Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/761d6c6e-bf74-3c42-b1c9-9d8034812b2a.roa
File:                     761d6c6e-bf74-3c42-b1c9-9d8034812b2a.roa (raw, json)
Hash identifier:          IlIMQvKR/XXLQANLIbw3jPxb/nd07sZM06JSxkKjJT8=
Subject key identifier:   14:4F:2C:77:C1:C8:7E:BD:79:D0:BE:BA:1F:E2:29:2D:97:CA:81:E1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC64A3ED15CE94CFEDD833BA
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/761d6c6e-bf74-3c42-b1c9-9d8034812b2a.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        75.158.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:a3:ed:15:ce:94:cf:ed:d8:33:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=2aedfba6-55e3-4557-bfa1-64990fcdac50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:21:f4:51:3c:1d:30:be:57:b3:2c:c4:98:
                    ae:a7:03:34:65:39:ed:4b:8e:cf:40:e0:9b:fa:20:
                    76:db:51:c6:7f:90:13:fe:7e:d5:50:7c:cd:2f:33:
                    db:9e:b0:db:c9:4e:46:cd:ad:ce:26:13:a7:ec:d1:
                    dd:78:81:e6:74:52:6a:14:7a:89:b7:1a:f4:9d:4d:
                    03:77:be:ad:ab:be:ab:fd:17:64:94:82:d9:ed:fe:
                    a4:de:b8:ff:91:40:9c:f4:8a:b1:10:84:6d:ed:31:
                    76:73:60:6e:09:e4:75:29:d7:a0:e8:74:21:c6:aa:
                    98:d9:1b:88:ac:b0:8b:7d:a5:67:bc:a8:db:92:b7:
                    0f:dc:78:36:7f:71:98:1f:72:34:06:f2:1d:97:64:
                    29:ac:c2:f8:ff:37:ba:dc:bc:a6:ac:d9:11:e8:e1:
                    6a:cd:07:1c:a0:ee:c8:c0:33:b8:e8:4f:65:24:6b:
                    0c:c4:88:b9:37:64:fd:ad:b5:97:2f:7c:c7:8c:66:
                    19:65:5a:0f:d5:73:a3:d0:8b:75:6c:8d:30:f3:d6:
                    60:14:36:0f:bf:09:a9:17:66:6c:05:a5:cf:b2:72:
                    61:7d:17:c4:ec:2c:0c:02:09:9f:b8:16:32:39:32:
                    e5:b5:c2:d2:f9:e0:50:0a:0f:79:6c:44:03:31:7b:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4F:2C:77:C1:C8:7E:BD:79:D0:BE:BA:1F:E2:29:2D:97:CA:81:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/761d6c6e-bf74-3c42-b1c9-9d8034812b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.158.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a8:b2:ac:25:d2:87:f2:fd:79:fd:1c:db:66:95:30:1c:1e:
         ab:01:9c:ed:29:a7:c5:6d:c8:20:ac:45:fb:ea:87:ea:ec:20:
         b9:33:ea:df:ab:58:8a:18:30:51:02:22:99:eb:94:3f:8f:13:
         61:98:f0:33:d0:7b:ae:00:cb:c4:43:cc:65:51:c9:be:a1:33:
         2a:a1:40:a7:0d:1f:32:21:e5:12:1e:97:59:e5:2e:3d:cc:dc:
         88:42:07:89:5c:aa:8b:ac:4a:a4:96:13:e8:0a:42:30:5c:d1:
         83:cf:26:48:56:c9:cd:5d:3e:2a:13:42:2d:f1:81:95:0c:f8:
         1e:51:a8:f8:dd:04:43:fd:03:21:48:65:35:51:ec:6b:f3:b7:
         a9:d9:65:07:2b:f8:34:74:10:c1:ee:7b:f4:96:44:75:6e:61:
         0c:da:dd:d7:7b:fd:82:0a:82:4e:32:64:95:96:50:a7:34:8c:
         76:58:db:d3:95:09:4c:2d:86:1f:26:7d:70:6f:c2:b0:c6:fb:
         38:be:47:1f:88:f4:2e:42:51:11:d8:f6:26:23:26:9d:75:4e:
         c0:24:13:3d:9c:73:f1:a1:8a:fa:dd:8a:63:d2:2d:87:ac:79:
         5f:e4:20:64:38:87:d9:66:0e:1f:8f:5a:b9:63:fb:c1:de:e2:
         1c:22:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:48 2024 by rpki-client on console-fra.rpki-client.org