Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa
File:                     b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa (raw, json)
Hash identifier:          W6ypMFEFWaj3+2kQXSNP2Rm0mlxwBKp7bKS3FtznCU8=
Subject key identifier:   62:86:E1:0C:3A:16:7A:64:44:E6:61:DD:8D:AC:36:8C:08:FB:A5:62
Certificate issuer:       /CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
Certificate serial:       010D0C9F432858458C6DD35F8613EA3980D9F340
Authority key identifier: E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        195.85.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d3:5f:86:13:ea:39:80:d9:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=53c5996f-2262-44b1-84eb-381c30930aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f1:2d:bd:d2:5f:95:ce:5a:b2:55:9f:de:37:
                    75:cd:45:04:4e:06:0f:be:1f:b2:98:7b:de:3f:94:
                    07:d4:ee:a4:73:9f:64:44:d8:9e:d2:19:00:d4:49:
                    bb:0b:5c:83:d6:00:c8:4b:72:4e:b9:2f:9c:54:34:
                    87:48:0c:47:7f:b3:78:64:9d:3e:fd:a2:7a:ef:96:
                    38:ce:44:d2:cd:ef:9b:33:5d:54:99:d5:40:5c:78:
                    85:a7:6c:b7:be:72:16:ae:81:fc:b0:48:29:c7:b2:
                    89:2f:e5:9a:21:df:1e:15:af:ae:fe:5a:76:51:ac:
                    b8:7d:fc:3a:a0:e1:46:d3:88:4d:41:44:4b:c3:85:
                    29:97:2f:94:c1:57:72:70:ce:a1:a2:a6:6f:fb:31:
                    e8:01:c0:76:02:15:b0:c8:30:44:46:af:37:f6:9b:
                    42:e6:2c:3e:1b:72:56:ea:74:74:a4:af:36:2c:c0:
                    46:6d:09:39:d5:9f:55:26:53:78:0d:73:54:a6:1f:
                    0f:e2:ab:88:6e:aa:8a:8f:39:72:a4:98:4d:a6:68:
                    7f:6a:a1:19:34:c9:24:93:4d:bd:67:b4:0e:f1:8f:
                    19:59:a5:42:6f:e5:bd:71:ec:77:04:7f:e0:a3:bc:
                    b6:61:67:9c:b5:71:52:8d:46:92:74:dd:0d:7c:8e:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:86:E1:0C:3A:16:7A:64:44:E6:61:DD:8D:AC:36:8C:08:FB:A5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl

            X509v3 Authority Key Identifier:
                keyid:E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:41:06:e6:1b:b0:48:c2:fe:1f:c4:71:57:6c:56:ed:c6:06:
         3e:ef:67:85:62:59:31:60:65:ef:4d:d9:b6:0f:ad:12:f6:d8:
         bb:3b:fc:e7:a7:36:7d:76:50:7f:ad:14:05:3c:7b:c5:cf:58:
         7c:23:6b:3c:7e:0f:a5:eb:b8:24:e3:fd:26:98:97:40:4b:37:
         ff:04:1b:0f:6a:76:37:f6:19:04:0f:62:98:fe:8f:84:73:94:
         33:1f:c7:86:d1:d6:3e:ab:8a:63:bb:39:6d:1a:d4:7f:db:91:
         04:06:f7:bd:9b:5c:18:8d:c6:ed:5d:d0:ea:d8:13:34:fa:c6:
         cc:9e:62:c3:10:03:14:68:b5:f5:4e:b7:22:46:0f:76:1a:a5:
         42:29:c5:f9:7b:52:8f:fb:1e:e7:b8:14:f2:c0:37:b9:9d:16:
         ab:ef:17:4c:99:95:a9:52:c7:dc:d4:17:7c:7d:c4:e3:bd:63:
         7e:93:9b:18:13:77:3c:06:c1:cd:14:40:de:34:89:22:12:90:
         f6:b3:6c:a2:7a:91:1e:a3:9a:64:16:0f:1f:6d:f8:bf:ad:0b:
         b8:d9:6f:23:9d:e2:a4:6a:45:42:5e:da:ab:8b:14:43:16:f9:
         dc:37:eb:92:da:b5:99:a9:4d:0e:0c:21:26:76:48:8d:a3:82:
         e1:ba:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:10:53 2024 by rpki-client on console-fra.rpki-client.org