:14:60:d6:9b:b4:b6:c4:d8:75:df:60:
         b9:63:b2:66:18:60:9e:f7:71:21:65:d8:55:70:da:ba:34:ae:
         81:55:0d:19:8e:24:ae:39:f0:39:fb:82:bf:47:43:9b:ef:09:
         5f:95:65:02:41:2e:46:42:e0:a1:84:2f:10:ee:ad:9d:e5:0a:
         6f:97:fe:71:05:20:68:c9:b9:aa:4b:1f:47:de:b4:c4:10:02:
         3f:6b:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:05:04 2024 by rpki-client on console-fra.rpki-client.org