Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/444a6867-067f-3f6e-892a-31aa8438bee1.roa
File:                     444a6867-067f-3f6e-892a-31aa8438bee1.roa (raw, json)
Hash identifier:          KVTjxCJCZuRFaPkPvulU6jFpF7IC68MxRr2KnzGAsTs=
Subject key identifier:   4C:44:A4:15:F4:E0:FB:C0:92:26:15:20:9D:62:14:1B:82:5E:CA:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6BC5C3762541C14F0AB48
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/444a6867-067f-3f6e-892a-31aa8438bee1.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.195.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:bc:5c:37:62:54:1c:14:f0:ab:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=3e2990ee-ea0c-4ac7-8759-a9a2bdc2082b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:63:49:e4:69:39:ce:89:aa:74:b4:96:c0:
                    a7:8c:39:aa:8d:77:a1:10:89:76:74:b2:fb:98:9e:
                    3e:f5:05:ee:5a:f2:20:0c:e5:7b:d0:41:75:a6:68:
                    c6:c5:d7:61:65:c3:84:a8:15:6a:a5:8e:99:e2:df:
                    ca:cd:94:b0:ee:07:60:f4:a2:76:74:cc:f1:c5:18:
                    5f:39:31:a8:5e:ec:a3:fa:d4:d8:8b:21:54:20:42:
                    2b:86:b8:51:cb:80:76:b3:6d:2b:a8:8b:b0:8f:f8:
                    18:19:1b:3f:cc:19:a9:4a:2d:30:37:58:0c:02:4c:
                    fe:56:f2:d8:01:e9:e6:71:81:33:f2:e1:c8:73:d8:
                    d3:32:ee:08:02:b9:8d:a0:89:a1:d3:39:be:4a:46:
                    72:86:46:25:81:31:f3:9d:a5:38:b9:84:4a:0e:96:
                    94:95:a4:f8:e7:04:31:9f:f0:54:9c:06:12:12:5f:
                    e1:f6:ea:98:5b:6c:aa:0d:0c:35:00:78:c7:07:68:
                    bc:75:ed:81:8a:55:31:f4:1f:93:b5:b9:6a:c0:0e:
                    0b:b4:e3:af:92:02:97:79:b2:56:30:13:98:b3:e8:
                    e8:44:e9:03:f0:1b:b8:50:26:55:d5:47:fc:17:31:
                    38:0c:77:f4:f3:f5:1d:82:df:87:4b:76:96:54:b9:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:44:A4:15:F4:E0:FB:C0:92:26:15:20:9D:62:14:1B:82:5E:CA:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/444a6867-067f-3f6e-892a-31aa8438bee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.195.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2b:41:89:9b:5e:db:b1:a9:70:0d:86:0b:e2:ee:63:fc:93:
         83:44:34:d9:97:8a:e5:68:e7:50:d1:cd:17:60:b5:27:cf:7d:
         8c:af:1b:2d:3a:e5:b3:a1:f5:43:38:be:e7:ae:7e:f9:c4:fd:
         2e:19:10:09:77:9d:f5:1b:0f:c2:f1:36:27:6d:cb:44:55:cc:
         75:e8:b4:ca:70:3d:47:6d:5d:e2:ba:ee:c3:9f:61:c0:84:d3:
         f9:41:d2:9f:d3:44:66:11:9f:fc:b9:a5:3d:c1:9c:9e:e3:d6:
         91:64:1d:85:11:79:38:e8:c7:cf:d1:c3:54:b4:1c:25:6b:ef:
         b8:41:51:e4:66:fc:80:f4:77:5f:00:24:d4:10:50:a1:e8:a1:
         e9:d3:9d:7d:60:c1:bd:db:20:b8:80:af:a6:c3:c9:f0:72:fc:
         c7:49:d5:c2:42:39:22:79:19:97:38:df:a3:dc:c5:27:bc:4d:
         f3:d6:cd:77:23:fe:58:bf:4b:22:92:48:d5:49:d1:e9:4f:d3:
         8b:44:8a:ac:9c:29:2e:b6:7a:26:60:1d:2a:30:29:97:46:f4:
         1b:cb:39:17:95:f2:97:19:a0:32:1e:69:ba:66:94:43:15:d1:
         e7:6a:2e:eb:46:48:7c:ce:99:91:b5:f7:3f:66:fe:f1:66:b2:
         58:25:3a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:23 2024 by rpki-client on console-ams.rpki-client.org