Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f21791de-9b8e-3674-ba5c-f73e2e00777a.roa
File:                     f21791de-9b8e-3674-ba5c-f73e2e00777a.roa (raw, json)
Hash identifier:          95fLgLbxiHiiHNa9NIzafsitlx7Nao8CLcZ4F0EUZXg=
Subject key identifier:   89:45:EE:75:79:B7:22:9A:88:C0:FC:37:0D:05:63:E1:74:03:6D:54
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A8F9980D2B7AF29FF4200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f21791de-9b8e-3674-ba5c-f73e2e00777a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        68.118.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:8f:99:80:d2:b7:af:29:ff:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e7c7b664-bba9-41a1-9d76-76ebdcaf2744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:19:5b:0a:0a:c8:82:22:2a:b5:99:d4:a0:2e:
                    e3:a7:c2:0d:37:87:99:49:95:d8:24:2a:de:82:38:
                    9d:ea:f1:bb:62:77:1a:5f:04:57:1e:fa:27:7e:c3:
                    ed:72:0c:6f:b1:cf:f8:a1:04:6e:21:64:6e:44:28:
                    e6:bc:35:9f:fc:12:ef:3d:59:d6:5a:da:38:a0:65:
                    87:ab:50:b6:1c:93:0b:60:01:f3:e6:6e:ff:79:4d:
                    37:bf:eb:c2:b9:16:d1:aa:be:2d:20:65:9e:32:0c:
                    5d:33:e8:0e:a8:ed:c5:dc:be:54:c3:04:ad:7c:4f:
                    2d:dc:d2:5b:e4:2a:3c:1d:de:7f:e6:d4:28:98:ac:
                    25:aa:fb:cc:cd:df:59:69:4a:f0:1f:43:32:fe:14:
                    0a:46:c7:d4:b7:e3:a9:13:a5:fe:e7:15:dc:83:c5:
                    43:b4:2f:f0:92:14:6d:50:bf:8e:44:67:54:c9:72:
                    28:3b:11:a8:78:73:c6:09:e2:41:0e:a5:44:4a:19:
                    b1:1f:bc:c5:5c:fb:76:ea:60:18:c5:be:fe:e1:3a:
                    08:c2:30:2f:b4:6c:a1:18:e0:2c:6e:55:c9:48:c6:
                    23:4c:07:f5:7b:0e:81:d4:f4:f1:50:d1:53:8e:07:
                    ac:63:d0:e5:20:27:3b:48:6c:21:b5:fd:da:9f:eb:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:45:EE:75:79:B7:22:9A:88:C0:FC:37:0D:05:63:E1:74:03:6D:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f21791de-9b8e-3674-ba5c-f73e2e00777a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.118.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:59:a0:dc:97:f8:df:e7:b9:80:1a:62:fd:7b:eb:d1:fc:12:
         a5:92:b2:8e:23:08:0c:04:52:43:ce:ed:4b:2e:0e:e1:ba:a5:
         8a:fd:b5:6e:23:d4:1d:ae:49:7d:3a:25:43:fc:eb:f1:89:3c:
         bb:a9:ac:db:a7:10:30:30:72:db:d2:22:0c:ed:00:50:1c:b3:
         23:79:e8:cf:9d:4c:8d:c0:28:94:d7:ed:ee:e0:5d:ed:1a:64:
         1d:6f:9e:49:bd:8f:01:c7:2f:4b:3c:0e:dc:1c:96:9d:69:89:
         51:8d:ff:3b:02:b5:af:f3:93:43:6f:4d:d9:ab:ea:5e:ac:c3:
         15:31:ad:6a:1d:38:ba:0c:18:27:09:90:80:4d:1c:ef:b8:02:
         ad:b7:0a:83:26:91:e4:52:31:52:4c:23:cb:00:e3:ab:e3:f9:
         11:0f:d8:0b:4f:85:b8:9c:71:ad:71:60:ca:d7:3d:fb:79:53:
         6e:96:0f:7b:66:22:cd:6b:e4:62:0d:e8:1a:76:33:f5:88:c2:
         9b:54:46:fb:ef:39:80:0b:53:d3:52:dd:7f:04:35:cf:e4:08:
         db:2e:f9:22:ed:2c:aa:1d:85:f0:e0:d2:5a:f9:88:e6:9d:ec:
         20:ad:a6:cb:4c:d8:80:bf:7f:7a:7a:5e:09:f8:ef:18:c2:15:
         8c:b4:06:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCo+ZgNK3ryn/QgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZTdjN2I2NjQtYmJhOS00MWExLTlkNzYtNzZlYmRjYWYyNzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBlbCgrIgiIqtZnUoC7jp8INN4eZSZXYJCre
gjid6vG7YncaXwRXHvonfsPtcgxvsc/4oQRuIWRuRCjmvDWf/BLvPVnWWto4oGWH
q1C2HJMLYAHz5m7/eU03v+vCuRbRqr4tIGWeMgxdM+gOqO3F3L5UwwStfE8t3NJb
5Co8Hd5/5tQomKwlqvvMzd9ZaUrwH0My/hQKRsfUt+OpE6X+5xXcg8VDtC/wkhRt
UL+ORGdUyXIoOxGoeHPGCeJBDqVEShmxH7zFXPt26mAYxb7+4ToIwjAvtGyhGOAs
blXJSMYjTAf1ew6B1PTxUNFTjgesY9DlICc7SGwhtf3an+uGlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIlF7nV5tyKaiMD8Nw0FY+F0A21UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjIxNzkxZGUtOWI4ZS0z
Njc0LWJhNWMtZjczZTJlMDA3NzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRHZ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVZoNyX+N/nuYAaYv1769H8EqWSso4jCAwEUkPO7UsuDuG6pYr9tW4j
1B2uSX06JUP86/GJPLuprNunEDAwctvSIgztAFAcsyN56M+dTI3AKJTX7e7gXe0a
ZB1vnkm9jwHHL0s8Dtwclp1piVGN/zsCta/zk0NvTdmr6l6swxUxrWodOLoMGCcJ
kIBNHO+4Aq23CoMmkeRSMVJMI8sA46vj+REP2AtPhbicca1xYMrXPft5U26WD3tm
Is1r5GIN6Bp2M/WIwptURvvvOYALU9NS3X8ENc/kCNsu+SLtLKodhfDg0lr5iOad
7CCtpstM2IC/f3p6Xgn47xjCFYy0BlQ=
-----END CERTIFICATE-----
Generated at Sun Jun 29 17:54:18 2025 by rpki-client