Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/75528f4d-1f73-364f-9fa3-e07debeddec7.roa
File:                     75528f4d-1f73-364f-9fa3-e07debeddec7.roa (raw, json)
Hash identifier:          uANc+NMXQc+lLAUauClhrTqZeoD/CvzH0tHqyX6db34=
Subject key identifier:   D0:FD:AF:E5:DA:B7:71:B2:33:C0:42:EA:B2:D3:AD:6D:CA:B5:83:45
Certificate issuer:       /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
Certificate serial:       010D0C9F43285846F342EF2119DA30950DCC5000
Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/75528f4d-1f73-364f-9fa3-e07debeddec7.roa
Signing time:             Wed 21 Aug 2024 13:49:18 +0000
ROA not before:           Wed 21 Aug 2024 13:49:18 +0000
ROA not after:            Tue 19 Nov 2024 14:49:18 +0000
asID:                     14618
IP address blocks:        204.128.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f3:42:ef:21:19:da:30:95:0d:cc:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
        Validity
            Not Before: Aug 21 13:49:18 2024 GMT
            Not After : Nov 19 14:49:18 2024 GMT
        Subject: CN=8053e284-cc40-4a82-bcc4-3562a866a695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:70:31:39:a9:39:3b:e4:d5:91:e1:16:7b:
                    d6:d6:78:ad:67:09:a9:e4:1e:a5:c3:ac:93:03:09:
                    a2:29:34:b8:94:62:28:bf:92:5b:50:14:3f:19:a5:
                    6f:ba:3d:29:bf:42:6a:13:9d:70:47:7a:39:30:36:
                    1b:ae:61:84:63:44:df:c7:54:d6:4c:c6:77:c5:e7:
                    21:41:8d:7a:07:dc:6c:cf:4d:15:e3:81:3e:83:0d:
                    5b:5a:7f:67:b8:56:86:a9:48:10:ab:5c:9b:a2:79:
                    78:b4:ce:59:68:0c:eb:8f:01:d9:5f:18:db:fd:40:
                    5f:1f:90:26:4e:1f:bd:5d:51:0d:9b:ac:d7:e7:b6:
                    0e:de:ff:82:9f:24:1d:46:33:d9:6e:41:0c:73:6c:
                    ea:35:c9:92:a1:25:9e:ed:ca:74:da:bf:fc:db:03:
                    03:b9:9b:78:21:e2:a8:c3:01:23:1c:6c:c4:0b:ed:
                    0e:bb:3e:66:81:39:59:a1:30:06:fb:cc:aa:7e:40:
                    70:b4:b6:44:be:39:f1:9c:ae:a8:7c:1e:a4:fe:27:
                    16:32:a8:a0:fa:d6:20:dd:2c:28:4f:79:1c:9d:59:
                    d8:55:25:a0:e0:16:10:bc:60:81:2b:90:7d:21:67:
                    d1:b2:5c:ec:6b:ea:5e:cb:69:1f:fd:98:31:9f:f8:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FD:AF:E5:DA:B7:71:B2:33:C0:42:EA:B2:D3:AD:6D:CA:B5:83:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/75528f4d-1f73-364f-9fa3-e07debeddec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl

            X509v3 Authority Key Identifier:
                keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.128.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:aa:b8:e3:50:38:58:c2:d5:55:ae:c5:4f:a6:69:f4:a7:f7:
         9a:e2:cc:21:9a:43:8e:a6:3f:53:4b:f9:37:9a:72:15:22:be:
         f1:f5:2b:b3:03:a9:e5:75:d5:30:66:48:1e:33:52:00:d0:1b:
         88:7e:f8:93:97:af:1c:1c:78:94:94:8f:1d:fb:51:07:d1:e7:
         ad:b8:91:38:9a:c6:13:bb:24:d1:b6:77:a9:1d:62:db:67:95:
         79:dd:80:9b:83:45:35:63:da:8e:e8:d8:fa:88:95:88:a0:75:
         30:bf:08:3a:87:62:1a:99:76:0a:94:9d:c2:ee:f2:99:0f:18:
         99:9e:00:65:28:22:39:33:5d:aa:ef:45:9e:57:7c:eb:c0:b6:
         fb:bc:d4:3d:7e:9e:80:15:f3:d0:33:80:d2:e8:cf:0f:42:f5:
         f6:7b:4b:47:e2:89:3d:25:02:f4:d1:ef:01:53:67:7c:58:1d:
         76:1b:a2:46:a5:9a:52:7c:69:67:d0:e9:0a:12:75:85:ad:73:
         29:65:fc:e5:59:9d:21:fc:28:33:35:83:54:30:6c:f9:e0:34:
         eb:66:58:d7:49:e6:55:d0:3d:20:69:93:8c:da:b5:13:c4:f6:
         d2:72:d3:0d:97:6f:14:2e:66:92:63:02:e1:be:86:ad:1e:83:
         7a:19:2d:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbzQu8hGdowlQ3MUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RkNTYwZDQtNzdjOS00YWI2LWIyMmItOTc3MWFhM2I2
N2MyMB4XDTI0MDgyMTEzNDkxOFoXDTI0MTExOTE0NDkxOFowLzEtMCsGA1UEAxMk
ODA1M2UyODQtY2M0MC00YTgyLWJjYzQtMzU2MmE4NjZhNjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsepwMTmpOTvk1ZHhFnvW1nitZwmp5B6lw6yT
AwmiKTS4lGIov5JbUBQ/GaVvuj0pv0JqE51wR3o5MDYbrmGEY0Tfx1TWTMZ3xech
QY16B9xsz00V44E+gw1bWn9nuFaGqUgQq1ybonl4tM5ZaAzrjwHZXxjb/UBfH5Am
Th+9XVENm6zX57YO3v+CnyQdRjPZbkEMc2zqNcmSoSWe7cp02r/82wMDuZt4IeKo
wwEjHGzEC+0Ouz5mgTlZoTAG+8yqfkBwtLZEvjnxnK6ofB6k/icWMqig+tYg3Swo
T3kcnVnYVSWg4BYQvGCBK5B9IWfRslzsa+pey2kf/Zgxn/hH9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFND9r+Xat3GyM8BC6rLTrW3KtYNFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1
NjBkNC03N2M5LTRhYjYtYjIyYi05NzcxYWEzYjY3YzIvNzU1MjhmNGQtMWY3My0z
NjRmLTlmYTMtZTA3ZGViZWRkZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2RkNTYwZDQtNzdjOS00YWI2LWIy
MmItOTc3MWFhM2I2N2MyLzdkZDU2MGQ0LTc3YzktNGFiNi1iMjJiLTk3NzFhYTNi
NjdjMi5jcmwwHwYDVR0jBBgwFoAUaH23I0rV6sAiz6qA1UzejvWxHL0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1NjBkNC03N2M5LTRhYjYtYjIyYi05Nzcx
YWEzYjY3YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzICvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAOquONQOFjC1VWuxU+mafSn95rizCGaQ46mP1NL+TeachUivvH1K7MD
qeV11TBmSB4zUgDQG4h++JOXrxwceJSUjx37UQfR5624kTiaxhO7JNG2d6kdYttn
lXndgJuDRTVj2o7o2PqIlYigdTC/CDqHYhqZdgqUncLu8pkPGJmeAGUoIjkzXarv
RZ5XfOvAtvu81D1+noAV89AzgNLozw9C9fZ7S0fiiT0lAvTR7wFTZ3xYHXYbokal
mlJ8aWfQ6QoSdYWtcyll/OVZnSH8KDM1g1QwbPngNOtmWNdJ5lXQPSBpk4zatRPE
9tJy0w2XbxQuZpJjAuG+hq0eg3oZLYI=
-----END CERTIFICATE-----
Generated at Thu Sep 19 19:54:55 2024 by rpki-client on console-ams.rpki-client.org