Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fee7c12-55c6-3596-be54-4e416732a71a.roa
File:                     3fee7c12-55c6-3596-be54-4e416732a71a.roa (raw, json)
Hash identifier:          vyndB3xHiPvWdUXnbpsH9iQJ+XQH0aNTxJUzkESm7dY=
Subject key identifier:   21:42:68:3D:C1:0A:6C:C1:27:85:3F:25:B7:88:33:2D:70:03:E6:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6C2982D42CE3AB6406A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fee7c12-55c6-3596-be54-4e416732a71a.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.213.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:c2:98:2d:42:ce:3a:b6:40:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=c39fd72e-e176-4ac1-8892-3ec47030b5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:f1:b2:7d:d7:45:7e:5f:49:fd:c3:27:43:
                    75:d4:9a:fd:28:72:b5:d8:0d:49:24:07:5c:69:cc:
                    0c:d9:2f:07:66:8c:56:a2:e6:7c:8d:3d:57:e0:f2:
                    12:2b:d3:44:3a:b0:36:27:93:de:3b:cc:35:4a:18:
                    03:e1:7a:33:aa:df:ac:9b:cc:a2:2b:05:96:6b:7d:
                    be:5b:84:3b:05:11:0d:d7:40:8a:85:37:fd:bd:a5:
                    a4:eb:df:af:7f:4d:58:91:cd:39:1c:b4:e7:93:a9:
                    d6:b9:d2:e6:78:af:df:e3:73:8c:c7:98:3e:12:d1:
                    3a:ef:d4:6f:c8:f5:0f:f8:8e:c2:67:48:d2:24:a1:
                    09:c3:d0:af:e0:38:db:71:4a:dc:9a:aa:d8:18:05:
                    00:41:a4:03:ec:d9:60:9e:14:ae:9e:40:f8:16:04:
                    06:3f:bc:a7:a6:22:d4:fa:06:77:89:d5:cc:c4:19:
                    01:17:10:37:8b:56:fb:b3:39:13:68:4a:26:55:aa:
                    c2:40:71:a4:ce:2a:1d:3e:14:03:a3:d5:0d:aa:40:
                    97:e3:8a:f1:8a:a2:21:e0:aa:49:d8:94:d4:7c:5d:
                    a4:94:d4:cb:2f:04:fc:59:81:a6:f3:7f:6b:e8:8b:
                    5f:fb:46:4d:d4:fe:cb:b0:6c:0c:63:d3:b9:5f:26:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:42:68:3D:C1:0A:6C:C1:27:85:3F:25:B7:88:33:2D:70:03:E6:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fee7c12-55c6-3596-be54-4e416732a71a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.213.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:45:ee:80:ad:53:a8:4e:a7:cd:cc:cb:66:9f:1e:93:9f:d3:
         4e:04:d2:21:e7:52:90:9c:e7:92:3f:a3:cd:a5:49:46:ec:f4:
         5b:48:4f:11:8c:85:f1:93:42:2e:a1:29:5e:af:ea:c6:35:be:
         30:80:1a:4c:bd:2a:77:87:f5:d8:7f:a5:59:3c:73:e8:12:48:
         e8:e2:00:c7:a6:c5:45:3a:3f:30:8f:c9:cf:33:e1:33:e4:1e:
         c2:7c:22:76:bf:68:e5:ac:91:7b:be:dc:63:a0:1e:a0:01:59:
         a8:0a:8a:93:17:7c:2d:5a:24:a9:20:fe:56:10:58:88:32:ef:
         d5:f4:e0:68:b7:7d:fc:f3:d4:51:d5:bb:07:23:5b:06:32:1b:
         29:ae:6d:6b:e7:e2:4a:4d:4b:30:9e:20:11:6f:c5:ae:b8:21:
         0f:74:aa:c8:58:4e:75:11:f7:79:0e:21:94:60:ef:75:22:0a:
         b7:6e:d1:01:28:55:e9:1e:38:ca:cb:ba:91:31:0b:8d:80:d0:
         12:a0:ed:77:32:ac:dc:79:6c:a3:28:0c:6a:1a:28:14:f3:f7:
         22:35:c9:02:dc:a8:5c:00:eb:59:62:9c:0c:ed:65:a1:bf:b3:
         ae:ba:ad:f0:25:1a:1a:89:d9:56:4c:f0:aa:95:12:7a:e2:ff:
         7e:f0:8d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:22 2024 by rpki-client on console-ams.rpki-client.org