Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d92ae8-a521-3604-b783-f9428c6d39a2.roa
File:                     91d92ae8-a521-3604-b783-f9428c6d39a2.roa (raw, json)
Hash identifier:          LHj+AXl4ibtR9MszTLg3HXmpdXO/YRGy0vZmO1x6Mmo=
Subject key identifier:   87:CA:68:60:E7:A2:CE:8A:BF:C4:7B:73:85:AE:E3:B4:2A:FB:A1:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6C425076C7962D1B2A000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d92ae8-a521-3604-b783-f9428c6d39a2.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.221.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:c4:25:07:6c:79:62:d1:b2:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=d11c20eb-94d6-4602-8d78-bfc9b21eda01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:36:69:c4:51:bd:5b:d4:99:d5:1c:bd:02:
                    92:f1:12:87:81:a2:bc:99:af:88:46:d1:7c:e4:f7:
                    3f:a2:00:e4:c9:84:84:5f:c6:3b:77:f9:d1:e5:b7:
                    b6:64:e0:ac:79:18:cb:e4:5a:d1:2f:aa:ff:c9:04:
                    a9:b0:24:16:30:1a:16:e4:9a:80:a1:98:c3:e9:fa:
                    6d:a7:c8:e2:3a:1b:7e:59:e8:b1:c3:7d:21:be:e0:
                    3a:e6:ed:70:32:c5:51:de:ea:7f:cb:b6:f6:ff:8c:
                    58:83:cd:f2:51:d5:46:16:da:1f:9e:58:e8:65:64:
                    b9:52:ed:a5:fd:56:55:51:26:3b:5c:df:e8:e5:bc:
                    5e:7b:46:80:3c:db:51:14:60:55:74:43:ab:25:eb:
                    38:e5:42:0a:28:f5:ad:0f:98:1c:bd:ae:74:fe:76:
                    89:5b:9c:2c:51:4b:a1:d6:7e:ca:03:e2:46:07:91:
                    7e:7f:56:63:25:a7:74:51:16:41:06:8f:93:a9:3f:
                    a2:d0:c3:a2:dd:9b:4f:de:df:73:98:17:ea:01:15:
                    ed:76:b1:15:fb:0b:bb:5f:f1:a6:6a:23:48:d5:eb:
                    00:18:cc:4d:8b:fe:45:b7:6d:fa:78:fd:c5:e4:2b:
                    6e:39:62:1f:9e:4d:62:a8:fa:b0:45:ae:e8:e2:85:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CA:68:60:E7:A2:CE:8A:BF:C4:7B:73:85:AE:E3:B4:2A:FB:A1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d92ae8-a521-3604-b783-f9428c6d39a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.221.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e8:03:b3:07:3c:d1:9d:43:9e:33:43:42:82:7a:64:43:e3:
         d4:0e:32:82:9c:76:50:12:f3:6a:8e:5c:d1:c1:60:2e:b0:79:
         e0:8f:a8:05:27:db:3e:ad:fa:bf:e6:f3:ae:1d:c4:b9:ac:49:
         77:37:11:da:34:3a:3d:e2:1b:99:95:ca:68:89:11:eb:12:88:
         f8:38:71:40:2e:73:6e:2a:be:51:27:a4:a9:7f:65:49:e3:c7:
         dc:7d:0d:ad:ae:67:d6:e3:b7:74:bc:95:d0:c7:c8:2f:cf:d1:
         53:9d:7a:e5:14:82:bb:1f:b7:d8:42:9b:54:99:49:72:dd:ec:
         9a:34:a4:49:aa:80:25:52:51:16:21:45:6c:7e:7b:13:2e:e7:
         8e:70:e0:f0:a8:f3:bf:c3:9c:e1:31:de:f7:5b:ef:a1:fd:28:
         65:ca:d7:3b:13:9d:67:aa:c9:b4:7b:fa:e2:dd:b6:5d:ee:35:
         1c:e9:bc:a9:af:5f:e7:35:99:47:6b:cb:fa:50:5a:61:87:c2:
         d4:37:68:9b:ed:e3:d6:b9:2c:07:12:f7:43:f0:67:96:92:b3:
         4d:ef:46:3f:7b:64:08:f8:1f:c3:ad:68:84:68:89:57:af:b8:
         e2:d1:da:76:df:39:f7:33:c2:50:2b:58:fc:5b:42:42:0a:63:
         51:b8:ae:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:39 2024 by rpki-client on console-ams.rpki-client.org