Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/645afe38-01a9-317d-8dfb-7a3572c02350.roa
File:                     645afe38-01a9-317d-8dfb-7a3572c02350.roa (raw, json)
Hash identifier:          5CrvPbZV6B3E35FD0EW/+KqXDDB+Hxvw/gT+UsiBsF4=
Subject key identifier:   9B:1A:C6:E8:93:A0:3D:1B:A6:E8:9D:79:47:73:AD:41:6A:2E:58:EC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B14816AAD410FBEA06900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/645afe38-01a9-317d-8dfb-7a3572c02350.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        68.117.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:14:81:6a:ad:41:0f:be:a0:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=9231e999-e518-4216-9dc9-105d02f03369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0e:c0:73:06:7a:a1:65:8a:4e:0c:22:bd:10:
                    59:f8:b3:ac:9e:87:c1:b5:68:a9:f1:b8:0c:1a:dc:
                    90:d6:d2:7b:48:14:50:56:82:8f:fa:22:7d:d5:ad:
                    24:92:ac:bb:9d:9d:20:a4:39:2d:23:1c:9f:ef:88:
                    36:9c:c2:34:56:fe:fd:6f:5e:54:56:38:c6:52:9f:
                    b0:48:20:58:76:3c:d5:8c:68:cc:0b:b2:02:db:ef:
                    ce:7f:82:89:c2:80:92:38:b4:99:eb:52:03:ab:03:
                    2c:cd:2d:a7:89:58:68:96:2e:76:95:3c:3b:cd:f1:
                    72:76:ea:a1:74:34:9a:a1:61:e3:29:b8:3a:6d:bd:
                    b1:41:6b:e4:c3:77:bc:4d:57:72:36:6c:2a:c0:69:
                    e1:b2:5b:a0:ca:96:b2:e5:d0:ce:33:96:14:43:01:
                    da:ba:07:65:22:20:0f:31:6e:e7:08:4b:07:3b:45:
                    79:67:80:e1:e2:c2:be:3b:9e:ba:a4:f7:42:8a:c5:
                    64:72:83:80:53:34:1f:ca:f0:aa:a4:eb:cb:18:5b:
                    ef:bc:9b:59:9d:85:8a:2a:26:33:f7:bd:52:cb:f2:
                    ff:9e:b0:35:97:92:57:d1:8b:84:43:72:56:cb:5f:
                    e9:51:01:4b:db:3c:15:63:62:51:d3:89:b6:ac:65:
                    fc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1A:C6:E8:93:A0:3D:1B:A6:E8:9D:79:47:73:AD:41:6A:2E:58:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/645afe38-01a9-317d-8dfb-7a3572c02350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a3:16:15:8c:0c:b7:65:d0:37:0c:69:2d:4c:e9:97:a1:52:
         af:53:72:a4:c5:f2:7b:dc:87:40:07:f4:56:15:45:bb:18:2f:
         ea:15:48:14:ae:81:e2:3a:9b:2f:c1:24:f9:96:56:a2:dc:43:
         1f:01:3c:9e:59:af:31:48:90:76:2d:d5:f8:5b:ce:69:0d:30:
         b9:bc:39:2a:cd:94:91:9e:4a:d9:36:0b:83:7c:66:3f:a6:19:
         74:a0:53:2b:bd:10:b5:4a:29:89:23:8b:71:81:d5:00:16:65:
         66:3e:87:53:bb:46:cd:e9:ec:bc:29:dc:34:cf:f5:15:06:af:
         31:2c:c8:51:8c:0d:fa:b7:b5:5f:77:d0:c2:2f:94:a5:48:75:
         84:41:eb:1d:05:a5:92:bd:ed:d4:cc:29:f8:95:69:18:8c:83:
         39:f3:cd:2e:2b:ed:4e:0e:1c:35:ff:c9:93:67:dd:39:35:72:
         a8:87:da:0d:03:dc:2f:a7:c9:04:64:22:0a:f6:b0:94:71:39:
         81:56:0f:bc:d1:82:32:fb:2e:84:cc:51:d8:1f:de:a9:4a:d1:
         d0:c2:56:1f:84:4c:4b:aa:c6:18:9f:57:8a:73:1c:77:9f:0d:
         42:00:f0:b8:b7:a9:6f:da:b1:d3:16:8c:80:a9:a5:11:b8:c8:
         5f:86:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:52:46 2025 by rpki-client