Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56b55d30-7ec8-3586-9108-ade9d27eec5f.roa
File:                     56b55d30-7ec8-3586-9108-ade9d27eec5f.roa (raw, json)
Hash identifier:          5t/8jETpOekFZ1nlEBIng1z1v+Pvv0RUXZDyJd/fLRc=
Subject key identifier:   88:60:59:78:32:35:82:9F:32:0A:AB:C6:72:70:40:BB:58:D9:52:96
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B1839552E70C1D6F30940
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56b55d30-7ec8-3586-9108-ade9d27eec5f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        68.116.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:18:39:55:2e:70:c1:d6:f3:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=2b858b8b-dc0c-4242-90ed-0edd03f81375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:a8:20:9a:51:65:6f:74:ab:a7:99:55:b0:
                    87:0c:99:7d:49:d8:c7:86:c2:41:25:2c:c7:2b:cd:
                    11:3c:9f:76:05:6a:7e:4c:bb:69:08:87:22:8d:eb:
                    b5:28:0a:23:4e:0c:c7:ef:48:7b:1b:91:e0:4a:69:
                    17:57:b7:21:f6:6d:32:8e:62:a4:d8:67:45:70:af:
                    50:9d:b2:49:0b:bb:54:69:75:54:22:fd:d3:ae:03:
                    2c:95:33:45:48:57:c7:e3:f4:47:62:ac:34:db:c4:
                    ed:c3:88:b9:a7:1d:51:9a:e4:dd:da:e5:58:83:ad:
                    12:ab:56:ba:fb:ff:0f:d3:34:cb:64:cf:6b:59:86:
                    31:b7:9c:de:96:f9:47:a6:d0:77:51:1e:5a:2d:0d:
                    03:b5:02:ce:87:e8:4f:61:6a:cd:96:17:d1:58:7b:
                    8c:27:e3:25:72:cc:15:06:21:84:7f:40:48:3a:91:
                    18:34:0b:45:ef:9d:6c:b3:e7:d8:f3:bf:64:07:60:
                    c7:c8:3c:87:d4:fe:58:13:fe:34:89:b7:6b:41:a2:
                    a6:07:b8:27:80:05:0a:04:e6:73:8f:af:ac:48:3d:
                    cf:ec:92:78:22:5b:0f:72:13:aa:73:36:63:36:ac:
                    26:18:22:4a:4e:52:68:e7:02:20:da:69:ec:85:87:
                    5a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:60:59:78:32:35:82:9F:32:0A:AB:C6:72:70:40:BB:58:D9:52:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56b55d30-7ec8-3586-9108-ade9d27eec5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.116.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:28:ee:ce:ff:5b:94:b7:88:70:ba:6f:72:8e:0f:c4:5f:
         9e:f4:77:2a:bb:24:f4:f7:7b:7e:72:52:50:05:30:c0:fe:77:
         28:53:51:82:c2:75:ea:a2:c4:a1:b6:c8:ec:c6:c8:87:44:59:
         50:90:0a:8a:2a:16:65:f0:6b:78:66:f3:a3:a8:0c:85:be:a2:
         81:e5:2e:75:0f:09:8f:88:48:f0:d6:3d:5f:0f:8f:c7:7e:0a:
         83:f0:cb:14:14:8c:de:d7:bd:94:91:ad:ca:04:75:17:86:75:
         c6:84:54:73:e2:69:de:30:8b:94:fa:ca:0f:a7:1b:91:a4:0a:
         f5:6f:4a:6f:04:ac:4b:98:2b:8e:91:06:f1:4e:80:cc:8e:18:
         f2:db:19:4b:40:6c:74:6f:4a:bc:0e:77:ea:2c:f2:30:64:83:
         40:59:c0:8e:e4:ee:0f:87:cb:66:01:4c:25:38:e0:73:19:ef:
         2d:91:a5:da:30:eb:0f:09:95:a7:06:75:c8:fb:ae:4b:b8:58:
         c6:45:e0:be:dc:2e:4e:fb:ca:ec:80:13:16:8b:be:f7:f2:9d:
         b6:f7:e1:6e:87:8f:1a:5c:9e:fb:3d:4d:ee:8b:60:f2:e4:6f:
         73:a8:3d:8e:86:14:01:5e:a4:c1:c8:df:b4:2f:ad:0d:e5:07:
         4e:85:39:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCxg5VS5wwdbzCUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MmI4NThiOGItZGMwYy00MjQyLTkwZWQtMGVkZDAzZjgxMzc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaOoIJpRZW90q6eZVbCHDJl9SdjHhsJBJSzH
K80RPJ92BWp+TLtpCIcijeu1KAojTgzH70h7G5HgSmkXV7ch9m0yjmKk2GdFcK9Q
nbJJC7tUaXVUIv3TrgMslTNFSFfH4/RHYqw028Ttw4i5px1RmuTd2uVYg60Sq1a6
+/8P0zTLZM9rWYYxt5zelvlHptB3UR5aLQ0DtQLOh+hPYWrNlhfRWHuMJ+MlcswV
BiGEf0BIOpEYNAtF751ss+fY879kB2DHyDyH1P5YE/40ibdrQaKmB7gngAUKBOZz
j6+sSD3P7JJ4IlsPchOqczZjNqwmGCJKTlJo5wIg2mnshYdauwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhgWXgyNYKfMgqrxnJwQLtY2VKWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNTZiNTVkMzAtN2VjOC0z
NTg2LTkxMDgtYWRlOWQyN2VlYzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEspKO7O/1uUt4hwum9yjg/EX570dyq7JPT3e35yUlAFMMD+dyhTUYLC
deqixKG2yOzGyIdEWVCQCooqFmXwa3hm86OoDIW+ooHlLnUPCY+ISPDWPV8Pj8d+
CoPwyxQUjN7XvZSRrcoEdReGdcaEVHPiad4wi5T6yg+nG5GkCvVvSm8ErEuYK46R
BvFOgMyOGPLbGUtAbHRvSrwOd+os8jBkg0BZwI7k7g+Hy2YBTCU44HMZ7y2Rpdow
6w8JlacGdcj7rku4WMZF4L7cLk77yuyAExaLvvfynbb34W6Hjxpcnvs9Te6LYPLk
b3OoPY6GFAFepMHI37QvrQ3lB06FOSs=
-----END CERTIFICATE-----
Generated at Sat May 10 07:57:40 2025 by rpki-client