Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc45fe7b-6a63-399a-88b0-acc494d61190.roa
File:                     dc45fe7b-6a63-399a-88b0-acc494d61190.roa (raw, json)
Hash identifier:          Cxiv9sfREdSqjUi3Ffq6XkFY7dcRwuoEpKX/yEzIzDY=
Subject key identifier:   B8:85:AE:70:E0:33:96:E8:5F:C6:23:85:64:DD:E4:2F:8D:C5:EB:92
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A1494F99F909156E9817E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc45fe7b-6a63-399a-88b0-acc494d61190.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11777
IP address blocks:        68.119.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:49:4f:99:f9:09:15:6e:98:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=9a7485aa-5638-4c41-b39b-f08ec2420500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:ea:2b:65:ad:1d:5b:03:24:79:22:7a:33:
                    db:f3:d1:d4:9a:15:ee:2c:f2:95:65:61:46:90:8f:
                    6d:cd:df:8d:c9:26:05:65:ca:74:7e:d6:8a:78:d3:
                    e8:5f:c6:f4:0c:e4:30:ac:a4:60:86:90:13:f4:1d:
                    e8:13:47:69:6b:12:f6:76:f9:50:31:4e:1c:c0:e9:
                    9e:dd:54:16:cc:78:af:51:ac:c4:a5:f5:1e:40:b1:
                    32:02:75:61:86:e3:e1:5a:4c:b2:9a:9a:06:23:99:
                    80:e1:b7:2f:24:8d:c0:17:99:32:6b:4d:36:bc:09:
                    01:a6:58:91:3f:0f:08:5a:54:9f:5c:8e:d3:18:8b:
                    37:ca:95:6d:3c:85:d8:19:86:ad:ad:87:b3:f1:b6:
                    9e:32:51:95:f5:54:50:57:51:31:ea:86:89:fc:80:
                    a2:85:17:07:9e:50:69:be:04:30:a6:2e:4a:bf:ba:
                    fb:9e:72:ee:bd:ce:3f:a8:ff:be:9b:ad:b7:67:47:
                    aa:e6:08:b0:58:92:f2:e2:ab:ed:de:00:2e:87:85:
                    07:45:4e:fe:bf:b0:75:ba:c9:a0:2a:04:0f:bf:6f:
                    7c:dc:25:0b:de:46:d5:7c:86:34:89:03:22:70:63:
                    d6:2d:8a:5f:8c:7c:a7:0c:7f:1f:60:31:de:d0:70:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:85:AE:70:E0:33:96:E8:5F:C6:23:85:64:DD:E4:2F:8D:C5:EB:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc45fe7b-6a63-399a-88b0-acc494d61190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.119.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f2:18:3b:97:79:e5:13:0d:79:0c:8a:75:d1:13:f1:9e:18:
         4b:e2:2a:e9:9b:e1:9b:ec:b0:b3:6e:26:87:b8:ad:d9:71:32:
         b1:50:93:2b:5a:70:fb:13:fa:8b:ad:1a:d5:5d:d4:67:3d:f1:
         47:40:f9:65:3f:60:bf:8d:22:8d:a9:0c:0a:20:06:96:40:a7:
         ac:81:d7:91:97:19:d6:10:58:5b:1b:d8:2a:ab:d2:8b:b8:b4:
         69:2a:66:18:09:09:c4:f0:6f:6c:f9:b0:5c:4e:48:d9:8d:fc:
         b6:59:0d:b1:f6:fa:66:10:a9:0b:7f:e3:41:7e:fb:72:5e:4c:
         09:bc:b5:81:31:80:e8:77:4c:65:d2:48:92:da:99:ad:97:1b:
         6c:55:e2:87:ed:b6:7f:74:19:97:3e:21:b6:93:83:ff:b0:4a:
         f1:74:e0:b3:cc:44:96:fa:84:ad:2e:09:4c:62:37:54:df:b8:
         0b:02:87:2c:3e:e3:a5:71:d0:34:9a:a2:f3:be:0e:2d:b3:a9:
         db:20:cf:10:b9:bf:91:b4:83:28:cf:5d:9d:48:8d:c7:42:eb:
         a3:19:a9:82:88:89:89:b7:14:81:b4:8d:77:3d:e2:f7:eb:cc:
         44:8a:fc:e9:6f:d8:6b:c0:2e:bb:8a:7c:44:91:50:f5:bc:3c:
         fe:3e:8a:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioUlPmfkJFW6YF+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
OWE3NDg1YWEtNTYzOC00YzQxLWIzOWItZjA4ZWMyNDIwNTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr07qK2WtHVsDJHkiejPb89HUmhXuLPKVZWFG
kI9tzd+NySYFZcp0ftaKeNPoX8b0DOQwrKRghpAT9B3oE0dpaxL2dvlQMU4cwOme
3VQWzHivUazEpfUeQLEyAnVhhuPhWkyympoGI5mA4bcvJI3AF5kya002vAkBpliR
Pw8IWlSfXI7TGIs3ypVtPIXYGYatrYez8baeMlGV9VRQV1Ex6oaJ/ICihRcHnlBp
vgQwpi5Kv7r7nnLuvc4/qP++m623Z0eq5giwWJLy4qvt3gAuh4UHRU7+v7B1usmg
KgQPv2983CUL3kbVfIY0iQMicGPWLYpfjHynDH8fYDHe0HDRmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLiFrnDgM5boX8YjhWTd5C+NxeuSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGM0NWZlN2ItNmE2My0z
OTlhLTg4YjAtYWNjNDk0ZDYxMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRHe2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjyGDuXeeUTDXkMinXRE/GeGEviKumb4ZvssLNuJoe4rdlxMrFQkyta
cPsT+outGtVd1Gc98UdA+WU/YL+NIo2pDAogBpZAp6yB15GXGdYQWFsb2Cqr0ou4
tGkqZhgJCcTwb2z5sFxOSNmN/LZZDbH2+mYQqQt/40F++3JeTAm8tYExgOh3TGXS
SJLama2XG2xV4ofttn90GZc+IbaTg/+wSvF04LPMRJb6hK0uCUxiN1TfuAsChyw+
46Vx0DSaovO+Di2zqdsgzxC5v5G0gyjPXZ1IjcdC66MZqYKIiYm3FIG0jXc94vfr
zESK/Olv2GvALruKfESRUPW8PP4+igE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:02 2024 by rpki-client on console-ams.rpki-client.org