Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4684f56-e56e-36c9-91c7-c4df1b2fecb8.roa
File:                     b4684f56-e56e-36c9-91c7-c4df1b2fecb8.roa (raw, json)
Hash identifier:          2pMJ3CDqEfe0KPhSsfvvt+tUNl5EML2iHfi7vY2ulAM=
Subject key identifier:   30:C5:6B:41:2C:17:BE:16:44:E0:51:99:9C:7B:52:5A:43:3B:C1:C8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E113173B0B4173023D200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4684f56-e56e-36c9-91c7-c4df1b2fecb8.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        68.115.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:11:31:73:b0:b4:17:30:23:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=3d64a905-d0c5-40fa-9c18-2ed5a5463e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:10:55:33:2b:4c:e3:d2:a2:78:87:de:f9:db:
                    1b:69:73:ba:d3:42:b0:b1:80:6c:70:a0:15:fa:3e:
                    51:3f:2b:78:0f:fc:55:f9:95:1d:52:e2:1a:c8:7f:
                    a7:8d:b1:84:1c:0e:b9:43:01:7d:29:0b:a7:a8:0a:
                    97:48:59:c5:ca:cf:9a:e7:3c:7b:12:f5:9e:f9:48:
                    30:79:b5:19:88:d0:f2:39:16:20:3f:9f:2e:47:80:
                    98:fd:9e:36:33:ec:84:7f:1f:4e:89:1e:ac:0a:4a:
                    12:d2:ad:4e:fd:58:d4:2a:f1:15:6b:b3:69:92:8a:
                    33:87:d8:57:7d:46:a5:a5:3a:16:18:e5:32:46:dc:
                    34:d2:84:c8:35:f4:92:1b:36:df:65:53:32:74:90:
                    d8:60:18:3b:41:b3:87:9d:d8:27:86:d1:0c:83:ec:
                    97:74:a3:02:d4:23:83:10:fb:b1:85:06:3f:38:ac:
                    b5:bf:4e:56:56:dd:d5:b8:95:89:92:a9:c5:d9:47:
                    ec:e0:78:4e:5b:c8:a2:38:18:11:1f:c1:01:ed:7f:
                    23:51:a2:3a:f0:1a:a9:ee:b3:45:af:d1:0b:38:3d:
                    68:79:85:68:2f:35:2e:15:0b:2e:b3:7f:05:7e:7b:
                    1e:a6:aa:ce:9d:e2:76:77:ac:8b:3a:39:bd:4e:e7:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C5:6B:41:2C:17:BE:16:44:E0:51:99:9C:7B:52:5A:43:3B:C1:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4684f56-e56e-36c9-91c7-c4df1b2fecb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.115.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:63:0a:93:cd:51:a4:d5:ee:c4:22:3a:0d:4f:d4:3f:f7:f0:
         bc:c9:26:9f:07:d8:48:29:c1:7c:ff:ef:a1:ba:49:8a:c9:11:
         76:97:ad:71:15:19:e1:71:4e:40:26:b6:3d:ee:4c:81:26:57:
         84:51:e3:2f:34:65:c5:f5:38:74:bf:ae:98:2b:73:ed:98:75:
         03:c6:3d:ad:d9:51:8b:c7:ad:07:fe:ac:b9:9a:1f:9e:12:00:
         61:2b:20:9c:8f:75:79:9b:19:38:f3:1b:ff:09:49:cc:c7:de:
         f5:72:0a:f6:d2:1b:b4:28:7d:a1:ab:ca:1a:cf:87:79:09:49:
         c7:aa:9d:ab:90:d8:1d:35:15:34:2c:c9:f7:5c:13:5a:f8:f8:
         32:83:56:9c:a6:74:c4:8c:fe:a5:66:f2:64:67:b5:3c:b0:45:
         75:2e:d3:f0:1e:f8:10:68:1b:27:f9:06:3b:ac:f7:ed:15:87:
         54:23:40:0b:f6:e7:5d:bd:dd:2b:30:52:2d:5b:7b:c5:98:96:
         be:6b:d4:4f:f4:da:7a:6a:f2:e5:d1:72:09:3b:bf:a9:40:1c:
         66:cf:6f:20:d2:08:a5:04:b4:2b:b3:eb:4e:f0:70:78:d2:0a:
         68:9e:aa:0b:8f:d2:91:dd:e4:1d:ba:25:a2:9a:33:95:59:ec:
         a6:90:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:04:07 2024 by rpki-client on console-fra.rpki-client.org