Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8a78ad7-ba14-38b4-9831-a1199ba6045d.roa
File:                     c8a78ad7-ba14-38b4-9831-a1199ba6045d.roa (raw, json)
Hash identifier:          DAwYY/TKrev0NWwVPzzRebFb4OKGozoadhSuGoljbrw=
Subject key identifier:   02:9A:BE:E8:A4:CA:DD:2F:D9:44:6C:A3:1F:BF:A4:46:15:54:79:3E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285839379F53DCA53C08CFD07C1700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8a78ad7-ba14-38b4-9831-a1199ba6045d.roa
Signing time:             Thu 11 Mar 2021 05:00:00 +0000
ROA not before:           Thu 11 Mar 2021 05:00:00 +0000
ROA not after:            Thu 04 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        68.190.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:9f:53:dc:a5:3c:08:cf:d0:7c:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 11 05:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2027 GMT
        Subject: CN=2470ddd4-8297-4d0f-a28d-6ddac236a815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:08:5b:8b:37:4d:2d:03:8e:44:be:31:68:ae:
                    49:11:a0:26:59:23:9c:b0:6a:39:d8:97:59:57:cb:
                    e6:5c:ed:96:d5:ce:c7:df:16:12:dc:22:31:e9:3b:
                    03:f5:f6:f0:02:18:bc:ac:d0:36:0b:12:e8:df:f0:
                    a8:ab:3a:b8:de:7e:f2:d8:22:2f:ec:4f:13:f5:f3:
                    9d:43:d1:9b:13:8d:cb:82:7e:c6:9c:1b:4e:d9:14:
                    10:27:ed:7a:d2:5a:ab:f8:24:11:2f:c9:2d:10:b7:
                    e5:c6:b6:46:90:a8:0b:47:d6:11:d1:f5:d1:d6:5e:
                    fc:ac:69:1c:19:4d:9d:cf:12:81:e4:16:1f:2b:36:
                    bb:c4:04:05:b7:ba:24:2c:30:c3:23:72:f9:0e:f0:
                    6f:6b:28:ad:9d:99:0c:75:7b:c2:eb:74:1f:88:be:
                    08:38:86:74:49:c9:d8:4a:04:d7:03:6d:f1:3e:02:
                    df:5f:9f:5d:db:35:60:5b:c9:c2:2b:9c:49:b6:66:
                    14:ef:65:71:d3:01:fb:78:94:8a:45:ee:af:dc:ed:
                    2b:5c:17:ed:93:69:f3:0c:cb:26:e2:12:6c:a1:67:
                    f9:3e:2d:f7:59:cb:94:9e:c0:58:4b:9d:f8:ea:6c:
                    c1:f5:89:03:fe:0b:6a:22:d6:6c:cc:85:72:4b:f9:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9A:BE:E8:A4:CA:DD:2F:D9:44:6C:A3:1F:BF:A4:46:15:54:79:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8a78ad7-ba14-38b4-9831-a1199ba6045d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.190.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:03:3c:fa:d2:43:9f:19:32:73:2a:66:ff:7e:7e:3f:67:2e:
         43:aa:33:9c:6f:c8:e1:45:ac:3f:2d:ca:41:44:04:57:6a:67:
         52:3b:e5:e0:4b:06:ff:9b:41:bb:90:d0:a9:e1:91:70:96:a3:
         8f:1a:d9:94:f8:9d:72:1d:a2:59:20:cd:9c:bb:b1:a0:ff:ab:
         27:20:02:de:5b:ef:b9:2b:78:37:51:b2:24:66:b2:58:02:65:
         e2:d1:80:68:8e:c0:85:a2:a7:e6:7f:64:24:28:83:26:8f:87:
         61:1e:77:43:ac:12:de:7a:3d:10:a1:79:08:36:8e:bb:67:25:
         cb:1f:86:d4:20:d9:63:d3:90:a2:8f:59:ff:43:9c:82:6b:00:
         b7:41:6d:bd:9b:fe:3e:48:be:ac:a0:a9:0f:87:79:dd:3c:46:
         33:b4:b7:a1:02:4c:5f:7c:6f:12:98:d4:69:58:e6:7b:04:66:
         f8:c3:05:0a:84:c6:6a:90:29:91:b4:ef:f3:62:76:b0:c8:77:
         52:99:75:68:f9:7b:75:4b:ab:e5:1f:88:57:8d:77:25:f7:28:
         60:c8:6f:ae:90:3f:c4:e9:f3:20:51:a2:e1:62:9b:93:15:a4:
         0b:29:79:ae:7d:7d:f6:46:8a:12:6a:91:37:90:64:70:e4:c5:
         d3:f6:a2:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDk3n1PcpTwIz9B8FwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDMxMTA1MDAwMFoXDTI3MDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MjQ3MGRkZDQtODI5Ny00ZDBmLWEyOGQtNmRkYWMyMzZhODE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AhbizdNLQOORL4xaK5JEaAmWSOcsGo52JdZ
V8vmXO2W1c7H3xYS3CIx6TsD9fbwAhi8rNA2CxLo3/Coqzq43n7y2CIv7E8T9fOd
Q9GbE43Lgn7GnBtO2RQQJ+160lqr+CQRL8ktELflxrZGkKgLR9YR0fXR1l78rGkc
GU2dzxKB5BYfKza7xAQFt7okLDDDI3L5DvBvayitnZkMdXvC63QfiL4IOIZ0ScnY
SgTXA23xPgLfX59d2zVgW8nCK5xJtmYU72Vx0wH7eJSKRe6v3O0rXBftk2nzDMsm
4hJsoWf5Pi33WcuUnsBYS5346mzB9YkD/gtqItZszIVyS/kn0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKavuikyt0v2URsox+/pEYVVHk+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYzhhNzhhZDctYmExNC0z
OGI0LTk4MzEtYTExOTliYTYwNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgDPPrSQ58ZMnMqZv9+fj9nLkOqM5xvyOFFrD8tykFEBFdqZ1I75eBL
Bv+bQbuQ0KnhkXCWo48a2ZT4nXIdolkgzZy7saD/qycgAt5b77kreDdRsiRmslgC
ZeLRgGiOwIWip+Z/ZCQogyaPh2Eed0OsEt56PRCheQg2jrtnJcsfhtQg2WPTkKKP
Wf9DnIJrALdBbb2b/j5IvqygqQ+Hed08RjO0t6ECTF98bxKY1GlY5nsEZvjDBQqE
xmqQKZG07/NidrDId1KZdWj5e3VLq+UfiFeNdyX3KGDIb66QP8Tp8yBRouFim5MV
pAspea59ffZGihJqkTeQZHDkxdP2oh0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:20 2024 by rpki-client on console-fra.rpki-client.org