Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7862fe55-e79b-39b0-be8f-7d5b7c479b14.roa
File:                     7862fe55-e79b-39b0-be8f-7d5b7c479b14.roa (raw, json)
Hash identifier:          AkBZHS54CEfBLAEqUYeEdlvX9u/UlF0dUC/rZ2iyMYg=
Subject key identifier:   3B:FB:D2:D6:7C:77:EB:48:B9:07:A3:FD:3C:53:BA:C7:A4:75:90:BE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0F0D500DF54BF4D497040
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7862fe55-e79b-39b0-be8f-7d5b7c479b14.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.118.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:f0:d5:00:df:54:bf:4d:49:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=c566f5d8-d401-4637-91a6-2fd9685a3385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:94:9f:49:d2:fa:02:7d:97:6d:1f:b4:e6:
                    95:ca:f1:34:4f:2e:79:0c:e3:12:d3:f5:a1:33:17:
                    46:dd:11:c4:6f:eb:47:19:28:0d:2f:ec:6e:ea:3d:
                    33:3f:96:be:d1:76:ae:05:70:df:77:68:46:25:85:
                    32:bf:6d:6b:1e:4e:e1:11:5f:79:cb:d6:38:52:04:
                    dd:28:d7:4a:85:1b:55:8d:f1:59:a7:45:27:ac:a6:
                    6b:cb:54:b6:5a:95:95:26:6e:00:ac:24:53:29:44:
                    5e:a6:6e:37:23:48:5d:0a:c5:76:69:a3:c4:17:52:
                    3c:a8:4a:55:e6:38:d4:c2:31:f0:8e:f4:99:20:da:
                    d2:65:73:45:60:2d:e9:2f:e9:fe:af:3e:55:4e:f8:
                    ed:65:00:3f:e0:51:0c:57:fb:61:bf:23:fe:0c:df:
                    ca:ec:3e:3b:cf:a5:e3:87:7e:f3:f1:f8:66:4c:96:
                    09:3d:d8:5c:69:22:73:38:7d:f9:5a:cb:49:06:09:
                    f9:9a:48:35:e2:59:4b:ae:f4:d9:f2:c1:ac:3e:53:
                    f6:f2:8e:27:6d:ed:02:71:bc:29:a2:df:d6:5b:ca:
                    3c:ea:50:96:9a:3c:4a:e0:73:0d:17:f1:cc:18:a2:
                    71:bf:37:a2:1d:a5:73:e6:4f:89:c7:95:56:7e:ef:
                    72:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FB:D2:D6:7C:77:EB:48:B9:07:A3:FD:3C:53:BA:C7:A4:75:90:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7862fe55-e79b-39b0-be8f-7d5b7c479b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.118.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:89:0e:7b:21:18:7b:bb:89:51:cd:5b:bb:07:a0:c4:e6:
         89:d7:3e:af:92:f2:1e:d5:e7:c3:c3:b4:41:60:79:84:b8:f3:
         32:b0:a1:c0:cc:05:2b:78:55:e4:c9:fb:ab:74:74:6a:af:52:
         94:8c:37:db:a7:40:1d:25:a5:6a:bc:c9:f3:7f:72:28:f4:07:
         cc:33:33:cb:eb:f3:b2:ae:8b:14:66:bb:93:a2:1f:a5:d9:67:
         57:97:e3:2d:74:23:3e:2e:71:36:f8:41:1d:b2:55:5c:a4:68:
         b8:bf:71:af:a9:77:04:b9:0b:32:58:1a:bf:7f:74:b4:17:d5:
         9c:49:94:a0:05:3c:fe:bf:00:c0:38:c2:c0:86:7a:9b:83:9e:
         c8:6b:9e:a6:2b:5d:6b:29:83:b1:82:46:39:8b:c3:80:9b:80:
         67:d9:a5:a4:9d:e0:3a:71:f0:28:8f:7b:76:9d:90:58:37:13:
         fd:c4:86:2c:54:51:5a:de:7c:e6:4e:3d:39:8a:7c:fd:30:06:
         eb:b7:28:69:76:5b:c4:18:41:2e:81:28:a8:3f:f5:19:d8:ca:
         01:79:6d:13:04:2a:2e:a8:49:98:60:6e:5d:f2:8c:b5:ed:88:
         68:e1:93:33:9b:13:d3:04:a8:03:6b:7f:1e:f1:92:81:eb:2c:
         36:05:ce:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:12 2024 by rpki-client on console-fra.rpki-client.org