Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3362752b-7b60-34b5-8326-20de64ac272d.roa
File:                     3362752b-7b60-34b5-8326-20de64ac272d.roa (raw, json)
Hash identifier:          +HccIVWUaxRxrx7Fc7xkw+kQlduqIThhkgWm6ZI9/78=
Subject key identifier:   BE:BC:88:D9:82:BC:13:C5:7E:C4:97:C4:AE:E0:A0:07:30:76:4A:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6C151D4F1DE43AF179100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3362752b-7b60-34b5-8326-20de64ac272d.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.209.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:c1:51:d4:f1:de:43:af:17:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=3a43f614-2492-405c-b92e-54b7fb22cb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:40:33:68:6e:88:83:37:00:df:da:a9:fd:27:
                    e3:7e:86:3a:0d:11:1f:78:7a:8a:8e:16:db:8f:c4:
                    6d:bc:fd:ae:20:85:62:6b:9b:58:4e:38:52:77:75:
                    0c:ed:63:c2:d3:09:05:df:85:f4:86:15:ed:81:cb:
                    f7:4d:8b:51:36:56:ab:0c:77:de:0c:2a:72:01:bb:
                    02:03:3c:21:ef:29:47:c1:34:21:86:96:17:00:97:
                    26:93:b5:d1:b5:19:a1:92:80:8b:d0:79:4c:5d:84:
                    7d:65:d9:90:f9:e9:88:9f:72:87:38:56:b7:bd:c7:
                    64:99:40:bd:e5:62:cf:27:48:89:80:fe:3b:f1:5b:
                    46:13:ea:3e:c2:12:f2:34:79:25:b4:d6:c2:7b:53:
                    10:a1:22:dd:33:35:ba:4b:8d:bc:1a:53:30:12:cb:
                    71:a5:aa:26:02:4d:03:a9:15:ea:82:62:2b:e3:b8:
                    69:2a:f0:84:b8:94:55:26:b1:24:6f:47:59:87:38:
                    2b:a2:8f:db:84:2d:e4:c7:e9:08:ec:90:42:8e:a1:
                    43:08:ea:6a:e8:d9:84:2f:7f:43:21:40:8c:51:fa:
                    2f:43:33:15:60:08:2d:53:4e:46:df:9a:5f:1b:3c:
                    71:ff:49:f4:1c:fc:e6:a9:68:48:2d:68:28:a0:b8:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BC:88:D9:82:BC:13:C5:7E:C4:97:C4:AE:E0:A0:07:30:76:4A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3362752b-7b60-34b5-8326-20de64ac272d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.209.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ab:6f:95:f3:ab:6d:14:ef:73:ff:b0:06:63:dc:bc:4b:ca:
         02:6d:90:d9:91:90:38:43:1d:db:73:06:72:77:d2:26:04:4a:
         b6:1b:e2:8f:db:9f:d7:1c:a6:32:38:f7:44:c4:31:95:a1:13:
         34:27:6c:ce:3b:15:25:0b:29:52:77:77:c2:cb:b7:13:54:e2:
         6d:a6:5d:8b:0f:34:60:d7:7a:c3:2f:37:54:9d:d9:8c:d3:12:
         0d:6f:5f:ec:7f:f7:83:34:cd:50:2d:9b:a3:e8:8d:d3:47:de:
         d5:72:0e:b9:c5:c3:86:62:14:23:be:8f:fd:7a:ea:88:dc:70:
         f5:71:80:67:62:76:61:ef:7e:6c:e9:7b:84:d5:14:37:a8:8b:
         ac:b1:0e:27:f1:05:85:bd:f0:8c:9e:61:6b:5c:6d:57:b4:a6:
         12:3d:4c:1b:c6:79:61:30:b9:59:69:a0:af:91:89:b1:e1:cf:
         8a:be:22:5d:f7:cf:b1:81:89:56:bc:28:b4:9e:ec:19:1d:5b:
         8b:90:4e:23:4b:2c:7d:8b:90:ee:64:82:56:aa:20:b2:b9:a9:
         a0:a8:0a:0a:f1:e8:33:e9:81:5c:ae:6e:68:32:c0:9c:ca:d8:
         33:62:1a:a9:30:d0:53:24:8b:54:72:ce:8e:c5:70:66:43:e5:
         98:16:b9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:19 2024 by rpki-client on console-ams.rpki-client.org