Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa
File:                     e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa (raw, json)
Hash identifier:          8RWiiWJBAerPGejj8zjEAZZksTyQLFe5vRvmikOopwg=
Subject key identifier:   84:4B:48:5F:7B:5F:65:55:8B:A7:2D:18:5E:6C:54:F9:91:CA:03:58
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A16A58F26DBD84F0EC9B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        68.112.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:6a:58:f2:6d:bd:84:f0:ec:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=0f3147ea-9b43-4bee-98a0-9b5a4041d018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:63:c9:27:a4:83:a4:69:5b:87:2e:3f:a7:
                    1f:74:35:39:0d:8c:f8:d6:9c:8d:29:95:9a:cb:75:
                    d3:ef:67:03:55:6f:77:c0:04:48:fa:cd:99:a7:6a:
                    21:12:38:ba:41:15:2f:0c:d1:bf:17:a3:15:7b:c8:
                    f3:3a:90:8e:e4:a6:72:af:f6:bb:25:7f:68:9d:be:
                    1f:54:5a:c1:a4:45:a3:32:aa:56:db:4e:94:f9:17:
                    1a:ea:8e:11:9f:49:e4:42:37:ac:5e:e7:53:d7:56:
                    f2:eb:f8:2f:49:b8:5b:a5:88:6b:81:b7:69:aa:57:
                    ec:95:3d:a2:84:f9:36:41:49:fc:94:ce:f1:3d:20:
                    c5:02:4e:88:c1:ad:e0:ca:93:44:32:80:01:17:41:
                    7d:9d:e4:28:7a:bd:62:c8:3e:5d:52:7e:a3:21:05:
                    92:51:69:d6:e2:25:ea:b6:4a:1a:c2:e8:2a:b6:d0:
                    e1:df:00:4c:27:c2:37:fe:66:16:82:8c:f6:18:d3:
                    d7:7c:37:3a:de:75:a9:c5:e5:6c:86:2c:09:a6:ad:
                    30:44:1c:00:c1:d0:e4:34:8a:d3:06:a0:c2:ab:75:
                    bd:bd:c3:ad:10:fd:4e:49:c8:37:94:18:3f:df:c8:
                    a4:de:2a:71:32:8e:c4:6c:d8:22:97:15:06:6d:16:
                    55:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4B:48:5F:7B:5F:65:55:8B:A7:2D:18:5E:6C:54:F9:91:CA:03:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ae:36:ed:e2:27:67:0a:58:47:58:6d:09:c4:06:60:c3:22:
         f6:01:fd:a7:88:33:4c:ef:3d:8a:36:51:61:c5:ca:c6:04:a2:
         47:53:1b:24:3a:ef:e8:6f:fb:7c:11:65:d9:8b:b8:d3:53:eb:
         8e:01:84:4b:68:37:ac:a0:94:8c:ad:3e:0c:ae:da:c2:37:5b:
         99:a7:bc:20:49:5a:a4:b9:7d:5d:8d:cd:63:a9:73:b7:5d:ad:
         34:e4:46:b0:6c:a6:28:d9:8a:d8:71:08:3b:b8:b4:3e:21:9e:
         8a:a1:e9:4a:5e:1a:cb:03:4e:d5:00:06:3c:e7:dd:da:df:ae:
         fb:9b:02:d2:5c:e1:88:08:0c:a4:c3:1c:3e:c2:19:5b:51:d8:
         2a:7c:35:99:95:22:d2:60:61:ad:83:7c:0a:9e:17:a7:e2:82:
         84:b5:ea:5b:19:00:da:9a:90:a2:f8:c7:94:27:52:8d:95:18:
         f6:3b:a3:13:81:4e:e7:ce:77:48:64:ea:f1:c1:14:98:25:43:
         30:26:c6:2d:00:ae:f8:4e:f2:cd:ce:29:18:9e:09:81:79:5a:
         ae:99:4e:76:86:52:2c:71:19:bd:fe:41:83:6b:52:0c:86:7a:
         4f:e0:f9:fa:a4:a8:63:71:2c:80:98:3b:50:e5:9b:92:aa:96:
         a4:e1:bc:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioWpY8m29hPDsmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
MGYzMTQ3ZWEtOWI0My00YmVlLTk4YTAtOWI1YTQwNDFkMDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAFjySekg6RpW4cuP6cfdDU5DYz41pyNKZWa
y3XT72cDVW93wARI+s2Zp2ohEji6QRUvDNG/F6MVe8jzOpCO5KZyr/a7JX9onb4f
VFrBpEWjMqpW206U+Rca6o4Rn0nkQjesXudT11by6/gvSbhbpYhrgbdpqlfslT2i
hPk2QUn8lM7xPSDFAk6Iwa3gypNEMoABF0F9neQoer1iyD5dUn6jIQWSUWnW4iXq
tkoawugqttDh3wBMJ8I3/mYWgoz2GNPXfDc63nWpxeVshiwJpq0wRBwAwdDkNIrT
BqDCq3W9vcOtEP1OScg3lBg/38ik3ipxMo7EbNgilxUGbRZVpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRLSF97X2VVi6ctGF5sVPmRygNYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTM2YWFhMjAtYjkwNi0z
Mjk1LTljMGQtN2VhOWI5ZTFmY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRHAoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAImuNu3iJ2cKWEdYbQnEBmDDIvYB/aeIM0zvPYo2UWHFysYEokdTGyQ6
7+hv+3wRZdmLuNNT644BhEtoN6yglIytPgyu2sI3W5mnvCBJWqS5fV2NzWOpc7dd
rTTkRrBspijZithxCDu4tD4hnoqh6UpeGssDTtUABjzn3drfrvubAtJc4YgIDKTD
HD7CGVtR2Cp8NZmVItJgYa2DfAqeF6figoS16lsZANqakKL4x5QnUo2VGPY7oxOB
TufOd0hk6vHBFJglQzAmxi0ArvhO8s3OKRieCYF5Wq6ZTnaGUixxGb3+QYNrUgyG
ek/g+fqkqGNxLICYO1Dlm5KqlqThvD8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:03 2024 by rpki-client on console-ams.rpki-client.org