Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c27e712-eeb0-3003-9176-70a22e4a531c.roa
File:                     5c27e712-eeb0-3003-9176-70a22e4a531c.roa (raw, json)
Hash identifier:          1zfCCTHfD1mueky/DCDNDUtCLPvUo3/IvOMQOAZqxjk=
Subject key identifier:   72:D1:4C:92:3E:8D:B0:25:16:F0:EF:13:C6:27:42:32:AF:65:2C:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6C1F61C8737DEB0AD6A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c27e712-eeb0-3003-9176-70a22e4a531c.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.212.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:c1:f6:1c:87:37:de:b0:ad:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=bf9745db-f30f-47d9-a13d-39583eb4a0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:f9:5e:c8:97:cf:0e:70:49:de:77:83:ee:
                    0d:1d:08:0b:64:e4:18:da:3b:80:b9:d0:7d:fd:f8:
                    f9:ad:38:25:60:6d:66:2f:f4:89:0f:e5:4c:02:ab:
                    af:4b:68:b7:6e:74:62:02:70:13:28:21:f9:d6:80:
                    dd:6c:8c:98:d5:e6:18:89:f7:ff:27:0f:bd:94:e4:
                    2f:e0:6f:5a:70:90:b6:1b:0c:c4:a9:91:19:31:ce:
                    cd:fd:22:3e:fc:42:dc:0a:f7:51:9c:ab:76:7a:d3:
                    ab:f8:f6:1f:e1:24:b9:c9:e7:18:ad:82:6c:17:ac:
                    6a:16:e4:6c:73:a8:2b:95:21:83:66:fe:69:20:dd:
                    d1:c9:d0:4e:f4:64:90:c6:08:07:34:89:86:c2:26:
                    55:98:14:0c:21:61:f9:ff:11:f9:e7:14:e2:6e:09:
                    92:0f:29:5e:e7:ae:8d:05:ab:8b:f3:92:91:2d:3e:
                    7a:e6:55:26:6f:38:e1:31:01:d5:8b:c5:eb:71:93:
                    2c:38:48:66:63:4e:20:81:18:cf:ea:42:80:cc:d6:
                    90:ac:71:ef:b8:a3:29:7e:43:17:f9:98:7c:2c:ce:
                    d2:df:5e:e6:10:40:82:52:ee:ab:c2:18:6f:fc:9c:
                    5d:49:b4:9f:e2:23:eb:8c:8a:68:76:58:7a:f9:28:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D1:4C:92:3E:8D:B0:25:16:F0:EF:13:C6:27:42:32:AF:65:2C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c27e712-eeb0-3003-9176-70a22e4a531c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.212.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ff:a9:39:72:40:21:2a:79:94:ee:1e:c9:86:7f:b1:65:b0:
         97:a2:44:cb:c0:1d:78:62:54:8b:1c:b2:34:e3:2c:88:fa:9d:
         7e:19:e5:15:91:03:58:35:dc:16:ea:fe:29:19:07:0e:05:da:
         51:07:6e:f3:63:bd:b3:5f:50:96:67:1a:92:36:d7:64:d3:4a:
         21:07:90:ef:c0:b9:0f:42:3e:6c:38:f2:da:b2:fb:00:59:f7:
         8f:1e:98:0e:02:11:ef:8a:c8:bd:f4:fc:58:6d:96:ba:62:3d:
         2f:da:48:30:8d:2d:48:90:5f:67:2e:0f:53:bf:88:3a:0d:c1:
         b8:2e:ee:31:55:07:37:6a:15:d6:e0:12:36:ef:80:2a:ad:fb:
         ed:19:a1:ef:5e:be:c1:81:f8:da:07:12:24:f4:8a:1b:fa:18:
         5a:65:3a:f5:5a:c8:c8:df:3b:2c:a3:5b:51:51:f8:49:7e:e7:
         d3:38:d2:db:85:d9:99:38:50:cf:9b:5d:89:7f:bc:e3:37:46:
         59:80:b3:69:16:aa:91:17:0f:ec:d6:94:1a:a8:e1:b3:b2:e5:
         3a:e4:43:b5:09:a4:18:da:00:6f:50:50:ec:e3:d5:15:aa:ce:
         08:08:4e:f9:af:33:fe:e8:d9:57:37:d0:37:69:87:0e:d0:01:
         52:e5:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:28 2024 by rpki-client on console-ams.rpki-client.org