Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d214c5-20e0-3859-9688-c9e3dd55219c.roa
File:                     61d214c5-20e0-3859-9688-c9e3dd55219c.roa (raw, json)
Hash identifier:          nUKwyns+7ueeQjJdSdJek6aURNN5YrX88h8aecb1KBs=
Subject key identifier:   CA:D9:4A:67:11:2E:C9:41:14:7D:29:93:B1:3F:50:85:26:56:0F:42
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453CDD58D5FD9DCE9954751780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d214c5-20e0-3859-9688-c9e3dd55219c.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        75.159.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:58:d5:fd:9d:ce:99:54:75:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=7a82fd38-7871-49f0-acdf-cc9253cd2895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:bd:e5:82:e3:46:8f:2c:48:05:a6:12:1c:
                    79:62:9d:80:07:0a:4d:c8:b8:41:09:8d:95:47:52:
                    0b:35:a2:ba:3d:cd:b0:e1:cd:e1:06:3d:6a:8a:d7:
                    f3:64:65:51:d8:8a:7e:23:f3:09:38:7e:6e:94:80:
                    bc:8a:04:27:67:88:27:0d:9f:5d:cd:ee:d0:05:1b:
                    ea:a9:dc:a0:b9:ff:05:bb:36:84:0d:68:3f:94:a2:
                    e8:d2:f7:b1:58:81:3c:6a:66:57:26:12:f1:9f:b8:
                    a9:aa:58:e3:94:81:38:ef:5f:e0:d8:ab:c2:53:c0:
                    38:d9:61:72:f3:62:62:93:a6:51:8a:03:5c:15:2b:
                    a5:98:cf:e1:3f:95:8c:1f:02:81:60:47:a6:2f:7f:
                    2e:ae:8f:f6:4f:9e:cc:8b:84:38:0d:bf:85:bb:24:
                    57:81:08:9e:cb:04:84:db:b2:dc:bf:33:a3:37:90:
                    34:f2:7f:bc:ca:ef:aa:0c:1f:29:78:cd:94:f7:81:
                    9b:c0:8a:1d:31:a1:84:1c:eb:7d:0c:45:bf:5f:d6:
                    10:2b:e6:ef:00:49:7f:d2:5a:87:36:3d:49:56:db:
                    10:e9:62:95:6f:bc:d3:7d:e0:c2:28:af:6a:4a:72:
                    db:c8:d7:86:95:a1:77:8a:aa:0a:7a:53:71:08:58:
                    9d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D9:4A:67:11:2E:C9:41:14:7D:29:93:B1:3F:50:85:26:56:0F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d214c5-20e0-3859-9688-c9e3dd55219c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:9f:f5:7c:74:27:8f:d6:82:cc:66:3f:ac:45:da:db:c7:79:
         9e:05:8b:eb:db:6f:3a:ef:e1:0a:fc:3c:d8:69:09:91:ff:8b:
         81:70:4d:e7:19:9c:78:c1:de:cc:2d:1b:7d:17:ae:30:c3:0b:
         c0:ac:ea:fb:f9:1d:f1:d8:74:8e:6f:0a:db:99:f1:46:23:31:
         c6:60:60:51:0e:32:7f:d8:e4:af:c1:1d:84:f8:ce:a4:14:ef:
         9e:18:b0:a2:0a:43:b7:10:01:70:11:09:28:9f:3a:2c:3c:89:
         a6:af:60:84:99:e2:f6:4d:36:75:ae:83:61:09:a7:ae:0b:21:
         2d:b4:9f:b1:a1:e5:e7:20:f3:42:6c:19:6a:9f:28:bb:36:fb:
         aa:41:97:65:9a:b6:c2:e5:28:54:93:cb:26:29:c4:7c:32:12:
         a8:01:4b:09:e2:9e:94:49:44:d6:13:db:7b:7b:c9:17:23:36:
         7e:ed:63:7a:d8:3f:b3:bf:10:30:34:e9:6d:58:2e:68:60:8d:
         48:39:df:32:24:0f:16:3a:20:62:4b:2c:e8:50:9e:27:bb:e8:
         38:f8:0d:a5:98:46:f6:28:e1:7f:1c:b4:46:4a:83:ae:b7:7a:
         74:0d:23:a4:81:46:ee:6b:2c:cd:2a:ab:0e:15:af:b8:85:6a:
         41:41:a2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 06:27:21 2024 by rpki-client on console-fra.rpki-client.org