Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a9b9a80f-a5fb-332d-a432-a9479f83de05.roa
File:                     a9b9a80f-a5fb-332d-a432-a9479f83de05.roa (raw, json)
Hash identifier:          cifYuqnpofgETWmiMt5q2brK6qCtrJrEF/2GUXxMJso=
Subject key identifier:   B0:66:A7:78:45:2C:A8:21:B1:3E:31:17:AD:A1:A3:FF:E9:2E:35:EA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B1498B7CA4996EA248B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a9b9a80f-a5fb-332d-a432-a9479f83de05.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        68.186.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:14:98:b7:ca:49:96:ea:24:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=16d8e7e7-e5e2-42aa-b312-e797c1698f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:dc:b6:07:10:76:88:cc:b1:bb:35:9b:69:
                    e4:f5:d2:b9:44:61:51:38:bf:1c:ea:0f:d4:2b:e0:
                    e7:20:a0:bf:8c:cc:d2:bb:6a:ec:bc:67:22:6d:03:
                    ba:a9:c0:f2:a4:aa:7b:d2:1e:bc:4c:cf:16:dd:88:
                    1d:3a:b3:33:aa:53:57:7b:0b:c2:0b:cc:87:16:03:
                    5a:f5:92:00:77:25:f6:bb:59:b9:c4:4b:c6:cf:6b:
                    58:4f:6e:49:92:39:06:51:bf:3a:1d:a9:d8:5e:12:
                    3c:66:6c:cd:6c:90:b6:3a:e7:da:38:ad:d2:5c:c4:
                    6d:12:60:bb:e4:e7:06:91:0c:1b:88:40:01:0b:14:
                    70:86:7d:b8:7b:23:f9:3d:e4:a5:a4:00:b8:31:5d:
                    40:c8:9d:85:ce:44:5c:02:3d:64:ce:37:18:58:3f:
                    01:da:8d:3f:13:81:90:9d:81:a5:15:c2:e9:42:56:
                    74:9f:bd:5c:27:43:67:30:0c:1b:f8:f2:25:2c:50:
                    77:62:b4:ab:eb:0b:2e:43:1f:43:28:39:d0:0e:5d:
                    10:d6:97:42:8b:d4:6e:f1:3f:3c:49:25:b2:76:c6:
                    de:ed:73:c9:ea:6c:8d:49:d1:65:e7:0a:73:ac:63:
                    1d:81:9a:f6:ae:aa:59:7a:7f:ca:27:ff:51:f0:85:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:66:A7:78:45:2C:A8:21:B1:3E:31:17:AD:A1:A3:FF:E9:2E:35:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a9b9a80f-a5fb-332d-a432-a9479f83de05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.186.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:9c:2e:d8:4a:8e:ae:ee:b3:d8:cb:8c:bb:29:4c:d1:df:
         9f:2f:be:a5:7f:88:dd:8a:9c:6a:88:01:dd:21:be:a0:c7:c5:
         2c:ed:3d:15:56:e6:e4:c8:d0:43:e9:07:14:b8:dc:7f:22:e4:
         91:14:f0:1d:50:11:01:7d:c7:60:46:02:54:27:ce:e1:d1:e7:
         ca:99:fd:8c:9c:8c:7b:2a:87:18:f3:36:be:49:13:52:5f:28:
         be:d4:7d:15:e6:67:4f:f1:b8:fa:2e:c3:79:45:4c:43:18:c7:
         84:c2:e6:6e:0a:db:bb:2d:d1:29:3f:41:b8:e3:86:cc:5a:1e:
         23:6e:24:9d:ed:6e:fa:e1:1b:bd:31:39:fd:7d:10:98:30:d7:
         be:af:f4:2d:27:21:2a:b5:d0:7b:e9:ac:d0:b1:92:c7:5b:91:
         aa:9f:0d:db:c2:16:3d:85:00:02:58:0f:a9:72:10:7b:44:67:
         00:6c:8b:dc:aa:4e:a7:83:de:03:8c:d5:a8:04:a0:10:e8:33:
         0c:33:65:01:c9:3b:cf:ff:db:02:81:23:3d:43:73:97:cf:90:
         6e:69:0e:ca:98:51:e3:75:c6:f8:8e:58:0c:18:a9:2a:f2:9a:
         5a:18:44:e8:4c:36:22:37:d3:30:42:0f:fc:3b:da:a0:19:18:
         51:00:06:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:05:18 2025 by rpki-client