Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f178248a-0a7e-3e9d-8055-75b4febc8a22.roa
File:                     f178248a-0a7e-3e9d-8055-75b4febc8a22.roa (raw, json)
Hash identifier:          i8IYPMGPsp9KpJLXpXTCJERehQh8wTVnpcZpnQoCOcE=
Subject key identifier:   9F:1D:8D:A6:47:DF:E1:59:F5:3F:25:F5:90:4D:64:E6:1C:9C:09:1B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858474420BB919E6B5B171AC65D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f178248a-0a7e-3e9d-8055-75b4febc8a22.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     20115
IP address blocks:        68.118.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:bb:91:9e:6b:5b:17:1a:c6:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=3b9d7f99-8d38-4f96-8147-dcfb9bf35184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:8f:26:af:a9:0a:e2:34:b4:6a:d6:08:fb:
                    98:e0:63:35:08:77:e9:fe:d6:04:3a:b0:83:20:90:
                    cd:87:5b:e6:33:63:cf:b7:5a:80:36:ff:c3:e2:ac:
                    1d:ef:e5:bd:96:cb:92:80:f6:fe:ed:20:6f:4a:dd:
                    a2:d4:8b:7e:ea:b7:f3:33:da:96:cc:eb:39:27:7a:
                    91:e0:85:d0:b5:53:cf:63:9e:bc:84:a3:21:ad:51:
                    ea:e3:b8:87:2e:86:ed:60:dd:82:42:cb:0b:ac:9b:
                    04:9c:1d:d6:ad:0b:b2:56:e6:92:1a:84:94:6d:e5:
                    50:07:32:db:2d:04:8e:6c:b3:7c:60:19:a9:22:07:
                    cc:1c:0e:87:d7:ad:79:d4:8e:d6:77:f8:55:c5:91:
                    ad:08:df:8c:93:fb:47:e4:04:4e:ac:a2:4c:00:34:
                    17:d7:d7:aa:df:87:ac:9c:76:e6:50:bd:90:71:85:
                    bf:72:1a:d5:85:03:18:29:c1:83:5e:d5:bf:98:8a:
                    04:54:cd:0e:d3:31:9e:f2:ce:cb:1a:e3:80:e8:87:
                    63:80:16:31:d0:5b:46:15:c0:c6:93:8e:25:5a:4b:
                    b7:a2:98:2d:37:6e:68:b4:20:5e:63:12:70:77:be:
                    ba:e5:87:4e:d8:33:3a:2f:e0:53:7c:c2:4f:49:02:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:8D:A6:47:DF:E1:59:F5:3F:25:F5:90:4D:64:E6:1C:9C:09:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f178248a-0a7e-3e9d-8055-75b4febc8a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.118.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:44:5b:25:d5:de:44:c1:65:4e:16:76:ad:e3:f3:03:44:9f:
         c8:f1:30:b9:5c:49:4d:2d:ad:97:21:80:e6:95:51:ad:e7:6b:
         57:7e:1f:3b:e7:0d:b9:20:19:f7:55:cf:e2:3a:f3:36:1f:2c:
         4b:9b:79:50:94:37:40:74:19:ed:f0:c8:2f:83:8e:dc:27:9b:
         3d:3c:28:2d:51:8c:85:ba:4f:1e:2c:51:33:54:cc:6f:d1:d1:
         94:4b:28:c2:7a:5a:c8:28:c3:98:59:d0:2c:f6:90:2c:e5:dc:
         1f:4d:9d:9c:0e:41:c5:6a:0f:a8:cc:e3:b6:47:ab:c0:67:20:
         3b:e6:90:df:91:4a:7a:3e:b8:be:77:9a:e6:00:56:f6:4b:63:
         c4:2d:d0:04:03:fe:c7:17:03:a5:9e:30:49:da:a2:f5:56:86:
         ec:c8:4b:90:ac:4f:0c:0e:6f:dc:e3:21:5b:28:ea:a0:93:8e:
         28:b7:78:6c:92:e1:c6:15:da:c3:20:db:c1:4a:69:50:d4:8c:
         46:a6:2c:6c:ae:28:01:ba:ea:f7:50:3e:aa:2d:50:b1:22:1c:
         3c:13:75:13:8c:b9:20:cb:a5:39:31:59:93:e4:59:d7:e6:0a:
         0c:53:a7:be:22:52:f3:b4:e6:b0:0f:cc:e2:14:58:a0:de:fe:
         ba:69:2a:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdEILuRnmtbFxrGXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk
M2I5ZDdmOTktOGQzOC00Zjk2LTgxNDctZGNmYjliZjM1MTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ6PJq+pCuI0tGrWCPuY4GM1CHfp/tYEOrCD
IJDNh1vmM2PPt1qANv/D4qwd7+W9lsuSgPb+7SBvSt2i1It+6rfzM9qWzOs5J3qR
4IXQtVPPY568hKMhrVHq47iHLobtYN2CQssLrJsEnB3WrQuyVuaSGoSUbeVQBzLb
LQSObLN8YBmpIgfMHA6H16151I7Wd/hVxZGtCN+Mk/tH5AROrKJMADQX19eq34es
nHbmUL2QcYW/chrVhQMYKcGDXtW/mIoEVM0O0zGe8s7LGuOA6IdjgBYx0FtGFcDG
k44lWku3opgtN25otCBeYxJwd7665YdO2DM6L+BTfMJPSQKEsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8djaZH3+FZ9T8l9ZBNZOYcnAkbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjE3ODI0OGEtMGE3ZS0z
ZTlkLTgwNTUtNzViNGZlYmM4YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARHYSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVEWyXV3kTBZU4Wdq3j8wNEn8jxMLlcSU0trZchgOaVUa3na1d+Hzvn
DbkgGfdVz+I68zYfLEubeVCUN0B0Ge3wyC+Djtwnmz08KC1RjIW6Tx4sUTNUzG/R
0ZRLKMJ6Wsgow5hZ0Cz2kCzl3B9NnZwOQcVqD6jM47ZHq8BnIDvmkN+RSno+uL53
muYAVvZLY8Qt0AQD/scXA6WeMEnaovVWhuzIS5CsTwwOb9zjIVso6qCTjii3eGyS
4cYV2sMg28FKaVDUjEamLGyuKAG66vdQPqotULEiHDwTdROMuSDLpTkxWZPkWdfm
CgxTp74iUvO05rAPzOIUWKDe/rppKp8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:25 2024 by rpki-client on console-fra.rpki-client.org