Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/18c0272f-ec13-3056-9a22-d6bf7861f227.roa
File:                     18c0272f-ec13-3056-9a22-d6bf7861f227.roa (raw, json)
Hash identifier:          IV8bu/DdWcxIR8Im1nOCThdZ41H7dVr8v4fTKw1D8zQ=
Subject key identifier:   BA:8D:28:A7:46:C5:C8:98:3A:F2:6D:D7:64:93:91:FE:77:A1:81:AB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC649B6DA48340168D305580
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/18c0272f-ec13-3056-9a22-d6bf7861f227.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        75.158.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:9b:6d:a4:83:40:16:8d:30:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=b7fba867-45e9-4195-8561-ac2ab142b837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4f:46:21:5c:98:b0:06:43:c3:a0:53:7e:93:
                    02:3d:a5:fd:17:e6:88:aa:e5:ad:4f:a8:ec:bc:91:
                    97:33:8b:8b:80:4a:56:f0:d1:9d:41:56:4a:3d:31:
                    b1:9b:d0:88:ab:73:a7:ad:be:54:b7:70:27:9d:e1:
                    8b:08:ba:c4:2a:bb:c5:87:03:28:bd:20:48:d4:7f:
                    b6:c9:4a:c7:e3:9c:da:38:16:06:76:1f:9f:19:00:
                    a7:6c:a8:55:c4:62:6e:39:9a:b3:0d:5c:72:93:d8:
                    7b:4a:93:c6:18:7e:27:e0:cc:c1:3b:24:b6:04:37:
                    6c:0e:1a:fe:f4:57:e4:09:22:f9:87:01:bd:bf:a1:
                    79:94:4f:12:e1:ce:2a:a4:e1:3d:b2:78:b0:e4:39:
                    54:0c:5f:c9:6f:9d:4c:6f:47:4b:ce:6d:19:40:e1:
                    34:18:5e:f7:2c:8b:de:7f:59:56:c4:5d:0b:07:59:
                    43:95:6b:64:5c:88:ca:d8:77:c7:17:db:fb:d2:ff:
                    1b:ba:6b:d9:04:85:16:4e:26:f7:40:22:7b:22:64:
                    8e:5b:76:f6:69:a9:b1:7e:86:69:60:0b:69:f8:3d:
                    de:e4:bb:fa:d1:b1:8f:8b:cc:01:91:cd:e6:e1:c6:
                    f6:1b:1b:78:b6:c0:33:04:a9:8d:57:fd:42:7e:e0:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8D:28:A7:46:C5:C8:98:3A:F2:6D:D7:64:93:91:FE:77:A1:81:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/18c0272f-ec13-3056-9a22-d6bf7861f227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.158.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b3:4c:e8:dc:8d:be:bf:99:8d:fa:d5:95:23:46:3c:6e:30:
         84:ae:db:25:1e:7d:4e:16:66:72:0f:99:84:7e:b3:53:7e:a3:
         c3:98:a8:4b:2d:8d:d7:fc:a3:46:41:0c:bb:e7:a9:df:86:17:
         73:56:5b:eb:8a:d9:74:6f:2a:4d:5d:a4:37:47:c7:6d:a9:ec:
         34:13:83:55:6e:9e:5b:a6:54:d7:c8:6b:56:eb:f9:ae:da:be:
         aa:62:6a:f5:62:25:15:ec:be:fe:dd:8b:b7:52:63:27:ac:79:
         bb:80:28:f6:46:9e:fe:b3:58:36:9e:2b:6e:ca:d0:f9:ea:9d:
         91:39:4f:3e:6e:09:8f:57:1b:b7:26:31:fb:b0:e8:ce:df:8c:
         b0:61:11:06:e4:fc:a4:13:81:47:98:a6:bb:aa:6f:e5:0c:e6:
         ee:cc:d4:32:fb:96:fe:4b:fc:65:3d:88:09:d8:10:2f:5a:e7:
         dd:65:21:b2:fc:39:c8:99:3a:9c:a6:86:d8:40:4f:f8:ca:3f:
         31:96:ab:87:8a:74:ac:fd:f8:b8:8b:14:9e:b3:92:6f:e1:e4:
         51:71:25:f2:a8:6a:3d:20:c8:dd:54:b8:c3:a5:99:51:cb:31:
         6b:28:51:37:22:42:39:3a:3c:4d:36:6e:4e:2b:82:43:65:a1:
         dc:1a:82:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:10 2024 by rpki-client on console-ams.rpki-client.org