Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3aff6ed6-a48c-3060-8d91-8b0d6fd00063.roa
File:                     3aff6ed6-a48c-3060-8d91-8b0d6fd00063.roa (raw, json)
Hash identifier:          GbbidHCL9jsQdK9YpuHJV7p1yHegkkVwS1Qwb/cuKe0=
Subject key identifier:   E9:24:08:C1:E9:E8:80:0A:EF:EF:3A:32:E8:5B:ED:4A:81:AF:24:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847DAFF6584B8DDDBEF6E2D7700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3aff6ed6-a48c-3060-8d91-8b0d6fd00063.roa
Signing time:             Tue 12 Nov 2024 14:00:40 +0000
ROA not before:           Tue 12 Nov 2024 14:00:40 +0000
ROA not after:            Mon 10 Feb 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        75.241.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:ff:65:84:b8:dd:db:ef:6e:2d:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 12 14:00:40 2024 GMT
            Not After : Feb 10 14:00:40 2025 GMT
        Subject: CN=c228ef1a-8053-4a80-b90b-e0763c5a1361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:06:55:4f:57:2a:b0:ee:fd:71:c4:dd:b2:d0:
                    99:aa:34:7b:4f:a4:53:b3:d2:e7:e7:57:91:8e:97:
                    a0:a2:3c:6d:db:7c:cd:0b:ea:5b:85:42:41:07:24:
                    ac:ed:02:91:fd:a2:64:e0:84:7a:cc:1a:90:a4:c0:
                    8a:fc:cb:90:f8:e1:70:33:f6:18:9c:82:a4:76:81:
                    33:e8:54:73:fd:6e:8f:50:c0:57:63:eb:49:ee:c1:
                    3b:00:2b:7a:07:8e:d4:7c:29:92:86:a8:08:f4:ad:
                    d1:09:f9:f1:68:96:09:0a:17:69:c4:2e:52:ed:bb:
                    80:cb:09:bf:50:a0:98:d3:7b:98:9c:66:20:8f:d1:
                    ac:02:bc:fe:33:94:90:ee:ac:52:5e:c6:b5:29:2b:
                    db:20:e2:e7:46:9b:a7:0d:ef:a4:2b:f8:a8:26:38:
                    36:6c:12:d9:32:81:1f:2b:ae:9b:46:0a:d3:d4:5c:
                    60:4c:00:58:6a:fe:d6:40:cb:39:2d:19:8b:d4:e9:
                    f5:b7:7d:df:ed:19:fa:ce:79:cd:d1:1b:95:d5:f8:
                    1a:9e:d6:cf:10:6d:8d:79:e1:88:9a:5d:d0:51:91:
                    eb:9b:d7:63:c0:4e:cc:5f:6c:6c:cd:db:c4:64:f8:
                    df:01:cd:9d:a9:32:bb:94:56:75:54:b5:7f:cb:c7:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:24:08:C1:E9:E8:80:0A:EF:EF:3A:32:E8:5B:ED:4A:81:AF:24:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3aff6ed6-a48c-3060-8d91-8b0d6fd00063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.241.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:13:68:7b:a8:6f:20:38:7c:81:17:d8:6f:75:ea:7b:f6:83:
         43:ca:23:75:47:5f:60:e5:6a:34:a5:4b:bd:a5:9d:50:42:99:
         d4:45:f2:4d:05:e6:a7:e4:66:fd:52:76:1f:03:f7:7f:25:4e:
         04:2f:83:79:b1:05:e6:32:8c:11:65:2c:e9:54:aa:5e:c7:93:
         58:0d:08:8a:f1:85:b2:21:db:29:d7:78:29:a3:dc:b9:02:3c:
         b6:43:c3:49:78:71:c7:f6:22:4a:f8:2f:37:de:d2:68:ba:5d:
         82:ea:b4:90:49:f4:74:df:96:ab:5c:0a:25:cd:93:20:01:2e:
         f1:da:4e:51:67:c4:59:23:8a:a2:ce:72:11:54:ed:17:46:1e:
         4b:0a:2f:82:21:00:de:98:31:88:00:90:61:59:e3:f0:19:47:
         bf:92:14:9a:e1:a0:24:b7:96:1b:23:01:2e:2a:81:e9:79:6a:
         bb:fa:d6:0c:db:3c:8a:93:fd:21:f8:b7:0e:a1:6d:46:ce:a4:
         18:d4:bc:3b:5b:14:85:49:28:53:3d:a2:4d:18:27:d4:a1:9a:
         e2:51:0c:0a:18:41:dd:cc:97:ca:dc:50:74:73:35:30:b9:e8:
         f3:c4:30:0e:de:7d:b0:19:8e:d7:41:99:86:f4:f3:1d:99:f0:
         fe:fd:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:21 2024 by rpki-client on console-ams.rpki-client.org