Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/698d1123-51bd-32cd-b177-e3f77049ffb3.roa
File:                     698d1123-51bd-32cd-b177-e3f77049ffb3.roa (raw, json)
Hash identifier:          YBuSJWu2OeEca3cT0OijjstepXWWzW9E9khV+Pvws9w=
Subject key identifier:   71:C7:5B:98:D7:48:5D:35:F8:AC:51:73:43:43:51:BC:57:31:7C:25
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285847ED24E0C96A81D57777158700
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/698d1123-51bd-32cd-b177-e3f77049ffb3.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     7764
IP address blocks:        148.129.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:e0:c9:6a:81:d5:77:77:15:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=c629c9cf-61c2-4597-b0f7-c2a0049c5d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:ce:d8:ea:5a:6d:48:48:ff:e3:c5:92:f4:
                    64:8e:91:da:5a:66:a8:ef:0f:55:d0:ed:7e:1f:e0:
                    5b:31:f7:c8:c1:9c:b0:c6:9c:0b:2f:08:19:b4:85:
                    4b:17:75:55:20:35:af:ba:7a:43:5e:06:c0:c3:3a:
                    8c:f5:ce:bd:99:5b:73:59:96:4b:12:1c:c5:08:74:
                    62:31:6b:2c:65:76:90:5b:49:6b:c9:9d:7e:ff:35:
                    9a:fb:a2:f9:45:34:e9:a3:8a:2f:ed:eb:01:c1:6d:
                    39:35:05:e9:07:82:c1:21:e5:95:a0:37:5a:46:9c:
                    17:4a:56:c2:07:9b:62:4c:77:e6:a0:88:49:17:93:
                    ee:bf:9e:29:fa:eb:b3:b0:b6:87:f4:98:1b:9b:0d:
                    35:c5:e4:ea:98:4b:63:63:0c:fe:65:c4:d0:54:9e:
                    0e:24:72:38:bf:4f:2c:26:2d:93:19:bb:4b:9d:06:
                    03:3b:a8:1d:10:01:55:a4:d5:a8:52:09:ba:af:94:
                    53:c9:c4:47:5e:30:d3:44:7e:00:44:06:59:90:ce:
                    33:82:26:77:49:f9:77:28:44:7d:73:ec:14:00:7e:
                    01:4b:97:66:43:e8:05:f9:e4:b5:78:12:1f:97:11:
                    79:0b:b5:ae:60:1c:e3:b3:7f:c7:c3:9d:fa:d8:ca:
                    29:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C7:5B:98:D7:48:5D:35:F8:AC:51:73:43:43:51:BC:57:31:7C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/698d1123-51bd-32cd-b177-e3f77049ffb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:bb:db:7a:70:89:63:44:c9:a3:87:92:7c:f3:43:54:b0:37:
         fa:f3:21:0c:9f:fb:d3:f5:44:78:05:cb:2f:71:bf:2e:2d:ed:
         0a:53:41:4a:13:49:96:af:df:f5:0d:3e:b7:d6:46:09:9e:79:
         e6:10:78:97:25:cf:d9:3a:6a:6f:70:da:ef:48:2d:ac:0d:67:
         6f:17:ff:e0:86:e5:8d:35:9a:0e:02:57:aa:b9:00:5d:a0:85:
         8d:cf:65:4a:fa:4d:fe:5a:67:bb:7e:d1:1f:07:77:57:62:ef:
         22:17:97:8d:a4:69:2f:1c:93:ab:46:c3:ad:06:21:9d:9e:62:
         df:a0:5b:9f:75:14:17:53:97:b1:57:6a:f3:85:2b:a8:77:93:
         c5:f4:d9:46:1f:39:5a:8d:2e:19:92:cd:7f:da:40:82:e5:09:
         97:c8:9b:f4:e9:ee:98:b4:0c:b5:22:2a:fb:d1:af:62:7c:1c:
         56:57:ac:09:aa:ef:b5:9b:87:94:aa:22:ca:b8:08:99:0c:51:
         95:e2:83:3f:10:c0:53:12:d2:43:12:e4:f0:17:32:da:ce:79:
         b3:61:94:26:9d:01:30:68:5a:f8:82:98:11:74:8a:55:34:f9:
         57:0a:77:ba:e4:e6:07:e3:5a:0f:82:4e:02:c6:68:53:8f:52:
         35:e5:88:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:57 2024 by rpki-client on console-ams.rpki-client.org