Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa
File:                     aa7afe85-abe8-3328-9407-af87c4793bd8.roa (raw, json)
Hash identifier:          Nc0qsDTFlPH1ukvWtP/oKO/xeZiulH43UM+g970hbPM=
Subject key identifier:   BF:4A:BB:58:ED:4C:74:19:2D:4D:66:93:11:3E:CD:56:E9:93:17:95
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC30797953D2F8763DFBB80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        75.112.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:07:97:95:3d:2f:87:63:df:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=1ccabf4a-e3a6-458d-a577-3d274e1fb309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:91:77:92:76:75:6c:6f:a4:55:92:9a:df:3f:
                    df:f2:fe:4a:b6:89:f6:0a:f9:00:4a:6c:0d:2b:c0:
                    df:8d:eb:78:28:62:20:eb:a5:f6:ef:73:a1:ec:e7:
                    5d:e2:a1:c1:ee:ac:0e:b7:91:b2:2c:1c:4b:ad:5f:
                    17:46:c4:75:aa:38:9d:c7:24:72:9e:84:2e:3f:9b:
                    54:d3:35:0e:89:88:86:cb:f2:ce:3c:48:eb:41:70:
                    a9:4e:d9:c1:59:fc:d9:17:5a:ea:d5:d8:d3:34:3f:
                    34:2d:7e:a5:5c:7b:d5:0d:c3:23:85:9d:f1:de:8c:
                    6f:4e:c8:0b:0b:5d:b2:ab:f6:56:32:f3:93:c4:7e:
                    1e:b4:e0:5b:65:7f:5a:ee:53:1f:fa:e5:e9:34:02:
                    aa:66:7c:81:32:ee:a9:d9:96:0e:e4:34:77:ae:5a:
                    fd:3d:2f:a2:be:e1:5e:f7:f0:d4:ce:99:14:55:31:
                    fb:3d:e1:2c:af:ae:46:09:36:90:8f:4a:30:11:93:
                    9a:56:2c:ad:c8:0c:ce:26:eb:e1:16:01:77:0e:fa:
                    b1:08:56:ca:f8:05:f1:f0:9e:ae:be:6e:ed:36:7c:
                    e2:23:51:2b:5e:a1:91:4a:da:88:ff:38:e4:38:5e:
                    c4:dd:88:82:6d:d1:bf:e8:c8:e8:7a:1b:e9:c2:be:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4A:BB:58:ED:4C:74:19:2D:4D:66:93:11:3E:CD:56:E9:93:17:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.112.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:84:20:5d:6d:4c:84:20:d6:b6:d2:4f:f9:4e:8d:e6:0c:04:
         8e:79:1d:a3:24:c1:6f:4c:3e:97:24:aa:01:bf:0d:4b:85:d3:
         05:24:af:19:89:44:0a:b6:5a:fe:e9:6f:b6:fd:44:8c:70:c1:
         54:75:58:11:22:99:2f:37:8e:22:83:1d:a0:e8:f4:6a:f8:c3:
         64:1a:74:1f:da:cb:7e:d4:39:d0:c7:9f:46:cc:f7:03:7d:9c:
         0f:a0:23:f0:aa:18:e9:ff:62:8c:e9:38:06:09:aa:80:a8:6a:
         71:e3:dd:97:dd:b7:a4:60:fc:d3:39:3a:83:2c:b4:31:c4:96:
         4c:10:f2:67:13:46:b6:31:a7:52:fd:d7:54:05:a7:7f:67:db:
         d3:15:46:6a:00:06:5a:91:b2:02:0d:a0:99:5d:3e:81:8f:7d:
         a8:95:d2:df:ed:ab:16:9b:30:b4:8f:8c:61:cf:aa:4e:9d:69:
         2f:36:f3:7f:f4:15:8b:17:9c:a3:07:b5:e8:af:51:64:7d:29:
         b3:3d:a0:a1:e7:55:98:c8:d7:b0:72:b3:98:68:a3:23:27:c3:
         a9:a2:28:dc:fd:ae:32:b7:38:72:9a:31:4d:c8:ec:f6:09:c0:
         ea:ae:0a:f1:22:b6:78:b3:4a:b5:13:e5:5d:d4:ff:d5:c3:7f:
         84:dd:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:25:09 2024 by rpki-client on console-fra.rpki-client.org