Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f7e47d8-ebad-328a-9299-f127440c688b.roa
File:                     8f7e47d8-ebad-328a-9299-f127440c688b.roa (raw, json)
Hash identifier:          YzGvJ2rBAtqZtmXenwCIz2EYoiM10lcrwl/S9829XlY=
Subject key identifier:   2D:26:61:BE:37:65:1F:07:92:0A:8C:F9:B2:4B:1A:62:DF:0C:FB:EE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0EDCF73A1FA0B1E91B380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f7e47d8-ebad-328a-9299-f127440c688b.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.117.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:ed:cf:73:a1:fa:0b:1e:91:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=bdd06f55-e69c-4f5a-ac03-472b1698f68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:dc:07:c0:24:ae:6b:c7:a1:0d:bd:41:b7:
                    f2:c2:ad:80:50:9d:7c:89:c2:0e:f8:4b:c0:ab:09:
                    9f:7f:08:7e:d8:36:8e:9a:b3:45:28:b6:38:51:dc:
                    f5:e5:aa:4e:ac:90:c7:bf:dd:07:de:cb:74:ba:2a:
                    01:7f:ed:be:8a:24:df:f5:56:c1:b1:97:8a:72:8a:
                    09:a9:a2:5c:a9:07:4b:ff:aa:db:8a:b6:99:d4:45:
                    ac:ff:18:99:07:a3:5a:0e:72:fa:12:54:3f:53:28:
                    59:71:c0:43:e7:00:51:6c:83:3a:4c:0f:6c:e1:e0:
                    a4:56:c3:93:40:09:3f:cc:c5:d0:8e:72:28:78:f6:
                    84:cb:5a:ab:33:b7:2d:05:99:0c:e2:d5:02:7e:79:
                    2a:b7:4c:c9:de:f3:02:6f:03:21:27:33:54:2c:7e:
                    d9:86:4d:c9:73:ee:fb:2f:ff:b0:f8:d8:ea:4b:1f:
                    6d:05:a2:cf:4e:09:eb:41:67:e3:32:8e:72:e2:80:
                    8f:e3:94:5d:03:8c:b9:3d:6e:c8:af:34:f2:73:1f:
                    30:d8:98:59:30:e8:7b:cb:5e:c3:64:fc:7e:14:40:
                    de:9d:96:ea:90:83:1f:6a:8a:f6:8f:0c:c6:54:76:
                    e3:0d:6d:35:a4:07:c9:28:1d:4d:ab:3a:f0:b5:d2:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:26:61:BE:37:65:1F:07:92:0A:8C:F9:B2:4B:1A:62:DF:0C:FB:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f7e47d8-ebad-328a-9299-f127440c688b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:48:1f:dd:19:d3:9d:5b:c2:da:c1:14:b8:1a:52:71:a6:8d:
         37:20:47:6c:d1:41:4b:11:83:b1:69:b3:6e:eb:63:03:1d:a4:
         3c:93:ef:ba:74:fa:02:51:b7:6f:a6:75:92:97:76:99:4a:ab:
         ce:ee:d0:59:5b:7b:6f:e8:c8:6b:bd:23:a4:9b:83:e3:3a:4c:
         66:47:4e:57:3e:c3:2b:35:ed:d1:42:7d:e0:c4:c6:8f:26:09:
         66:d8:21:25:f4:9b:66:aa:ed:bd:7f:84:5e:eb:89:b8:c3:69:
         7a:50:5c:35:35:c7:00:9d:cd:d1:43:46:0f:2d:3a:90:e4:3a:
         d8:e2:72:68:6d:c5:db:8d:50:ac:1b:98:e1:f2:7c:88:2b:2f:
         03:24:13:a0:53:39:19:01:9a:13:d8:36:e6:48:67:e1:7f:0f:
         2a:d8:28:57:21:5b:28:59:bc:4d:fd:ce:d6:87:a0:a1:48:5a:
         2b:37:71:e5:18:6e:c8:cc:fe:90:4e:54:66:01:01:63:8c:46:
         fd:3d:38:b6:7a:f4:21:43:4d:c4:f0:03:34:5f:bf:25:3b:d2:
         64:9d:ae:85:78:f6:4c:fc:e2:68:c2:c6:63:95:fe:be:d6:83:
         24:8c:0c:a7:2a:71:e6:12:0f:e4:53:04:ef:3d:33:c6:63:d5:
         a2:95:9b:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioO3Pc6H6Cx6Rs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
YmRkMDZmNTUtZTY5Yy00ZjVhLWFjMDMtNDcyYjE2OThmNjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr37cB8AkrmvHoQ29Qbfywq2AUJ18icIO+EvA
qwmffwh+2DaOmrNFKLY4Udz15apOrJDHv90H3st0uioBf+2+iiTf9VbBsZeKcooJ
qaJcqQdL/6rbiraZ1EWs/xiZB6NaDnL6ElQ/UyhZccBD5wBRbIM6TA9s4eCkVsOT
QAk/zMXQjnIoePaEy1qrM7ctBZkM4tUCfnkqt0zJ3vMCbwMhJzNULH7Zhk3Jc+77
L/+w+NjqSx9tBaLPTgnrQWfjMo5y4oCP45RdA4y5PW7IrzTycx8w2JhZMOh7y17D
ZPx+FEDenZbqkIMfaor2jwzGVHbjDW01pAfJKB1NqzrwtdLK4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0mYb43ZR8HkgqM+bJLGmLfDPvuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOGY3ZTQ3ZDgtZWJhZC0z
MjhhLTkyOTktZjEyNzQ0MGM2ODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRHVQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxIH90Z051bwtrBFLgaUnGmjTcgR2zRQUsRg7Fps27rYwMdpDyT77p0
+gJRt2+mdZKXdplKq87u0Flbe2/oyGu9I6Sbg+M6TGZHTlc+wys17dFCfeDExo8m
CWbYISX0m2aq7b1/hF7ribjDaXpQXDU1xwCdzdFDRg8tOpDkOtjicmhtxduNUKwb
mOHyfIgrLwMkE6BTORkBmhPYNuZIZ+F/DyrYKFchWyhZvE39ztaHoKFIWis3ceUY
bsjM/pBOVGYBAWOMRv09OLZ69CFDTcTwAzRfvyU70mSdroV49kz84mjCxmOV/r7W
gySMDKcqceYSD+RTBO89M8Zj1aKVm7Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:50 2024 by rpki-client on console-ams.rpki-client.org