Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a943a0e2-6638-39aa-8f5f-634577a7fc0b.roa
File:                     a943a0e2-6638-39aa-8f5f-634577a7fc0b.roa (raw, json)
Hash identifier:          x2ILPA/8a83Yy3orL6VIddB8EPwpQZoDTo+xnL3+cSU=
Subject key identifier:   D0:F2:41:17:DD:32:14:B7:86:8A:29:E6:61:56:DC:5D:87:75:EB:04
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EA50C92A0FD441E1A7180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a943a0e2-6638-39aa-8f5f-634577a7fc0b.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        68.191.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:a5:0c:92:a0:fd:44:1e:1a:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=d61c4887-4a28-4e8c-9cc3-c798c25e34d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a9:9c:c1:f6:38:82:b9:51:cc:4c:39:7d:83:
                    3e:67:d3:1d:61:b2:59:e8:98:a7:4a:87:4c:84:25:
                    82:ee:46:d3:27:9a:c4:3f:b2:e6:a9:11:61:7d:72:
                    6b:15:eb:ff:79:2e:67:2c:7b:13:a7:c7:0c:d8:4e:
                    b5:97:75:25:f5:68:e7:eb:c1:29:2e:83:2e:3e:c6:
                    04:eb:fc:66:05:43:a9:90:ad:bc:a0:f3:89:1c:90:
                    a5:e4:5d:e6:bd:a6:02:dc:d9:82:cf:81:58:f7:f1:
                    21:c6:83:81:f2:e6:f7:2d:95:05:c7:a3:81:cf:d6:
                    8b:fb:d6:e6:18:69:3f:55:94:18:08:d9:1f:b6:a6:
                    6a:26:36:5f:09:65:aa:dc:cb:e5:04:1f:df:9c:f9:
                    ff:41:24:ee:f8:84:a0:d0:81:ed:96:c4:82:12:a1:
                    74:a2:16:e0:98:cf:32:49:7d:f4:9f:d9:b1:80:ad:
                    b0:50:4e:ba:74:92:a2:ed:a4:f7:5c:79:78:da:b0:
                    1a:40:a5:b9:c3:34:2e:cd:d9:ac:91:d7:4c:85:31:
                    94:7f:a0:83:73:41:36:59:2d:33:90:30:69:a0:c3:
                    f9:27:53:97:5d:3a:92:30:79:42:06:33:44:94:be:
                    d7:b6:b9:6d:28:58:b7:07:31:be:8a:38:d1:3d:27:
                    63:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F2:41:17:DD:32:14:B7:86:8A:29:E6:61:56:DC:5D:87:75:EB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a943a0e2-6638-39aa-8f5f-634577a7fc0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.191.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:28:f0:39:f7:d8:5e:ea:6d:99:7d:c8:51:1d:59:49:51:d2:
         07:96:cb:48:d2:2f:cc:40:4d:87:e5:09:82:ea:eb:5a:a3:5b:
         b5:b5:39:46:b2:2e:5a:c0:5c:8d:ba:9b:5d:74:20:2b:22:35:
         4d:8b:ca:b9:5d:48:70:de:46:68:7f:35:22:de:2d:22:c5:21:
         31:38:54:f3:c3:d8:df:e8:38:06:9c:fe:3a:9e:29:8a:44:09:
         c9:eb:db:86:fa:38:9a:9f:11:24:32:6c:05:c9:5d:08:df:41:
         99:a6:8e:0e:86:9a:ad:72:30:c7:e0:35:74:2d:c9:bf:3a:af:
         ed:26:2f:bb:8c:2a:ff:d0:ed:1d:50:a7:fa:13:e1:3c:18:44:
         f8:5a:47:5d:da:07:62:c1:0c:7b:00:53:0a:4c:7d:df:34:ab:
         b6:65:35:8d:2b:93:bc:17:8b:8b:e3:06:8e:73:43:ef:2e:41:
         18:b8:b1:57:23:92:a5:bf:d4:7c:5f:5e:fa:e3:d3:5c:82:06:
         f8:7a:a6:63:44:f8:05:16:d9:54:f0:66:a9:6f:06:62:85:5c:
         8b:45:7e:f5:f5:31:a9:80:85:a2:91:33:bc:ec:9d:59:47:cd:
         14:9a:4d:d9:76:0c:9f:af:95:98:0b:b8:0e:e1:3e:83:f9:65:
         d8:e0:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 12:18:57 2024 by rpki-client on console-ams.rpki-client.org