Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/913132ff-729a-397c-80d4-dd3d64c8f77a.roa
File:                     913132ff-729a-397c-80d4-dd3d64c8f77a.roa (raw, json)
Hash identifier:          vAJpIuVFG54id5+Cdn82yPIfat31cDZVZl8JFUNt8Rs=
Subject key identifier:   94:C8:1B:DD:A1:BE:1D:AB:E7:A6:C2:96:BF:39:50:34:E8:95:BC:EC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A184DFD12314CCE5A09E10
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/913132ff-729a-397c-80d4-dd3d64c8f77a.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.190.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:84:df:d1:23:14:cc:e5:a0:9e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=f342b197-9817-4be7-a4b9-de0effdc2175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:60:90:5e:83:80:32:79:d7:87:f8:6e:82:00:
                    b9:71:8f:0b:00:ac:a6:04:24:c4:de:1d:33:bc:f3:
                    67:83:b8:ff:9f:cd:3f:8e:c5:5a:14:8c:da:67:b6:
                    22:21:46:75:d4:97:85:38:06:d0:ad:e2:49:01:08:
                    c7:90:80:b3:f8:49:73:22:33:de:91:b0:b7:87:95:
                    eb:f5:04:0d:5c:fd:5f:6d:37:af:3a:99:e6:aa:25:
                    e0:f4:2b:a7:2d:1c:de:fb:c6:69:ee:3e:69:20:75:
                    1a:f0:7a:86:52:5a:c8:0c:92:ee:bb:4a:2b:55:ad:
                    04:7b:90:94:a4:18:b7:c0:aa:47:54:80:57:a7:09:
                    0f:52:58:82:74:bd:63:9d:86:19:a7:f1:63:53:56:
                    3c:99:60:8f:62:f5:4a:10:fe:4c:dd:f3:c7:d0:ef:
                    8c:5b:6b:06:71:58:e6:d1:5f:bc:25:00:2c:f9:23:
                    85:b9:a1:1a:26:3b:4f:9f:17:5a:00:6d:22:26:b6:
                    b7:06:e0:16:50:c5:c3:f9:3b:ec:a5:3c:36:25:91:
                    e0:ad:dd:d4:44:cf:ce:b3:19:f0:2d:53:1a:d0:8c:
                    ab:19:e4:9c:7d:f4:62:b6:b3:dc:fe:1e:09:07:4c:
                    f6:65:3c:b3:5d:04:0c:eb:e2:7d:c0:e3:23:18:aa:
                    99:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C8:1B:DD:A1:BE:1D:AB:E7:A6:C2:96:BF:39:50:34:E8:95:BC:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/913132ff-729a-397c-80d4-dd3d64c8f77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.190.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ff:e1:ee:2d:8b:f6:f7:4b:47:a0:58:e4:b5:be:d9:1a:e1:
         28:c9:a1:88:e2:54:33:4a:65:04:85:69:be:7f:96:cd:c7:97:
         e3:38:36:a5:06:2b:46:b2:a5:e2:e4:01:76:ab:7d:98:aa:30:
         ca:84:dc:d6:3a:f2:7d:d7:0d:6a:af:e3:c7:0c:46:a6:46:a9:
         fa:28:d4:b3:76:63:3f:05:a3:a2:0f:b7:87:d1:9b:c5:b0:bf:
         6f:b0:4e:fb:c1:c1:5e:a7:9a:25:9b:c4:d7:89:06:86:e0:eb:
         a0:01:1a:a0:04:ec:b2:b8:d5:19:b7:46:f5:74:2b:5a:35:9a:
         5a:20:0e:9f:88:bb:1a:51:bf:17:81:11:c0:9a:b2:c8:12:ee:
         09:bf:a6:88:f6:48:01:69:84:63:c4:6b:15:95:03:c2:02:f9:
         d4:af:55:2b:4c:f1:8d:aa:5d:b4:97:61:1c:c1:87:09:74:7f:
         ae:4f:00:7d:88:12:c1:f7:a7:e6:f5:03:64:d2:15:66:a9:20:
         a9:46:d8:37:af:8c:6e:c7:d4:e2:5b:92:de:47:7d:be:51:e5:
         da:17:28:8a:f9:ac:e9:a8:23:27:be:90:e3:f0:46:c2:14:38:
         ee:b8:8a:6f:bf:a4:85:39:83:7d:5b:41:0f:13:0d:93:f1:77:
         96:74:ff:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioYTf0SMUzOWgnhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZjM0MmIxOTctOTgxNy00YmU3LWE0YjktZGUwZWZmZGMyMTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WCQXoOAMnnXh/huggC5cY8LAKymBCTE3h0z
vPNng7j/n80/jsVaFIzaZ7YiIUZ11JeFOAbQreJJAQjHkICz+ElzIjPekbC3h5Xr
9QQNXP1fbTevOpnmqiXg9CunLRze+8Zp7j5pIHUa8HqGUlrIDJLuu0orVa0Ee5CU
pBi3wKpHVIBXpwkPUliCdL1jnYYZp/FjU1Y8mWCPYvVKEP5M3fPH0O+MW2sGcVjm
0V+8JQAs+SOFuaEaJjtPnxdaAG0iJra3BuAWUMXD+TvspTw2JZHgrd3URM/Osxnw
LVMa0IyrGeScffRitrPc/h4JB0z2ZTyzXQQM6+J9wOMjGKqZeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTIG92hvh2r56bClr85UDTolbzsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTEzMTMyZmYtNzI5YS0z
OTdjLTgwZDQtZGQzZDY0YzhmNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABr/4e4ti/b3S0egWOS1vtka4SjJoYjiVDNKZQSFab5/ls3Hl+M4NqUG
K0aypeLkAXarfZiqMMqE3NY68n3XDWqv48cMRqZGqfoo1LN2Yz8Fo6IPt4fRm8Ww
v2+wTvvBwV6nmiWbxNeJBobg66ABGqAE7LK41Rm3RvV0K1o1mlogDp+IuxpRvxeB
EcCassgS7gm/poj2SAFphGPEaxWVA8IC+dSvVStM8Y2qXbSXYRzBhwl0f65PAH2I
EsH3p+b1A2TSFWapIKlG2DevjG7H1OJbkt5Hfb5R5doXKIr5rOmoIye+kOPwRsIU
OO64im+/pIU5g31bQQ8TDZPxd5Z0/7M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:15 2024 by rpki-client on console-fra.rpki-client.org