Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b06d194a-1d53-37ec-9e84-bb6ae3f51d08.roa
File:                     b06d194a-1d53-37ec-9e84-bb6ae3f51d08.roa (raw, json)
Hash identifier:          E2J7+VDort8hA8uzOtw6wA9IR2PqTcIxk0Y/FXhgh4s=
Subject key identifier:   8F:89:DD:D6:84:C3:8C:B3:66:F0:4D:C6:E7:FC:FB:09:2C:A4:20:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6B41B1EF808FC1AC897C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b06d194a-1d53-37ec-9e84-bb6ae3f51d08.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.224.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:b4:1b:1e:f8:08:fc:1a:c8:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=fb5b0445-236e-47c5-acb1-18aa3858a35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cf:b3:cd:27:3c:93:f8:66:ad:85:cd:6d:e9:
                    d8:0c:0c:4a:7a:11:19:c0:28:ee:61:8f:f1:8f:6e:
                    6a:e7:b7:3e:f6:7d:45:db:0e:4e:72:35:78:be:8b:
                    c6:f1:16:d9:d5:ae:f2:13:a6:71:34:df:15:a8:3f:
                    c1:c2:d5:ac:ae:32:a5:bd:30:f4:b3:cc:c2:97:f0:
                    3c:2e:63:5b:c5:07:9c:a8:6c:5a:7f:9b:6f:cf:c2:
                    9a:f8:27:38:ba:ed:ae:e2:0d:4a:dc:7a:b8:70:c4:
                    44:8d:5a:66:28:f0:95:6f:95:47:22:5e:5e:98:d4:
                    bf:8f:e7:a7:d5:38:1b:ad:06:13:a5:90:99:32:dc:
                    ab:b5:8f:5c:b5:11:79:9e:d1:43:7d:59:7e:49:ca:
                    a6:91:49:12:a8:a0:3d:b8:ce:49:32:88:fd:7c:0e:
                    a7:84:a8:e7:e6:a3:58:8f:be:03:0f:29:11:1f:4e:
                    48:9b:1b:46:bc:94:20:71:7f:4d:6f:56:2a:61:1d:
                    52:9a:35:7a:6c:bb:c3:25:dc:e2:a3:2f:79:d9:36:
                    39:e4:ae:38:a6:ed:5b:0f:00:75:e1:89:62:91:54:
                    25:a9:00:39:53:5c:d9:ca:a7:06:39:ae:78:6d:fc:
                    62:1f:8a:26:a7:02:17:02:89:07:dc:bc:4c:67:62:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:89:DD:D6:84:C3:8C:B3:66:F0:4D:C6:E7:FC:FB:09:2C:A4:20:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b06d194a-1d53-37ec-9e84-bb6ae3f51d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.224.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:76:0a:8f:cf:1f:da:ef:6e:8b:4a:60:31:4f:f2:6a:74:50:
         cd:23:75:f6:0f:34:bc:66:07:d2:a7:f4:07:91:c4:07:f3:f1:
         ee:d8:b6:95:7b:47:9c:3e:58:bc:93:08:83:6c:31:9c:0b:7d:
         51:d1:80:68:40:97:ad:16:60:90:3c:d8:35:14:7c:32:3b:72:
         7b:87:7d:57:6a:df:12:ca:70:38:36:34:fe:a5:83:00:62:79:
         95:ea:78:ae:ee:e2:60:ac:0a:e8:08:6f:40:d4:70:85:cb:8a:
         bf:a2:91:87:b7:a1:ab:b1:85:f0:e8:69:83:0a:dd:bf:af:41:
         31:a9:6f:f0:a4:00:14:fc:e1:35:d7:a4:06:f3:21:18:03:79:
         16:4f:1b:e7:d5:08:ee:f9:19:6e:74:a2:8e:2f:e9:28:89:74:
         27:b1:da:55:58:cf:ac:e0:5a:af:d1:86:53:51:d9:29:14:56:
         83:4a:a1:b1:16:05:c6:b8:3a:30:4f:cb:4d:f3:02:ce:db:03:
         78:88:f6:ca:cb:08:c9:ff:ec:38:a0:ec:8c:13:d7:d4:e6:66:
         51:33:02:d7:88:0c:53:d7:e5:8f:7b:ef:e5:4a:f2:ff:0d:16:
         f2:62:14:78:e9:85:4a:3a:68:4e:b8:e0:81:b9:e2:c0:71:68:
         39:7b:0d:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1rQbHvgI/BrIl8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
ZmI1YjA0NDUtMjM2ZS00N2M1LWFjYjEtMThhYTM4NThhMzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc+zzSc8k/hmrYXNbenYDAxKehEZwCjuYY/x
j25q57c+9n1F2w5OcjV4vovG8RbZ1a7yE6ZxNN8VqD/BwtWsrjKlvTD0s8zCl/A8
LmNbxQecqGxaf5tvz8Ka+Cc4uu2u4g1K3Hq4cMREjVpmKPCVb5VHIl5emNS/j+en
1TgbrQYTpZCZMtyrtY9ctRF5ntFDfVl+ScqmkUkSqKA9uM5JMoj9fA6nhKjn5qNY
j74DDykRH05ImxtGvJQgcX9Nb1YqYR1SmjV6bLvDJdzioy952TY55K44pu1bDwB1
4YlikVQlqQA5U1zZyqcGOa54bfxiH4ompwIXAokH3LxMZ2IghQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+J3daEw4yzZvBNxuf8+wkspCCJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjA2ZDE5NGEtMWQ1My0z
N2VjLTllODQtYmI2YWUzZjUxZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS+CYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJ2Co/PH9rvbotKYDFP8mp0UM0jdfYPNLxmB9Kn9AeRxAfz8e7YtpV7
R5w+WLyTCINsMZwLfVHRgGhAl60WYJA82DUUfDI7cnuHfVdq3xLKcDg2NP6lgwBi
eZXqeK7u4mCsCugIb0DUcIXLir+ikYe3oauxhfDoaYMK3b+vQTGpb/CkABT84TXX
pAbzIRgDeRZPG+fVCO75GW50oo4v6SiJdCex2lVYz6zgWq/RhlNR2SkUVoNKobEW
Bca4OjBPy03zAs7bA3iI9srLCMn/7Dig7IwT19TmZlEzAteIDFPX5Y977+VK8v8N
FvJiFHjphUo6aE644IG54sBxaDl7DTg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:48 2024 by rpki-client on console-fra.rpki-client.org