Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f7d35ce-4d2d-3e01-813e-f7cacf89310e.roa
File:                     0f7d35ce-4d2d-3e01-813e-f7cacf89310e.roa (raw, json)
Hash identifier:          /8PV6mka56ruzUa7lY+yS0HBWtPDaRREC3MuEmO9kpI=
Subject key identifier:   21:84:5D:44:6C:B0:B6:01:0E:A3:06:5A:C4:82:5B:D1:02:33:76:09
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6BF9554612DCC19950C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f7d35ce-4d2d-3e01-813e-f7cacf89310e.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.205.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:bf:95:54:61:2d:cc:19:95:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=4058b167-13ce-4426-8f2d-3dbfa6f12f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:f5:d6:7b:b3:27:f8:91:82:b8:a7:69:aa:
                    43:46:dd:23:fe:6e:a4:99:54:77:a8:5f:4a:fe:e7:
                    f4:43:80:1b:fe:71:ed:42:f7:60:72:87:20:3f:4a:
                    7a:a3:57:a8:e0:7a:87:f9:7a:25:cd:4f:bc:74:fe:
                    b7:36:eb:69:d2:83:17:54:b5:9c:eb:36:30:de:93:
                    b7:b0:06:13:0f:6f:a6:58:cf:45:71:18:0e:43:50:
                    ce:ae:10:5b:3a:fe:35:2b:fa:0a:d1:d8:36:26:bf:
                    9a:d7:08:ec:13:32:93:1e:5f:3b:17:e7:b3:62:9b:
                    b8:ee:fe:0d:b5:82:8c:11:d4:c7:ec:a9:4e:da:32:
                    c0:5c:d3:5e:59:42:b1:d2:64:d2:0e:e9:21:10:ed:
                    80:d9:70:55:ed:ea:95:c9:83:7f:eb:bc:0e:c3:3c:
                    c6:83:14:b9:97:a6:f9:97:80:b6:38:c4:92:e0:39:
                    51:4d:b2:65:8f:52:7b:ae:ee:b9:72:df:b5:e7:99:
                    d4:ad:5f:4b:c2:b2:f8:19:a4:e5:a3:e9:51:5d:6c:
                    d7:28:25:e2:b8:9b:db:f3:72:b6:97:16:1d:31:c9:
                    1c:95:86:0b:7b:a2:da:03:98:ed:e8:01:89:bc:37:
                    b7:9a:a4:5c:b1:8e:6f:dd:4d:ab:77:f5:41:7b:e9:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:84:5D:44:6C:B0:B6:01:0E:A3:06:5A:C4:82:5B:D1:02:33:76:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f7d35ce-4d2d-3e01-813e-f7cacf89310e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.205.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:ae:bf:df:43:3e:ff:b0:9c:94:72:31:69:31:07:63:ba:b1:
         24:07:30:3d:b7:eb:00:d1:17:31:c2:13:65:fa:65:72:c6:f7:
         36:31:ad:52:55:e6:45:a7:2e:aa:bb:d8:8c:e7:7b:48:e6:34:
         27:93:64:d9:e6:c9:e0:c6:37:bd:bc:0f:f1:60:1e:21:17:13:
         0b:b3:56:b2:6d:4a:b2:d3:49:3f:ed:fe:13:fe:b0:f4:e5:91:
         2f:a5:22:9f:37:58:48:26:98:de:24:e9:fa:d3:64:40:6f:8c:
         14:94:b9:5c:7e:23:15:e7:d6:7a:b9:db:48:b8:8f:b6:7f:d5:
         b3:67:85:b3:95:e8:88:6a:50:85:7d:ba:a2:9e:5d:aa:87:7e:
         3e:84:f1:e2:42:1d:7a:1d:87:18:cd:dd:69:dc:98:18:52:78:
         9a:a8:46:3e:87:4e:68:56:bd:2c:92:d3:00:b5:f5:3c:d4:50:
         34:ef:c3:2b:2c:e0:7d:89:97:21:a6:9d:4e:9d:fd:7e:a5:99:
         82:d3:7b:6e:bf:92:ac:0f:71:84:d0:01:32:e3:99:49:95:52:
         85:a9:7a:66:02:1f:87:5b:40:65:d4:5e:89:b2:e0:13:c5:2d:
         7d:0f:16:1b:ce:c6:28:44:2a:32:ce:73:6f:c5:f9:7e:40:37:
         d9:a0:1a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:17 2024 by rpki-client on console-fra.rpki-client.org