Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66e24d4d-0bc1-375d-997a-7041f029030d.roa
File:                     66e24d4d-0bc1-375d-997a-7041f029030d.roa (raw, json)
Hash identifier:          +jtkQn9BXF6yCeLXBzm8ytzfbisYNjVqsmGxwwUpRfQ=
Subject key identifier:   43:73:83:51:AF:39:BE:88:DE:E6:04:48:46:4C:C2:F7:89:2C:00:40
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A90A32985706265DBCA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66e24d4d-0bc1-375d-997a-7041f029030d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        68.119.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:90:a3:29:85:70:62:65:db:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4731cf6b-1d81-4540-9a69-385cd2c15a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:79:67:1c:d2:de:62:f4:41:d8:af:68:96:46:
                    b6:38:2b:65:6e:16:99:7e:de:f5:c2:01:c3:75:e8:
                    0e:db:53:8c:71:f5:f2:3c:f1:1e:a6:15:64:8c:26:
                    4b:0a:e7:ba:c2:08:01:42:6e:8e:ee:be:38:4b:78:
                    a7:69:77:f4:ac:27:8e:ef:93:6a:73:05:6f:bb:cc:
                    38:e1:46:c4:56:96:5e:4d:1d:c6:ec:4c:eb:98:f6:
                    5d:5d:f1:79:06:88:29:b0:a9:f8:46:02:ba:7a:12:
                    eb:18:d9:2e:0a:49:ea:38:39:00:8f:dc:20:fe:1b:
                    85:43:b9:8a:e1:30:aa:26:46:27:02:d6:a5:bc:29:
                    da:7e:80:e6:f5:dd:8c:27:a6:82:0b:d5:c5:ae:b2:
                    da:de:79:18:e5:20:60:bd:72:db:f9:01:ba:d2:9b:
                    36:e3:12:52:e3:18:5c:b1:f2:8e:99:90:53:2a:d9:
                    43:d4:80:a9:f9:00:54:fd:d4:5d:33:a9:e8:5b:06:
                    89:cb:d0:e2:7d:0d:88:dd:53:8d:03:0f:50:8d:10:
                    3f:8b:62:75:6d:b5:14:55:77:bd:f7:7c:f3:e2:17:
                    a7:45:14:db:0d:f9:22:3b:cc:46:65:77:9b:39:ac:
                    e7:56:99:dd:f9:23:e0:f1:c2:0d:7b:da:3c:55:e5:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:73:83:51:AF:39:BE:88:DE:E6:04:48:46:4C:C2:F7:89:2C:00:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66e24d4d-0bc1-375d-997a-7041f029030d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.119.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:a1:5b:30:37:88:b5:b2:cd:87:a5:00:15:87:8d:7f:c6:88:
         53:00:80:a2:31:13:fb:b3:b9:07:41:92:ff:5b:ac:33:13:d4:
         2e:60:22:85:d7:21:26:c6:e7:2e:a4:75:38:5d:77:1d:38:47:
         82:d7:c1:39:51:ac:78:b8:a8:96:56:b5:53:5d:32:99:a5:1f:
         4a:6e:29:43:e6:ce:3a:cc:49:95:e9:61:5f:43:52:42:f7:9d:
         26:56:64:34:23:3b:5a:7c:4c:df:5b:cb:37:f1:d5:e1:c6:f4:
         e1:d9:fb:5f:51:88:41:4f:c3:9a:84:d8:7c:dd:95:80:10:e7:
         b8:ff:f2:7e:ce:5c:6d:83:30:ff:ef:e5:ad:72:ed:77:1e:90:
         f7:e4:05:3d:3b:af:b7:d9:65:73:e4:47:17:42:a9:24:c1:3b:
         12:f3:a6:c2:5d:2a:48:e0:53:91:0e:e5:35:c9:4d:a3:16:e5:
         c9:57:a8:30:1b:e8:65:5c:ca:18:06:97:95:8a:57:a0:1e:97:
         dd:e3:35:a0:59:99:c0:cf:3a:e7:40:a6:82:40:50:0a:c5:53:
         be:ba:1f:29:c3:57:d1:2c:22:9b:e2:a3:be:ae:d6:d9:0f:93:
         85:c7:4e:11:5b:9a:c4:14:5d:f1:9b:09:19:ae:17:1a:bd:c1:
         ca:ea:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:22:19 2025 by rpki-client