Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1efc6238-10f6-3564-80b5-f271e3095f11.roa
File:                     1efc6238-10f6-3564-80b5-f271e3095f11.roa (raw, json)
Hash identifier:          JR53xWA+hdZxzIgfkZfVlKB60d+H5fpa+GG7ECmqNSE=
Subject key identifier:   CD:DD:4A:ED:80:43:1E:92:E9:25:03:48:7C:B9:1F:8C:53:1A:DA:B4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A9417E09F927731AF4A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1efc6238-10f6-3564-80b5-f271e3095f11.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        68.184.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:94:17:e0:9f:92:77:31:af:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=45c3cf6f-762f-4a28-abe4-4fde8cd4ac3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:74:b0:df:20:04:cd:67:6e:dd:59:51:0e:27:
                    02:35:f6:de:94:5e:10:7c:a8:02:ba:a0:65:db:cc:
                    69:0c:c5:0e:38:91:ba:0c:5d:97:7e:f2:73:e1:8d:
                    a9:d3:6b:1e:e5:f6:5c:fc:45:ad:83:ca:11:8f:8b:
                    65:14:b7:e6:94:ad:fb:17:50:96:7b:b5:6c:bd:98:
                    e1:70:1b:1d:16:5d:6c:21:6e:a3:5e:92:ac:15:10:
                    f7:6a:48:a4:9c:4c:c2:9e:28:3c:20:f5:30:ab:01:
                    9a:0e:5b:dc:db:9d:3c:76:7b:6f:20:be:c0:83:9f:
                    b0:0e:a7:a3:ae:41:e0:36:b4:c3:cc:25:72:ee:20:
                    f2:16:71:07:3f:95:85:e3:ee:7d:31:1f:04:05:5a:
                    e2:11:84:cc:7d:75:86:7e:16:3d:f5:b0:2a:d2:2a:
                    90:a3:91:64:26:53:38:94:18:be:c3:9e:81:d6:c5:
                    c6:3f:c3:b2:e4:95:e9:f5:a6:14:8b:59:24:31:5c:
                    6f:0a:6d:00:6d:2e:1c:1a:a9:4a:73:dd:b3:dd:e1:
                    54:a7:0f:3e:5a:ca:d5:6e:d6:aa:d8:c8:1f:63:56:
                    18:7f:ff:b7:f1:e1:49:88:e4:d4:52:e3:70:47:ed:
                    13:35:f5:7b:7a:c5:d4:35:34:dc:27:8c:6d:d5:b6:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DD:4A:ED:80:43:1E:92:E9:25:03:48:7C:B9:1F:8C:53:1A:DA:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1efc6238-10f6-3564-80b5-f271e3095f11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.184.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:30:e6:ac:20:57:0f:d1:38:68:92:34:f4:92:20:1f:a5:95:
         cf:21:2e:52:42:71:64:e0:ef:2c:b3:84:e7:69:e2:9d:ef:14:
         b9:cc:ea:12:f8:86:74:99:ed:19:fb:2f:7d:31:f8:9a:e9:5c:
         0e:b2:86:4e:e8:42:94:5a:d4:8e:2c:66:ec:f8:93:ed:2e:bc:
         32:fb:81:c0:ce:5e:34:03:33:fd:40:ec:5d:1f:61:a2:1f:e0:
         ba:ff:c2:81:11:11:04:07:6a:40:9b:5e:2a:9b:62:ad:dc:8f:
         d5:e3:fa:ed:1a:7e:cf:5f:aa:9a:80:e7:e4:0c:ea:d0:6a:ef:
         84:3b:63:33:58:43:f2:86:3d:a3:35:6a:0e:ac:ab:9a:cb:4a:
         2b:6f:a4:34:85:d3:2f:2a:f1:4d:31:f9:a3:e0:ba:ce:47:1a:
         0e:53:b7:24:16:f1:5b:11:e6:e8:a2:9c:b8:a1:d2:95:4e:96:
         5c:17:d2:7b:91:4d:1c:77:70:15:00:5a:c5:1f:33:88:88:dc:
         fc:45:a8:2b:c3:6a:c8:9b:26:61:c3:63:1b:28:a2:63:6e:84:
         cf:e7:1c:f2:33:f2:b1:c5:28:fe:09:e6:1c:bd:89:86:d4:57:
         15:88:0a:42:a8:e1:a0:a9:5b:63:5b:5f:73:a1:8b:62:29:c4:
         9f:a5:75:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCpQX4J+SdzGvSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
NDVjM2NmNmYtNzYyZi00YTI4LWFiZTQtNGZkZThjZDRhYzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XSw3yAEzWdu3VlRDicCNfbelF4QfKgCuqBl
28xpDMUOOJG6DF2XfvJz4Y2p02se5fZc/EWtg8oRj4tlFLfmlK37F1CWe7VsvZjh
cBsdFl1sIW6jXpKsFRD3akiknEzCnig8IPUwqwGaDlvc2508dntvIL7Ag5+wDqej
rkHgNrTDzCVy7iDyFnEHP5WF4+59MR8EBVriEYTMfXWGfhY99bAq0iqQo5FkJlM4
lBi+w56B1sXGP8Oy5JXp9aYUi1kkMVxvCm0AbS4cGqlKc92z3eFUpw8+WsrVbtaq
2MgfY1YYf/+38eFJiOTUUuNwR+0TNfV7esXUNTTcJ4xt1bbItwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3dSu2AQx6S6SUDSHy5H4xTGtq0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWVmYzYyMzgtMTBmNi0z
NTY0LTgwYjUtZjI3MWUzMDk1ZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLhAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4w5qwgVw/ROGiSNPSSIB+llc8hLlJCcWTg7yyzhOdp4p3vFLnM6hL4
hnSZ7Rn7L30x+JrpXA6yhk7oQpRa1I4sZuz4k+0uvDL7gcDOXjQDM/1A7F0fYaIf
4Lr/woEREQQHakCbXiqbYq3cj9Xj+u0afs9fqpqA5+QM6tBq74Q7YzNYQ/KGPaM1
ag6sq5rLSitvpDSF0y8q8U0x+aPgus5HGg5TtyQW8VsR5uiinLih0pVOllwX0nuR
TRx3cBUAWsUfM4iI3PxFqCvDasibJmHDYxsoomNuhM/nHPIz8rHFKP4J5hy9iYbU
VxWICkKo4aCpW2NbX3Ohi2IpxJ+ldUA=
-----END CERTIFICATE-----
Generated at Sat May 10 03:55:09 2025 by rpki-client