Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/8e1fbf84-9072-388c-955a-53f6be63eb70.roa
File:                     8e1fbf84-9072-388c-955a-53f6be63eb70.roa (raw, json)
Hash identifier:          nl1CcCNtJddGORN6vKqUVV90LI6QVpBfwepbQskfPwQ=
Subject key identifier:   AE:EE:3E:E4:CA:6F:8A:EC:50:A9:74:64:2F:80:CA:36:B0:96:51:BA
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285849CBCF857F693028C7B78B9940
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/8e1fbf84-9072-388c-955a-53f6be63eb70.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     42
IP address blocks:        68.65.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:85:7f:69:30:28:c7:b7:8b:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=fb1d7467-00c3-4a64-8a7b-9953920dc1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:84:8e:e2:35:9b:1b:e5:e7:e1:8a:f9:e2:
                    8b:ab:c9:4b:3b:93:40:a6:81:35:f1:13:7a:51:35:
                    1e:b9:89:43:0c:f4:8c:21:c9:91:bc:5d:2b:ec:cd:
                    05:de:54:68:a5:92:3f:4b:61:d9:c2:22:e4:1f:26:
                    71:3a:a3:1d:db:bf:83:b1:46:84:47:c2:2d:9e:d8:
                    7e:31:36:a0:ad:0b:f3:ab:ca:12:9e:3a:bb:54:35:
                    a5:de:2e:c3:22:4e:46:87:b5:61:25:49:c3:40:be:
                    ca:6f:bb:fc:0a:95:6f:7e:9c:35:1c:4d:7e:df:ab:
                    35:59:30:21:8d:dd:74:d3:5c:28:a6:01:c5:89:98:
                    29:ed:1e:f3:78:33:c3:30:48:01:66:6d:6d:ea:e8:
                    53:e0:a6:5d:f6:e8:a0:47:40:e7:e7:0f:99:48:51:
                    2a:75:c0:c6:44:1c:cf:6e:3e:0e:ee:7e:3d:27:a4:
                    5e:cb:3c:b7:20:32:d5:ad:d8:09:f2:dd:41:db:4f:
                    98:58:7a:b2:5a:99:a5:6f:32:27:29:96:78:2f:80:
                    60:eb:97:56:38:db:19:9c:5a:db:e6:15:0a:69:c9:
                    25:a5:2f:58:3f:fe:52:b8:b5:f5:ea:53:f1:11:79:
                    49:aa:21:51:47:cd:df:8c:a1:94:90:b3:9a:ff:db:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EE:3E:E4:CA:6F:8A:EC:50:A9:74:64:2F:80:CA:36:B0:96:51:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/8e1fbf84-9072-388c-955a-53f6be63eb70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.65.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:63:77:b1:2c:75:4c:4b:17:6f:c4:41:56:d8:44:45:b0:03:
         ff:33:4a:ad:1d:5b:77:6b:f6:f0:14:35:3a:14:04:d7:c1:45:
         39:c3:74:02:2a:bf:f4:06:b0:ac:3c:5b:8d:b5:29:41:59:3d:
         4b:ab:08:80:6e:99:81:80:99:c3:f8:33:58:aa:02:76:18:5a:
         78:1a:31:7b:85:ab:5b:14:5e:05:d7:35:36:b4:e0:2d:b0:a5:
         dd:fd:40:c5:68:1a:a6:26:af:6f:39:df:0e:1f:7a:13:da:6c:
         8b:4e:95:72:44:6b:87:a2:6f:5b:c9:0e:31:d6:5f:2f:b6:93:
         08:b7:1f:ee:8f:7d:d1:f5:8b:df:91:e4:2f:f0:d0:c2:95:1d:
         e8:6a:2b:ef:64:31:4b:99:c8:ab:11:d7:dc:4c:54:70:df:6c:
         8f:20:44:12:c8:0c:6a:7a:8b:98:78:cb:41:94:a8:4d:21:01:
         8d:0d:dc:c4:4e:16:18:d4:d9:34:42:e2:04:92:30:ea:2a:e2:
         e8:f1:17:b1:89:4a:3f:af:e2:0c:d1:dd:30:ab:4f:36:62:32:
         0e:94:06:1d:80:c7:b3:92:38:97:7b:13:f2:63:5d:9a:8d:7a:
         4e:cd:6c:79:e7:7f:63:56:fc:1c:8e:01:28:05:19:e1:21:f8:
         e9:51:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:05:07 2025 by rpki-client