Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5029ef48-0821-3c20-a655-803906a0196c.roa
File:                     5029ef48-0821-3c20-a655-803906a0196c.roa (raw, json)
Hash identifier:          i9LRo4UoRhP+7Ma9mlIry2g9H2RKqxYNDY4ySn0Kluw=
Subject key identifier:   9B:CF:3B:C5:BA:F5:28:26:38:E9:61:9F:A8:A6:9B:7A:64:6A:32:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6C306C9BC864F199B6500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5029ef48-0821-3c20-a655-803906a0196c.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.215.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:c3:06:c9:bc:86:4f:19:9b:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=239189b8-ec95-4c19-b9f6-dd4a4ee325d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:00:89:37:15:aa:5d:20:e4:57:09:81:37:
                    fc:86:a4:36:b6:97:d6:05:88:7a:5c:90:2e:92:03:
                    94:2d:1a:af:57:0f:42:09:a4:26:1d:19:0e:bf:c2:
                    6f:40:08:a1:c6:fe:3f:d8:a1:de:c9:37:80:4c:a6:
                    df:4c:f6:ef:93:1e:dd:74:66:74:d8:01:ae:3e:03:
                    70:c3:71:4f:f6:b2:fb:10:7d:f0:6d:32:55:52:c1:
                    10:db:ca:90:85:dd:b1:30:d1:dc:87:2a:be:bb:75:
                    71:b0:46:10:ce:71:6a:2f:6c:13:ba:a1:df:a7:a8:
                    5d:df:05:8b:3c:00:fc:84:21:a9:68:35:04:55:78:
                    ca:c0:70:6a:e3:df:51:78:51:58:1e:3b:a9:57:7a:
                    47:ad:ad:cd:a8:ff:a6:6c:b5:6e:03:7e:66:02:a6:
                    83:12:26:31:c8:7b:ee:7c:15:a3:22:17:a8:c1:2f:
                    72:f3:6a:6b:d2:f9:8f:97:4b:8c:54:75:a0:a0:eb:
                    f7:fe:94:85:ee:66:16:fa:04:2e:ac:9a:84:5d:6e:
                    9f:cd:69:15:b7:f9:81:c2:e1:31:6e:d4:ed:d0:c1:
                    5b:33:68:60:55:47:52:0f:94:ce:8a:3b:ad:3d:09:
                    56:95:23:a8:d1:50:5c:40:c1:79:90:66:a2:be:2e:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CF:3B:C5:BA:F5:28:26:38:E9:61:9F:A8:A6:9B:7A:64:6A:32:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5029ef48-0821-3c20-a655-803906a0196c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.215.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:33:40:28:69:15:ce:e2:ba:67:04:b3:33:35:4f:ce:1b:85:
         43:f0:a3:ef:d4:a2:53:80:c0:f6:7b:9e:07:fb:0a:91:03:e6:
         6e:2a:4e:39:8d:d2:61:8a:d5:b0:b4:24:75:39:5b:37:c3:f1:
         bf:50:bd:b8:1c:c6:05:1b:1a:c0:21:ed:b1:2f:87:e1:2e:f3:
         37:df:7e:50:d3:24:1a:73:7a:a8:32:6f:96:12:86:56:08:e5:
         cd:a9:06:6e:57:f2:77:05:13:b6:98:4f:b4:bb:6f:53:7b:0d:
         17:c6:24:68:11:e8:84:e3:8b:cb:84:47:14:2b:e4:b4:47:73:
         16:09:a8:d0:6e:b1:48:e1:23:d2:7c:62:8c:f7:f8:0e:64:32:
         b3:e3:97:9b:e2:d9:8c:d8:b8:fa:5e:7f:fe:bf:e9:92:09:ab:
         b6:12:08:4b:a8:c8:90:cc:9f:78:15:d5:e2:e4:8e:3c:62:3b:
         65:c2:99:e3:e2:58:34:04:11:d8:2b:2c:e3:08:2d:4c:44:d5:
         04:f3:42:88:e7:a8:ad:ea:d9:28:88:9e:ba:94:77:f0:02:a9:
         a9:b1:ec:b2:59:12:f8:45:13:27:07:33:bd:a3:a0:64:c6:ec:
         77:ea:a7:4a:9d:0a:49:4a:a3:19:41:21:f6:60:c8:ef:a3:70:
         05:db:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:30 2024 by rpki-client on console-fra.rpki-client.org