Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14a7e56f-23c6-32e7-9ccb-6ab6c46b7260.roa
File:                     14a7e56f-23c6-32e7-9ccb-6ab6c46b7260.roa (raw, json)
Hash identifier:          DjlzhPU6P38tBBWQ5pHPwM902zOS5wgastLeEdR1Edk=
Subject key identifier:   C8:0B:89:D1:CF:E8:A8:3A:0E:95:A1:C7:DB:EF:30:9C:51:73:4D:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6C589239B3BE7629EF258
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14a7e56f-23c6-32e7-9ccb-6ab6c46b7260.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.233.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:c5:89:23:9b:3b:e7:62:9e:f2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=9cb036c0-507c-4e48-bbc7-e4eef3eae5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:ae:59:3e:fb:59:46:6a:5d:f3:49:d7:c0:
                    f8:80:89:14:b4:df:35:94:93:a4:c1:74:60:ec:66:
                    08:62:e4:e6:31:49:e3:9e:f7:4e:11:f7:2d:92:94:
                    54:a1:6a:76:75:86:bb:f7:1f:92:df:c1:ba:26:0a:
                    39:c8:d6:dc:69:e7:49:d6:0a:61:3c:0e:11:69:c8:
                    92:1a:f1:86:11:6b:38:2f:4e:33:5c:ce:1d:e1:44:
                    68:e4:07:10:4b:b5:8a:f0:5b:66:58:0f:69:22:87:
                    54:bf:f2:64:70:a2:16:b2:97:06:08:6f:15:06:2b:
                    55:54:c5:97:7f:59:0f:fc:0b:8f:a9:d7:b8:e7:96:
                    64:6b:e1:dd:2e:3c:4a:e1:59:5c:0f:53:33:b6:d6:
                    d4:0b:e3:4c:bc:d3:93:11:81:c1:8c:08:a1:fe:d4:
                    29:0b:51:1b:64:15:b0:dc:3c:3e:73:55:d9:88:b5:
                    2e:3a:8d:b8:0a:5d:f4:82:77:22:32:bb:7d:b2:7e:
                    9d:39:15:37:63:75:3e:8b:b9:5a:de:b5:4d:6d:41:
                    5c:64:87:32:93:73:a6:05:a1:a0:82:8c:09:99:df:
                    d6:73:97:93:9e:9d:af:c2:9a:ef:5b:94:a0:6c:6a:
                    60:fd:f7:cb:ee:33:95:bd:ee:cb:7b:b2:e4:48:39:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0B:89:D1:CF:E8:A8:3A:0E:95:A1:C7:DB:EF:30:9C:51:73:4D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14a7e56f-23c6-32e7-9ccb-6ab6c46b7260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.233.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:a7:73:96:52:55:0b:78:4f:ab:c3:84:1f:a3:a4:74:3e:c1:
         82:6c:ed:c5:fb:c9:20:7a:d3:0a:de:4f:d7:c0:f1:b8:ea:9b:
         04:68:72:be:f0:6f:67:60:da:7c:4b:6d:fd:ff:9c:0f:a6:04:
         78:35:3c:1b:29:e1:f9:68:76:f3:c2:55:66:31:04:df:48:20:
         61:c5:39:66:bb:d1:9d:9f:e6:f2:54:bb:bc:f5:ea:87:6d:e8:
         94:b7:b8:60:71:87:e7:6b:f7:73:4c:26:b1:2a:96:26:78:17:
         e9:92:d9:e6:ba:88:35:c2:b7:46:1a:8f:b2:17:58:4f:0d:4b:
         88:7d:f5:68:08:f4:c7:93:74:65:2d:bd:fe:42:37:10:a3:73:
         75:61:bf:91:3a:4c:f2:f0:ba:6b:8a:fd:2e:a4:c2:ce:7e:47:
         36:5f:ce:5d:7f:38:5f:6a:fe:8a:50:65:ca:7e:dc:4a:2f:10:
         50:d2:da:2d:08:1e:31:67:f8:33:06:95:da:3d:51:b1:60:21:
         ff:52:35:48:64:44:77:75:43:59:13:05:79:bd:71:5a:e8:a9:
         53:24:2f:e2:3e:64:36:0c:fd:28:65:2f:df:55:ec:d8:23:06:
         76:55:1c:9b:35:e5:e4:db:a2:31:e8:19:72:ed:80:af:c0:ce:
         58:68:30:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:18 2024 by rpki-client on console-fra.rpki-client.org