Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/5c6e09bd-ae59-3abd-8ffe-a958461a4d44.roa
File:                     5c6e09bd-ae59-3abd-8ffe-a958461a4d44.roa (raw, json)
Hash identifier:          iXdsf7c5XmXAqaCWnV/swVU+KVprIlrhVD+zbx8p9/U=
Subject key identifier:   70:63:8A:AE:4C:93:CC:B3:0B:99:E6:CA:BC:E2:79:9D:05:29:46:53
Certificate issuer:       /CN=9f369f04-c75d-4933-944f-a75f93d45cbd
Certificate serial:       010D0C9F4328584793B1206E339B938B4A8EEE40
Authority key identifier: CF:ED:B6:39:EC:47:B6:26:31:BB:B4:2A:C9:0A:E3:61:28:DC:05:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/5c6e09bd-ae59-3abd-8ffe-a958461a4d44.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54291
IP address blocks:        170.75.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/9f369f04-c75d-4933-944f-a75f93d45cbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/9f369f04-c75d-4933-944f-a75f93d45cbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:20:6e:33:9b:93:8b:4a:8e:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f369f04-c75d-4933-944f-a75f93d45cbd
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=6c73e596-a759-4eca-96b4-6af58f4b2a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:c5:b6:41:35:c7:28:59:96:82:2e:a7:5f:
                    96:bf:b2:6b:0c:de:12:71:83:92:25:87:3e:64:7b:
                    42:4e:17:ce:62:f2:e3:38:c9:3a:c5:84:8b:28:f5:
                    40:fb:26:b0:0e:06:a1:72:01:c9:77:49:f7:8c:11:
                    8b:30:ba:38:cd:5c:48:fe:d7:68:df:3d:a0:c4:b0:
                    bd:e3:d6:14:2b:2a:cd:89:27:b0:62:cf:15:04:60:
                    00:e2:a1:42:e2:32:36:bb:76:ed:45:69:f2:d2:a1:
                    e0:b3:c8:81:e9:9d:d8:64:b4:85:e2:f4:27:94:3a:
                    73:4f:76:bb:05:07:5c:d2:41:f1:2b:88:b7:31:2e:
                    a4:b7:33:30:52:2d:06:94:55:70:37:70:d1:00:59:
                    43:35:35:d2:40:71:1f:05:45:dc:2e:ec:70:35:20:
                    b9:f5:0a:84:df:5b:02:c5:ad:d9:bd:99:d2:06:77:
                    fc:85:71:08:9a:72:d4:43:55:b1:a2:f7:95:c0:de:
                    79:a3:04:7e:fc:4b:eb:91:2a:0d:7a:a3:2b:af:3f:
                    f4:27:af:d3:c1:f8:41:74:f7:7f:70:15:de:89:88:
                    bc:87:16:02:cf:0e:c5:24:ca:e3:dc:73:4b:6d:16:
                    cb:7a:48:3a:fe:d7:cb:02:f0:60:65:92:72:ec:4a:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:63:8A:AE:4C:93:CC:B3:0B:99:E6:CA:BC:E2:79:9D:05:29:46:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/5c6e09bd-ae59-3abd-8ffe-a958461a4d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/9f369f04-c75d-4933-944f-a75f93d45cbd.crl

            X509v3 Authority Key Identifier:
                keyid:CF:ED:B6:39:EC:47:B6:26:31:BB:B4:2A:C9:0A:E3:61:28:DC:05:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e1:74:df:aa:22:74:52:d2:52:ba:8a:a2:64:e7:e5:c1:c3:
         19:a6:0d:36:c0:67:9b:8e:fc:ae:36:ed:b1:24:df:80:dd:35:
         77:df:2a:d9:29:91:e7:c5:bc:6d:fa:36:98:a3:38:15:57:be:
         80:4e:94:52:dd:9e:b7:64:52:8e:c8:b4:78:19:08:2b:16:2a:
         b6:cc:20:8e:29:3f:e4:59:51:f5:22:72:61:17:bc:46:1a:f0:
         f0:6e:29:92:36:26:b6:ae:87:7e:52:9e:53:66:e8:e3:7a:e3:
         8d:ba:78:2a:d1:b3:ce:53:72:4b:f4:14:a3:32:3c:31:03:06:
         b8:47:98:ab:03:e3:7d:c0:0c:c0:1c:bc:e3:38:57:f5:3b:9c:
         9d:22:18:8b:69:b3:b5:4f:a8:e2:71:f0:ac:f5:53:07:a9:71:
         be:a0:40:e2:05:f4:e6:64:4b:e8:6f:b0:55:6b:a1:53:ba:8f:
         06:cf:b3:ac:d0:b8:6c:e9:f3:28:71:13:a9:0a:0d:fd:d2:d3:
         55:d3:31:80:81:d7:13:e1:ba:5f:5f:e6:a6:70:de:87:e5:36:
         7a:e6:c8:1d:b0:e9:38:89:61:bb:e1:c0:8d:95:90:75:11:7f:
         c6:fd:3b:80:fa:32:d7:3b:c0:35:ba:c6:60:6c:fc:8b:61:a2:
         a9:fc:2b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:34:47 2024 by rpki-client on console-fra.rpki-client.org