Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4749bb32-cf6c-3ce0-bee8-09e06e8c4c91.roa
File:                     4749bb32-cf6c-3ce0-bee8-09e06e8c4c91.roa (raw, json)
Hash identifier:          +7s6iryGE5hR62z2PN+N2kV9yN5QUH1gGwSpDljzjm8=
Subject key identifier:   BA:A0:3D:7E:DF:4B:02:06:1F:A6:59:DB:2C:AE:30:B0:00:AF:11:9C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC649DFD99AED1B5E3446CC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4749bb32-cf6c-3ce0-bee8-09e06e8c4c91.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        75.155.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:9d:fd:99:ae:d1:b5:e3:44:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=26807395-3679-4303-a229-12d32cff6b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:5a:2d:d1:6f:ae:5a:b1:44:83:95:55:f7:
                    27:3e:4e:c4:e1:82:75:90:db:7d:28:b6:e8:81:78:
                    2c:c2:f8:76:df:0d:d7:37:31:f6:38:39:d2:c6:d3:
                    2e:bd:a8:eb:27:9e:14:81:34:42:a5:dc:bb:8e:32:
                    21:de:c7:db:77:f5:14:3d:39:6a:4c:5c:97:37:17:
                    52:9c:1e:55:09:18:b9:ff:a2:f2:74:f3:9b:44:54:
                    b7:90:80:87:41:cc:d6:7b:03:14:1d:ef:dd:fa:0d:
                    b4:1c:58:80:a7:ff:aa:1d:73:ea:0e:1e:36:04:fc:
                    26:74:43:64:a8:76:0e:1f:d2:e6:80:1c:98:55:24:
                    8b:8b:5c:a1:12:71:2c:60:78:3c:f4:ea:03:67:fa:
                    7e:0b:11:04:a0:ab:af:7e:a3:5d:78:b8:c2:9b:05:
                    e1:73:ca:47:ad:7b:94:6f:99:2a:1a:44:9e:c9:75:
                    e7:95:62:05:11:88:9b:ab:55:07:e5:0d:06:40:fc:
                    e4:fe:4a:07:52:1f:47:57:db:7a:b2:81:60:61:5a:
                    13:9c:cd:50:62:ca:a8:aa:60:38:b5:01:dc:70:94:
                    4a:4c:f7:dc:15:64:7e:dc:d9:b0:eb:ba:3c:10:83:
                    80:de:4f:c5:f2:e5:f4:bf:65:20:50:99:0e:af:fc:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A0:3D:7E:DF:4B:02:06:1F:A6:59:DB:2C:AE:30:B0:00:AF:11:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4749bb32-cf6c-3ce0-bee8-09e06e8c4c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.155.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a2:89:0a:af:d2:69:ac:21:73:57:23:52:bf:99:d0:5e:bc:
         bc:38:57:8d:88:db:56:10:b9:7b:8f:aa:ae:46:73:21:5c:70:
         c2:09:9f:92:6b:a7:50:e6:1f:d6:2f:61:84:c9:54:f1:02:51:
         65:4a:8a:cd:77:ad:a1:9e:f4:9d:dd:96:1a:5a:a8:59:1a:0e:
         02:b9:7e:aa:a9:6d:01:0f:56:c4:82:47:e3:60:9e:d9:95:5c:
         43:ca:08:d9:f7:f0:9c:7d:1a:aa:93:6e:e7:35:57:fb:b3:bf:
         db:cb:fc:89:35:c2:57:e4:7e:aa:58:84:bc:d9:ba:a5:31:cd:
         01:a7:ee:3d:c6:82:fd:58:3f:c8:d8:57:b3:ff:76:bf:01:4e:
         d0:d4:72:0f:fd:b9:aa:c4:67:14:7a:6b:f0:c0:f3:e6:2d:9f:
         ea:2f:f1:4c:c6:b8:ff:7a:9f:07:bf:5e:d4:88:50:80:2c:cb:
         c4:84:0c:24:68:72:92:1d:d1:e9:02:d9:77:ba:f3:af:a1:56:
         c1:5b:cf:15:ac:a9:49:66:bc:1c:2b:ab:5d:03:1a:85:7a:c8:
         6b:44:47:55:ee:d9:d4:1b:ff:50:26:ac:52:d2:2d:52:bd:21:
         85:36:a3:66:3f:4a:15:13:e6:32:4c:df:54:c0:51:f5:9c:0a:
         94:09:99:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:11 2024 by rpki-client on console-ams.rpki-client.org