Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2003c81d-6c5f-3260-9c16-9b7fd8818fb1.roa
File:                     2003c81d-6c5f-3260-9c16-9b7fd8818fb1.roa (raw, json)
Hash identifier:          DSdgK6R5kgmzxoRyYo79fIYGcR2bWgJwf/2SHurkvVQ=
Subject key identifier:   A8:1E:D8:2A:9C:FB:91:77:6D:42:B9:32:EB:C7:1D:F8:86:F0:28:AC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A8D41F0C5B4135D212C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2003c81d-6c5f-3260-9c16-9b7fd8818fb1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        68.185.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:8d:41:f0:c5:b4:13:5d:21:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=86cf5f98-f69f-40ea-a224-039573fd69b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:94:aa:75:1e:18:de:c0:c1:92:bb:d3:6b:
                    44:40:63:60:80:b3:6d:20:94:8c:1b:a4:9e:18:3b:
                    dd:a4:69:ee:58:1e:09:75:82:68:5a:39:71:cb:82:
                    e7:e6:f8:91:75:b9:7a:bb:db:ed:79:b7:5c:2f:17:
                    a3:eb:8c:8e:14:d0:bb:40:6b:ae:43:52:19:dc:d2:
                    7f:50:1e:f6:07:fc:e1:3e:6f:89:de:bf:ea:da:77:
                    48:f5:f2:1c:e6:db:b6:c1:19:7b:62:5b:cd:e0:e1:
                    ef:f5:a0:d3:4b:38:e1:25:16:96:b5:15:9b:87:71:
                    82:e4:9b:48:d2:9a:44:73:4c:5f:10:7c:57:a6:67:
                    c6:a5:36:7f:3a:8f:bc:e4:22:1e:56:c4:f8:8e:72:
                    21:cc:f0:24:7f:48:70:f9:13:b5:e7:da:62:23:db:
                    9a:a5:b2:4a:76:20:dc:45:47:98:41:25:ed:7c:2b:
                    09:2b:d1:5d:b2:95:ba:d8:cd:c0:7d:b2:e5:7e:78:
                    97:1a:01:1d:79:b2:5a:61:4c:dc:5c:1d:e1:23:64:
                    41:c4:cb:e1:6a:4c:1a:3c:73:a2:a9:3f:d2:a5:ac:
                    5e:7a:13:ac:13:0a:f5:2f:e5:83:d3:e0:20:ef:7b:
                    f1:f6:c5:cb:11:73:17:ad:f9:5f:4e:8e:7f:26:65:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1E:D8:2A:9C:FB:91:77:6D:42:B9:32:EB:C7:1D:F8:86:F0:28:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2003c81d-6c5f-3260-9c16-9b7fd8818fb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.185.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:97:fd:8a:c0:2e:0b:46:d4:d2:a5:7c:e5:c5:5c:5e:df:16:
         39:ae:20:51:93:79:bd:04:3e:50:8f:89:92:82:78:42:cf:58:
         77:7b:66:26:45:4a:89:df:25:b7:a8:b1:8a:51:01:6c:87:0c:
         44:73:10:a4:d7:b9:f8:d3:f1:41:8d:9b:cc:06:78:c5:39:18:
         da:54:a7:d1:99:82:cd:7b:4c:ec:15:15:a8:9a:a3:a4:ab:f0:
         73:52:c1:9d:19:e6:2c:41:01:fd:af:b9:40:0e:fd:71:fc:77:
         e6:2f:46:51:7c:6f:3d:f8:d1:ea:5f:7b:e0:66:b4:00:6b:f4:
         0b:d9:bb:8b:bd:c2:1a:ac:8a:74:f9:5a:f7:24:2f:7e:2b:ff:
         1c:73:ab:30:1f:c2:d6:61:16:40:f1:e9:8b:eb:5e:bb:c3:57:
         c8:c6:8a:27:5e:c3:f5:ba:92:ad:dd:d2:6a:fa:cf:b9:45:52:
         bc:b2:b0:b3:ed:ec:9d:f3:d5:09:11:68:73:0e:c2:85:61:8b:
         ba:c0:bf:c2:a5:ee:83:34:53:29:dd:bc:c2:22:18:2b:e1:6a:
         ba:58:26:11:9e:08:af:35:b2:80:11:53:ac:58:37:a6:38:89:
         89:41:eb:86:a4:38:c9:5e:53:a7:a2:a8:c1:33:52:0c:a5:ae:
         a1:88:36:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:22:43 2025 by rpki-client