Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2186b7f9-2fa2-3ae8-8efe-f5b8eb0acb0f.roa
File:                     2186b7f9-2fa2-3ae8-8efe-f5b8eb0acb0f.roa (raw, json)
Hash identifier:          ZJVXbP4co3c529vqe112tsizS2qGsvZma94BY3qhFE4=
Subject key identifier:   FD:B2:FF:AF:4F:71:BE:B0:23:74:8C:0A:A1:64:97:FC:A4:E2:A4:5A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A99AA1B592E016726E160
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2186b7f9-2fa2-3ae8-8efe-f5b8eb0acb0f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        68.188.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:99:aa:1b:59:2e:01:67:26:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=5807908e-a6f7-46dd-8ba8-da35b9ebdd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:a9:8a:fc:d6:06:43:5f:f0:cc:25:5c:90:
                    7b:49:1d:05:56:94:1a:c5:0a:4c:f8:79:be:16:50:
                    84:6d:56:7b:70:07:36:f6:56:30:ab:fe:56:cf:23:
                    bf:15:fb:93:74:13:b6:39:df:e5:53:1d:0a:5b:4b:
                    99:89:89:92:a1:30:75:07:c6:00:76:df:1b:c9:85:
                    24:7d:1a:00:58:5e:1b:85:36:6e:d3:43:dc:40:1b:
                    ae:1a:5d:0a:f3:1d:e4:45:64:29:33:51:7e:16:b0:
                    0f:81:c3:f1:65:b3:4f:28:6a:26:c7:a9:f5:ad:04:
                    34:73:45:eb:bb:bd:fd:37:2e:ed:db:92:38:57:f1:
                    96:8f:5b:f8:f2:d6:76:b6:b4:a8:88:de:71:00:14:
                    49:0a:47:f0:8e:c7:a0:ab:3b:0d:20:86:93:5b:92:
                    0d:64:51:98:2d:c4:bb:88:84:1b:18:ef:ed:62:d7:
                    76:96:09:aa:8f:6a:23:0a:9f:36:e0:c8:8a:76:7e:
                    ab:05:a2:ab:bf:69:34:6b:cd:a9:ca:c1:6d:b7:3b:
                    88:46:ad:20:05:1a:5c:55:88:8b:8c:0f:c7:19:d9:
                    78:6b:5d:ed:f5:01:49:88:2f:ee:7c:02:19:6a:33:
                    6d:d2:63:74:c6:99:fc:23:cf:84:78:30:07:c3:2d:
                    c3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B2:FF:AF:4F:71:BE:B0:23:74:8C:0A:A1:64:97:FC:A4:E2:A4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2186b7f9-2fa2-3ae8-8efe-f5b8eb0acb0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.188.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:11:d2:6e:76:eb:1d:f3:ba:9c:62:20:06:d3:88:ed:0b:bd:
         7b:cc:18:94:ae:d8:b0:c5:ea:e8:9b:fb:a4:bd:10:7c:48:5c:
         ca:82:56:1a:38:cb:38:09:96:6f:e4:a0:a6:d9:d2:71:80:7a:
         d0:10:5b:80:ad:f0:54:5d:cd:8a:32:c8:43:fd:ef:92:94:b8:
         b0:20:5f:b1:06:00:d0:7c:98:d6:38:12:9a:ee:00:d7:8a:b4:
         a1:52:a1:d8:a8:92:a3:2d:88:13:69:e6:76:26:9a:aa:0f:2b:
         16:c0:3d:51:69:0f:56:b9:7a:5f:79:4d:a9:92:91:a6:b4:9e:
         44:9b:92:39:da:ea:35:d6:ce:72:ef:89:26:a2:f7:51:05:ee:
         81:4e:d7:1c:21:bf:d2:e8:db:fa:fb:c1:9c:ea:1a:e0:62:e3:
         be:5c:72:48:0e:3f:88:15:30:77:5f:89:80:3c:f0:79:9a:d5:
         4b:f3:7a:ea:e6:9a:cb:9b:2d:d6:71:0a:ba:c5:2f:92:63:3c:
         7f:70:d0:bb:e6:4f:4f:78:6d:b3:55:ff:98:4b:8f:0f:61:97:
         5f:92:00:2d:03:27:49:62:a9:4e:61:8a:86:30:74:2f:a6:7f:
         7a:8b:78:d0:62:fb:27:89:86:76:e7:8c:ad:bf:ff:9f:55:77:
         77:f8:c4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:30:06 2025 by rpki-client