Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859d00-a0b8-3074-a1f6-13ea0e58c8d5.roa
File:                     14859d00-a0b8-3074-a1f6-13ea0e58c8d5.roa (raw, json)
Hash identifier:          ihs/Gig4CyCEGIlPKAxsNRkTNleXWl9+OAcmi1y7bEo=
Subject key identifier:   D3:42:29:D4:C1:D9:DA:3F:A7:1B:30:42:03:E6:EF:54:04:E4:60:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845E5D0B38D62EAF195CF0B8A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859d00-a0b8-3074-a1f6-13ea0e58c8d5.roa
Signing time:             Fri 17 May 2024 01:26:42 +0000
ROA not before:           Fri 17 May 2024 01:26:42 +0000
ROA not after:            Thu 15 Aug 2024 01:26:42 +0000
asID:                     6167
IP address blocks:        75.198.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e5:d0:b3:8d:62:ea:f1:95:cf:0b:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 01:26:42 2024 GMT
            Not After : Aug 15 01:26:42 2024 GMT
        Subject: CN=c8df4a52-efac-44f9-8c68-9a605e0f0027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:c3:23:a3:18:10:82:3d:84:e4:c7:46:4e:
                    7a:5c:2b:03:00:ba:1b:b5:30:78:88:ad:eb:07:1e:
                    ab:d0:8d:a6:61:32:6c:f8:bd:2c:6c:2f:78:eb:1d:
                    82:e9:5c:fa:8c:86:78:85:a6:c7:d8:8c:79:25:01:
                    c2:5c:f0:fb:e3:d8:91:55:82:10:95:ea:62:65:b4:
                    b9:56:0f:56:5b:7e:86:8a:40:0a:a4:07:21:39:6d:
                    b2:9f:87:0f:d1:de:65:fe:36:8d:1e:52:b7:9a:21:
                    f4:41:01:30:33:07:a2:95:34:b3:b3:01:03:7c:da:
                    a7:a8:bd:b7:ad:b8:6a:97:54:73:20:7c:ef:7b:2e:
                    47:95:ec:38:a5:73:20:a6:27:87:2a:08:f8:5c:0e:
                    5c:d0:1d:db:54:da:84:32:57:ef:57:b5:f2:4d:91:
                    f6:49:5a:26:48:68:48:18:8f:63:3d:b7:f0:f1:79:
                    4d:02:1d:0f:2d:11:d4:bc:fd:8b:cc:c9:97:d9:67:
                    4a:9c:b8:b1:1a:8a:37:af:1c:91:6d:0c:55:79:7c:
                    45:27:90:79:33:31:de:2b:cb:11:9d:14:3f:70:57:
                    e0:35:27:8a:6c:42:a2:f8:e3:d7:14:87:1d:0b:0c:
                    34:85:68:06:61:2c:c7:80:c5:23:4e:02:c2:a2:7a:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:42:29:D4:C1:D9:DA:3F:A7:1B:30:42:03:E6:EF:54:04:E4:60:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859d00-a0b8-3074-a1f6-13ea0e58c8d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.198.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e6:2b:21:36:ca:c4:14:0d:14:9b:1c:26:ba:b8:a3:14:73:
         16:8b:5a:88:9e:b0:a2:22:70:78:bf:d6:61:24:73:75:99:e8:
         c8:2e:f6:5f:a8:eb:64:d2:8a:9d:c2:01:79:b5:c5:9b:ea:ee:
         87:38:48:6b:8b:ff:ee:96:59:d2:d8:62:f3:4a:c8:55:fc:62:
         a9:49:94:88:22:48:5d:30:a4:69:c5:c1:c8:6f:61:31:b4:e6:
         bb:0f:35:97:16:44:0d:c3:3a:a2:4c:93:73:f3:a9:5c:40:2e:
         e1:6f:68:48:c3:05:da:9e:eb:8b:63:ed:3c:ad:55:b2:2d:a7:
         8e:61:36:fc:0d:0c:c0:a0:96:6c:0c:83:2a:eb:a5:35:ae:64:
         ea:80:93:51:58:b9:40:65:99:62:72:18:c5:8b:83:94:2b:00:
         9b:77:0e:b3:a0:fd:bf:d0:40:ba:32:23:63:e2:76:65:bd:71:
         8c:bb:26:5e:3a:5a:bc:29:51:6a:82:06:88:05:27:70:24:41:
         3c:ce:de:f7:8e:7e:2a:32:bf:89:ba:b7:1f:98:29:4d:13:7c:
         5d:6b:1b:c5:32:b2:bf:20:1e:57:34:4d:73:64:23:d4:f8:7e:
         f9:1c:c0:08:9e:7f:ad:0d:d6:61:41:44:fb:b6:8c:2b:2a:b1:
         30:61:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:29:25 2024 by rpki-client on console-ams.rpki-client.org