Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa
File:                     75c9ae00-3895-385c-8913-67c442d2f4e6.roa (raw, json)
Hash identifier:          DVn0eLK6U2OhPe10VVExZTklJWD7H6YKdN9f2n7cKB0=
Subject key identifier:   D7:8B:36:94:C4:73:BF:77:1B:01:7F:08:D4:50:FA:FE:EA:59:BA:44
Certificate issuer:       /CN=3a975a5d-2307-4688-a186-4a355ff45581
Certificate serial:       010D0C9F43285847A67F42C15A2BD38C52C47180
Authority key identifier: 0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa
Signing time:             Thu 24 Oct 2024 18:40:33 +0000
ROA not before:           Thu 24 Oct 2024 18:40:33 +0000
ROA not after:            Wed 22 Jan 2025 19:40:33 +0000
asID:                     32473
IP address blocks:        64.52.21.0/24 maxlen: 24
                          67.158.61.0/24 maxlen: 24
                          69.72.30.0/24 maxlen: 24
                          137.83.90.0/24 maxlen: 24
                          141.193.149.0/24 maxlen: 24
                          172.86.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:7f:42:c1:5a:2b:d3:8c:52:c4:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a975a5d-2307-4688-a186-4a355ff45581
        Validity
            Not Before: Oct 24 18:40:33 2024 GMT
            Not After : Jan 22 19:40:33 2025 GMT
        Subject: CN=555c1014-9121-4588-b418-0658ec357633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:c1:5e:78:b1:92:47:15:4d:0a:6f:96:b2:
                    7c:f1:38:70:8a:11:fe:22:b6:ab:32:ec:58:f4:e5:
                    f5:bd:f2:29:a8:3a:5a:fe:99:7b:cf:cb:65:1d:47:
                    b2:3f:ec:39:53:eb:af:32:e2:10:46:1c:e9:aa:2e:
                    4c:87:c5:37:4a:2e:d4:66:5e:50:50:e5:ee:d4:3f:
                    e5:49:08:4d:5b:c3:60:20:00:72:b3:97:f6:f5:18:
                    b8:8e:77:f2:b2:47:e0:ca:41:29:0f:9e:ef:0a:1a:
                    64:fc:30:0d:78:75:9c:27:ee:8e:0f:c6:a5:30:2f:
                    f0:f9:88:c6:e2:53:50:26:40:85:a1:43:20:ec:69:
                    60:10:c8:5a:4c:17:b9:d2:31:9c:ee:af:aa:84:c8:
                    e6:1b:eb:be:8e:43:24:07:89:48:3f:e4:4f:c9:6d:
                    19:03:c5:43:6f:a4:74:ef:77:5d:ec:cc:ba:cf:82:
                    b7:d4:d4:ca:7c:dd:cd:10:79:80:f1:ae:02:00:28:
                    c3:62:b9:71:66:38:0e:7b:9c:d5:7d:6b:1c:1d:59:
                    ed:39:ad:5a:e6:b5:bf:ae:ee:53:1e:7e:cb:fe:8b:
                    2e:b5:f8:bf:fd:1f:c4:17:18:8b:3e:b6:10:9a:84:
                    fd:88:04:97:27:d7:33:6d:d6:44:0e:bb:e8:76:07:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:36:94:C4:73:BF:77:1B:01:7F:08:D4:50:FA:FE:EA:59:BA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl

            X509v3 Authority Key Identifier:
                keyid:0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.21.0/24
                  67.158.61.0/24
                  69.72.30.0/24
                  137.83.90.0/24
                  141.193.149.0/24
                  172.86.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8a:03:83:ae:d3:b3:c0:18:8b:99:89:72:0f:0e:5a:13:1f:
         be:6d:0f:34:b4:9b:4c:a7:2c:87:42:55:d2:12:dc:3d:f9:4f:
         31:8b:a2:bf:60:83:35:59:25:5d:df:75:47:be:31:3f:e7:dc:
         53:0d:e6:17:83:b7:89:82:c5:2c:df:ef:51:5e:0f:cd:ed:1a:
         89:3d:6f:d7:09:7f:71:19:0c:f6:ab:74:1a:d7:c2:5d:10:76:
         ec:5d:13:4a:8f:05:40:ba:0e:ba:9c:37:b6:d6:14:d3:24:b5:
         64:2f:b9:2c:8f:82:45:89:c5:70:f7:f9:38:76:ae:0a:c4:c5:
         5b:09:3c:ab:ab:fa:31:bb:a2:2e:bc:26:87:41:ac:3b:f2:9d:
         00:70:d4:51:5a:cb:ba:ce:e1:8f:1d:29:c4:2e:a7:81:34:90:
         7a:2c:11:75:25:b5:03:1d:cc:e2:eb:a8:ee:e0:50:9b:5a:9f:
         66:e1:cf:91:d3:64:ea:bf:15:42:15:1e:88:12:03:e0:8a:cf:
         63:63:3b:b3:71:3c:6e:00:ce:49:f4:5c:96:9f:1e:6e:5f:f4:
         4a:ff:6b:1d:41:7d:50:6c:e3:c0:28:34:de:36:c8:cc:f4:8d:
         5f:f5:b3:bc:e9:84:1c:62:a9:7d:34:e7:ec:0d:ca:82:c7:d0:
         fa:27:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:27 2024 by rpki-client on console-fra.rpki-client.org