Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa
File:                     e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa (raw, json)
Hash identifier:          g1q4wjBi0slA3sT9jzElfgj1S+YmcWOLOeHwY/zsitg=
Subject key identifier:   98:03:FE:50:F4:19:FE:32:0F:31:F3:34:98:58:AD:F0:E9:53:8A:71
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B1142636E154A0A026700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        68.112.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:11:42:63:6e:15:4a:0a:02:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=1590eca3-ff78-4e36-9822-3fc5b945f320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:36:56:f2:12:a2:62:06:24:66:5c:1b:4b:
                    01:36:6e:36:3a:9f:40:32:2c:63:8b:64:d2:84:fb:
                    3d:0a:ef:71:1c:c1:6e:24:a1:a2:4c:17:c7:43:b5:
                    3c:9e:1b:ed:e5:1b:cd:b4:1c:bc:ef:d5:58:ef:12:
                    8e:00:ee:d9:ab:46:eb:17:b5:62:f3:af:92:a6:ed:
                    13:3f:01:2e:ab:95:55:e4:d8:91:42:67:a7:65:58:
                    8a:62:e3:a4:47:7b:90:1f:ca:32:d1:01:19:19:58:
                    c0:fd:b8:79:af:14:fd:18:24:dc:b9:4a:12:82:5a:
                    83:f1:fb:36:f3:47:9c:48:26:3d:c3:18:92:f6:09:
                    e7:a5:bb:f3:a3:c1:f9:55:03:a6:79:7a:be:78:3c:
                    4d:ff:68:ee:1b:9e:1c:83:42:bf:b5:d6:87:e9:e2:
                    f7:9d:5c:ae:8a:7b:46:c6:5f:e1:ad:bb:cc:59:45:
                    23:ba:cb:2d:02:a9:9c:54:b7:07:d8:dc:db:47:90:
                    dd:a8:42:99:f3:cf:d4:bd:87:d5:d2:c6:1a:ed:2b:
                    9e:5c:22:33:c3:b8:58:d1:38:c4:fe:26:2a:e8:d4:
                    e2:aa:75:b9:2e:35:17:d8:c4:cf:99:85:0a:ff:09:
                    26:6a:b5:74:65:2d:98:7b:d6:c2:02:28:5c:71:58:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:03:FE:50:F4:19:FE:32:0F:31:F3:34:98:58:AD:F0:E9:53:8A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:80:a8:ef:aa:3b:1d:17:e2:43:bd:59:d5:f1:5d:c3:f0:3d:
         d9:73:32:d2:7a:32:5e:5a:b6:05:d2:86:33:b6:55:ce:27:bb:
         4e:b7:25:e0:90:d9:95:65:93:97:21:de:ad:ee:e9:07:c6:ba:
         7a:5a:33:a9:d6:b1:6c:4e:1d:82:ac:a6:42:59:5b:a0:6a:92:
         9d:1d:0b:61:7b:29:01:01:95:c7:b9:b5:b7:ba:27:74:37:5c:
         c9:73:ee:4f:df:35:e8:39:64:ea:53:18:46:79:e9:12:1d:83:
         98:5d:b3:50:ff:5e:cd:a9:f7:1a:74:90:50:68:a8:d3:dc:49:
         fe:99:17:58:d5:43:48:c0:5b:58:84:eb:46:05:cb:df:3f:30:
         1c:18:89:d6:36:f5:7a:4f:ac:05:b9:59:03:23:97:98:45:43:
         55:c3:1d:02:22:d3:0e:b0:94:47:d8:ee:99:ac:da:ac:2d:7c:
         33:0f:ac:e5:f2:b8:44:cf:f4:c4:db:c0:38:84:c4:b0:f3:3e:
         eb:44:a5:9a:87:3c:f6:d7:c9:b1:d0:4f:aa:dc:ea:3a:2c:a0:
         58:bc:c9:8f:0a:b4:4e:88:d5:09:d9:c9:18:ad:93:3f:f7:55:
         3a:1f:2c:96:1a:74:d0:d2:9d:b9:bd:cf:00:6d:26:35:e8:78:
         1a:72:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:15:51 2025 by rpki-client