Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc3f2478-8d9e-365b-b849-6cefc7b82c5b.roa
File:                     bc3f2478-8d9e-365b-b849-6cefc7b82c5b.roa (raw, json)
Hash identifier:          mMNCspkq/qdqNvbm2eqDQXTcyekJhSzdY7K5EmsyRjQ=
Subject key identifier:   10:9E:85:42:A3:9B:E3:38:11:2C:FF:97:10:0A:12:2A:FF:78:C1:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6C418033CED78C847AC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc3f2478-8d9e-365b-b849-6cefc7b82c5b.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.220.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:c4:18:03:3c:ed:78:c8:47:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=1ba5b2a3-806d-435b-9bc6-f96e3c9b0dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:d9:eb:d6:d1:a1:14:2b:48:f1:b1:82:77:
                    3c:e1:c0:5c:2e:06:43:a1:f8:3c:e9:8c:83:ca:ed:
                    d1:a5:20:90:0a:59:aa:97:98:1d:eb:30:30:ad:39:
                    43:ba:39:27:f1:9c:26:f9:4d:36:24:9e:b0:17:82:
                    fb:d4:93:5e:9b:d1:1d:81:0c:78:3c:4a:14:f5:6d:
                    11:40:dc:f8:1a:8b:45:b5:86:93:32:b0:d2:70:7f:
                    ca:3a:77:71:2f:71:ec:e9:f4:32:e6:44:df:2c:07:
                    d9:e3:49:a9:cf:ce:96:49:1a:e5:eb:1e:01:cd:04:
                    4e:ab:fb:57:b6:e4:65:71:f6:17:59:86:81:81:0d:
                    b5:0b:ee:8e:8d:27:04:3d:e5:7b:8f:64:b2:67:2a:
                    10:57:4d:e1:cd:63:bd:70:64:e0:2e:b4:12:20:d9:
                    d1:10:3d:6d:b2:5e:da:2a:b3:bd:c2:d8:14:50:29:
                    dd:90:40:67:91:84:11:3a:0b:5c:ee:eb:4d:90:d2:
                    b8:ab:f7:24:6c:95:2e:32:b3:62:ea:55:66:06:0f:
                    14:f2:ee:ef:0f:33:b9:6d:a8:ec:11:b5:0a:62:ab:
                    68:29:a7:3b:26:f3:f7:66:a9:61:40:e5:b2:32:5d:
                    ec:41:92:26:dc:80:f6:95:4f:0c:ff:8a:a0:13:bd:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9E:85:42:A3:9B:E3:38:11:2C:FF:97:10:0A:12:2A:FF:78:C1:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc3f2478-8d9e-365b-b849-6cefc7b82c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:e3:07:10:f2:3d:27:40:9d:2b:2e:49:6e:4c:54:3a:1b:aa:
         be:75:d5:c4:e7:84:8c:d0:18:44:6e:dd:82:2a:ba:9d:c5:bc:
         f1:c3:bf:9f:94:78:e8:04:02:d1:cd:b3:97:a8:f7:55:46:db:
         2f:4b:3d:e9:ea:15:c8:b7:9d:7b:a9:69:b8:a1:b2:fb:95:08:
         88:29:c6:eb:64:b8:84:5d:b2:16:6e:df:60:40:ae:fa:6a:52:
         cc:92:95:0e:a1:cc:41:49:36:0c:84:66:85:77:19:24:6a:fd:
         24:0e:40:43:07:f4:7a:8e:d7:a5:b1:17:1c:26:22:8e:02:8d:
         55:cd:fd:f0:64:c0:71:9a:19:c3:ac:30:a5:74:f8:16:08:a8:
         4d:1e:56:53:61:14:9b:1e:9f:a7:a9:17:5f:35:23:03:7b:73:
         b3:5a:3e:0d:9c:25:83:71:ad:3e:fc:38:f2:dc:4a:41:0c:6a:
         e8:c1:7a:e0:21:b3:65:01:a2:5c:a0:f5:77:83:63:7b:82:77:
         21:b6:54:71:09:d9:24:f6:ee:3b:46:ca:90:62:e4:f5:48:14:
         7a:4f:1c:7e:9d:12:bc:93:03:e2:11:6c:b8:de:55:c0:04:cb:
         cc:af:3d:af:d7:82:5c:89:c8:2c:8c:f5:0a:4a:cc:96:f0:48:
         75:ba:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:46 2024 by rpki-client on console-ams.rpki-client.org