Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc352fdc-5a98-30fe-84e9-3f9ea455be61.roa
File:                     cc352fdc-5a98-30fe-84e9-3f9ea455be61.roa (raw, json)
Hash identifier:          iLqjmk1zFbFe5mYTHZfizZUOUcBvnKV1rKqPtHZD5Ho=
Subject key identifier:   19:34:96:99:F6:51:26:40:81:79:D2:5B:EA:A4:22:92:42:15:1D:73
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A16CE1D2B9A00D12F87840
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc352fdc-5a98-30fe-84e9-3f9ea455be61.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.115.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:6c:e1:d2:b9:a0:0d:12:f8:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=91e7adc1-2502-4123-973f-a6f722123f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:18:98:8d:b2:95:ca:4b:e9:09:6a:e3:f3:a2:
                    d7:5d:ef:69:87:5c:54:c6:f2:72:33:d0:6e:b1:5f:
                    f7:38:e3:8d:b6:31:a1:84:5b:8b:cc:5e:e5:a2:56:
                    f1:c4:8b:f6:f0:d3:f8:65:18:22:c3:a9:20:ff:a2:
                    36:e3:07:7d:fd:39:67:58:37:01:22:76:5f:8c:e3:
                    4e:6f:ed:81:27:3c:0b:fd:ba:3e:6f:37:33:ab:1c:
                    66:d6:55:61:95:3b:be:91:dd:a5:ff:51:a2:92:ca:
                    d4:7a:98:32:a5:2c:bd:bd:d1:db:81:8a:7c:b8:f0:
                    1d:af:eb:01:42:49:40:e9:27:83:31:06:14:c9:22:
                    af:1a:37:61:41:6e:3a:97:72:7b:67:34:ca:8f:1e:
                    d0:07:5d:ee:50:c3:96:f0:f3:ea:2b:95:81:8e:b1:
                    3b:3f:56:18:46:5d:d9:78:48:55:94:90:82:1c:23:
                    6c:8b:c6:7a:17:09:a3:a4:f4:af:f3:d1:1f:eb:c0:
                    1b:c8:e3:27:41:aa:76:4a:4e:8e:b2:59:c7:da:36:
                    a9:a2:71:64:64:b3:e9:f8:c9:4f:7e:47:af:13:1f:
                    3b:ec:bb:97:30:04:b1:0f:81:23:69:34:05:ff:0e:
                    9e:4e:76:cc:63:e5:81:f4:1a:bd:10:63:5a:48:51:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:34:96:99:F6:51:26:40:81:79:D2:5B:EA:A4:22:92:42:15:1D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc352fdc-5a98-30fe-84e9-3f9ea455be61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.115.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:7e:e2:6f:59:ac:bb:5c:db:3d:b6:73:3c:ee:b2:60:1a:f8:
         09:5f:cf:d6:fe:04:ae:71:f6:0e:e6:a0:6e:33:96:ec:7f:74:
         07:45:a5:ad:01:eb:22:74:d9:69:84:ee:78:26:d1:a0:b3:b4:
         b2:79:64:e5:4e:30:1f:56:9d:81:f3:db:fd:74:70:c1:c3:0b:
         fa:d0:f5:d0:50:8f:56:41:89:ad:17:23:12:d1:f5:c6:8a:81:
         38:b6:20:63:f3:fe:2d:e4:2a:e7:2c:66:a4:02:62:b8:5c:8f:
         ac:27:5d:43:7d:12:23:75:9e:3f:32:72:c7:5d:2b:fb:f2:5d:
         8f:78:8d:0e:15:d6:a7:e5:38:e6:3a:9b:44:96:f4:41:0a:a0:
         05:49:ab:2e:5f:a4:c5:ad:18:ee:01:d0:b9:64:09:ff:83:5c:
         cc:3b:37:b3:59:93:f8:31:e8:5c:5c:87:61:66:c7:10:6b:e1:
         38:48:91:cb:16:51:16:1f:0a:b2:b2:2e:1d:d0:58:e3:99:3c:
         57:dc:74:95:e6:c4:d4:22:08:15:b3:e1:8c:e9:f8:f9:dc:83:
         78:45:23:3d:52:2b:7d:f7:41:32:60:67:17:81:de:af:0b:c6:
         07:cc:dd:ed:4a:28:0e:de:07:ea:d7:f7:32:9f:21:ac:a4:7e:
         a5:17:1d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:21 2024 by rpki-client on console-fra.rpki-client.org