Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa
File:                     f5e48722-9789-3f44-8a5a-cba796b934fd.roa (raw, json)
Hash identifier:          m/SSm0MFH9kyaP8hRSChy/Xb/pa8O4yBb5mcFGK3YHU=
Subject key identifier:   4C:77:5C:8C:25:89:FB:93:A0:C5:61:31:0F:EC:3B:4C:C2:41:8F:AC
Certificate issuer:       /CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7
Certificate serial:       010D0C9F432858478E1BC6B7DF6F5CAD09EAF5C0
Authority key identifier: 07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     11105
IP address blocks:        192.75.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:c6:b7:df:6f:5c:ad:09:ea:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=32562c6e-f137-4995-bccc-0116e04a30ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:40:33:fe:5d:06:b7:a2:7f:60:21:15:21:
                    8f:5f:2f:c6:d0:76:8d:50:c2:b8:a4:58:10:f7:f0:
                    af:f8:74:40:33:e1:c8:f2:ca:bd:3b:37:c4:7c:e1:
                    d3:2e:a6:96:97:16:9f:cb:0a:bf:cf:f7:fc:a7:c3:
                    30:6e:10:ad:78:39:5e:fe:f5:24:88:b0:73:cd:92:
                    e9:3c:b3:c8:64:50:54:ee:2c:d4:f7:cd:ff:9b:df:
                    1e:d5:02:c4:00:ac:b7:4f:45:fa:a2:73:71:97:1a:
                    d0:8c:13:f1:44:58:de:10:3b:91:b8:87:55:b8:e3:
                    cf:22:29:7d:d4:cd:56:a7:61:4f:5a:a2:32:b2:d7:
                    52:9a:3c:0b:f5:8a:18:cb:46:a3:a3:50:11:d7:7f:
                    0b:35:7c:32:01:77:44:b5:2e:27:83:35:db:fb:4e:
                    c7:7b:e2:c3:bf:0b:d4:1d:aa:3c:43:44:39:1e:27:
                    bd:c9:45:ca:b4:30:21:a0:db:13:af:24:6a:9f:42:
                    cb:8c:47:98:d9:db:38:4d:98:e8:35:5b:84:23:4a:
                    aa:eb:cb:b1:0b:ea:57:35:c7:ee:24:8d:b1:9f:34:
                    f0:10:e9:48:9a:a6:a0:0a:96:30:ed:f5:9d:27:93:
                    dd:c6:1c:c7:55:5d:99:1d:58:c7:ee:4f:35:7f:b2:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:77:5C:8C:25:89:FB:93:A0:C5:61:31:0F:EC:3B:4C:C2:41:8F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl

            X509v3 Authority Key Identifier:
                keyid:07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:97:27:6d:50:86:3c:be:86:24:8d:27:8e:09:c7:9b:56:72:
         f8:7d:39:5c:f4:a1:e3:54:aa:bb:66:88:f0:ce:bc:6d:77:30:
         9b:14:dd:21:f4:a6:86:3b:69:7b:12:0b:1b:c4:0e:98:ba:2a:
         d5:8f:8e:f1:14:f4:4c:46:64:20:81:73:3e:d7:e1:e4:90:17:
         d6:75:35:e6:0d:fe:1f:4e:3f:9b:5f:87:98:f1:7d:d6:74:83:
         63:1f:4b:2d:48:d6:ff:42:0c:e1:9d:6f:29:45:9e:e7:d9:54:
         af:1e:b3:49:13:7c:88:4b:cb:e0:f7:87:b6:98:32:42:90:1f:
         57:79:45:da:be:3f:b5:20:b5:37:a7:9c:1f:b0:28:91:c8:e2:
         35:fa:da:9a:d5:49:85:3f:de:f7:0c:38:13:7a:1e:25:15:12:
         33:0a:02:f4:c7:60:f0:e3:14:2b:bc:4f:e5:a7:e2:5b:11:26:
         05:79:25:47:1d:f1:dd:3c:16:f9:9c:64:e8:4f:47:10:96:8f:
         3d:29:1f:27:39:f0:a5:b5:28:06:34:6e:44:fe:a5:5f:c5:5f:
         2a:2c:67:ef:0e:39:79:53:10:a6:be:0e:04:fb:08:50:7d:c7:
         ef:2f:93:85:91:86:c4:66:c6:c0:85:2e:f7:8d:c3:98:8a:88:
         cb:e1:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org