Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5aa9783f-7297-3708-ae75-e664bd91006f.roa
File:                     5aa9783f-7297-3708-ae75-e664bd91006f.roa (raw, json)
Hash identifier:          dJxZf03FlRKkpM1Wgeh53cyjfqoQ27gzj5cSWgHJBnY=
Subject key identifier:   FD:5A:CE:DB:48:B0:7E:92:5F:23:36:0C:29:5B:FD:38:A9:0E:A2:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285846C67FF45FB1FE0DD547CAC240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5aa9783f-7297-3708-ae75-e664bd91006f.roa
Signing time:             Mon 05 Aug 2024 13:00:39 +0000
ROA not before:           Mon 05 Aug 2024 13:00:39 +0000
ROA not after:            Sun 03 Nov 2024 14:00:39 +0000
asID:                     6167
IP address blocks:        75.250.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c6:7f:f4:5f:b1:fe:0d:d5:47:ca:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  5 13:00:39 2024 GMT
            Not After : Nov  3 14:00:39 2024 GMT
        Subject: CN=821a3122-4118-479f-afad-12dfef0e4524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:43:1e:a2:e8:2a:db:f6:ca:69:10:e0:fb:
                    c4:a3:2f:b6:b8:ea:23:b7:b5:7c:af:4e:7e:17:f0:
                    37:b6:16:77:2e:bc:6f:6b:70:0b:b7:a9:70:19:61:
                    b9:ed:39:32:e2:9a:0c:be:75:f5:b8:06:67:fa:69:
                    20:4f:61:1f:23:ea:19:c7:32:6c:ca:c8:25:1c:5b:
                    02:fa:bb:a8:b0:08:29:ae:42:94:5f:ef:99:85:38:
                    56:f4:90:62:16:1a:f0:29:4e:f9:67:ec:5b:ee:1d:
                    09:9e:ad:66:de:ac:64:84:ef:3e:a9:3a:07:1e:91:
                    7a:01:3f:15:f2:9d:8b:7c:c5:c6:45:5c:52:63:8f:
                    f8:39:49:54:01:5d:c3:d7:87:0b:0b:3a:cb:e9:d0:
                    b6:13:1e:a8:14:2b:4f:41:74:48:bb:57:41:95:9a:
                    37:d8:96:99:42:ac:b4:a1:11:b4:06:e7:41:8d:85:
                    cb:f3:22:1c:e5:65:92:9f:a1:54:6a:53:13:27:96:
                    85:d1:50:9e:8d:92:49:43:b9:7f:f0:07:5e:30:db:
                    a5:cb:67:f0:b0:a5:0c:76:3c:8c:1a:1a:f8:a7:97:
                    0a:f5:6b:60:28:3e:be:fa:93:19:12:1a:9d:69:72:
                    39:73:ac:83:ca:ea:af:bc:c4:48:fd:da:71:28:d9:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5A:CE:DB:48:B0:7E:92:5F:23:36:0C:29:5B:FD:38:A9:0E:A2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5aa9783f-7297-3708-ae75-e664bd91006f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.250.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:33:19:07:c6:3c:47:27:a5:11:07:5c:16:b7:85:93:e6:8a:
         05:10:2a:92:2e:c5:5e:12:8a:5b:8d:ca:60:dc:1a:2d:ba:cd:
         ef:04:9f:47:14:0f:11:01:ce:98:39:0c:d9:8d:df:08:9c:62:
         1f:23:88:32:bb:04:12:4a:9c:68:e0:6d:cd:16:09:26:42:c3:
         f8:c6:cc:a0:5b:eb:fc:8c:b9:df:d9:6e:16:18:d5:75:4d:e7:
         d8:59:23:be:fe:df:c8:7a:94:90:ca:14:d5:92:65:ac:c0:77:
         a9:8b:57:07:93:1e:69:75:ec:5d:ac:66:2b:f0:f7:75:5f:3c:
         5f:89:20:ca:ec:0e:32:53:49:7e:02:90:02:57:24:41:53:ef:
         ce:e3:ab:13:6e:6b:3f:f3:32:8e:07:27:c3:b7:3d:bf:a9:d9:
         74:69:f3:3f:9e:e5:67:fa:2c:d2:64:92:ae:f3:c5:76:26:de:
         b1:19:c9:8d:9f:f9:71:9e:25:4d:3d:8d:d4:a5:14:dc:c5:98:
         d4:59:8f:b9:52:80:2a:36:4d:ec:c2:ed:e5:c5:ce:06:86:c9:
         3c:e9:f3:19:70:1d:d3:e4:cf:8f:8c:02:17:c9:e7:6a:c7:fd:
         2f:7b:eb:08:f5:9f:ab:8a:5e:a5:d6:1a:7f:59:ba:d0:fd:8d:
         77:be:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:48 2024 by rpki-client on console-fra.rpki-client.org