Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9411e2-655b-3bf2-b42e-17480edab77f.roa
File:                     bd9411e2-655b-3bf2-b42e-17480edab77f.roa (raw, json)
Hash identifier:          prYu2NZgB9MGfaqLG0DUwnglbn0BmFCq/0m9E7M+iKs=
Subject key identifier:   4B:5A:06:60:BA:7B:E1:7D:1D:FB:4F:35:52:E0:1F:6D:C4:CA:12:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6B5BC8A78D0EDF967CBC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9411e2-655b-3bf2-b42e-17480edab77f.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.228.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:b5:bc:8a:78:d0:ed:f9:67:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=e5a7720b-44ff-4e5c-b840-d9b5d12e1aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:00:f4:a9:92:11:f1:c4:23:f6:8d:a0:b9:
                    f0:d8:bc:59:e3:c3:68:78:c1:48:8a:79:a9:4a:5b:
                    2b:50:f4:40:51:9e:1e:7a:96:3d:70:d4:69:fa:e4:
                    3b:93:92:5f:b0:c3:b5:dd:d1:22:78:4e:37:37:f8:
                    f5:f6:1a:3d:e7:c1:48:e9:bf:2d:40:ee:c2:26:11:
                    80:ed:68:89:11:57:e0:7d:9a:4f:88:79:0d:e8:d1:
                    f9:9e:49:70:60:cc:36:51:1c:df:c4:04:44:40:44:
                    af:d8:a5:8c:25:a3:3e:34:11:62:9b:4a:14:bd:59:
                    6f:e2:21:a6:9b:63:bb:01:0a:8b:eb:c1:0a:4c:67:
                    90:8a:39:4e:22:ac:b2:c2:90:6e:83:5e:91:e5:38:
                    51:73:66:b4:83:b1:18:77:2b:5a:c8:ae:e6:08:11:
                    e3:ec:d8:f2:eb:86:ff:e5:84:2b:d6:10:74:25:ec:
                    c7:9b:b6:2f:77:1e:d0:f0:3e:d3:50:89:89:3e:a3:
                    d0:33:f2:b3:e0:de:17:6c:1a:7a:fa:84:d3:85:4e:
                    14:7b:48:43:e6:af:c7:56:45:b0:d1:df:12:9e:58:
                    c9:aa:39:38:0b:02:1b:16:5a:b9:ec:94:0c:55:32:
                    31:7e:fc:de:a4:8c:b8:3b:fd:75:d4:3f:02:85:35:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5A:06:60:BA:7B:E1:7D:1D:FB:4F:35:52:E0:1F:6D:C4:CA:12:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9411e2-655b-3bf2-b42e-17480edab77f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.228.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b8:0b:28:51:b2:57:43:1a:f5:30:a1:fa:cf:e3:2f:36:46:
         f6:b8:ab:a1:3c:6c:17:e8:b2:1a:4e:66:16:98:05:2a:2b:0d:
         75:88:38:8e:38:01:9f:60:05:b9:5e:81:c1:fe:00:f5:d4:e9:
         6f:d4:8b:ce:81:c9:e0:32:a1:f8:db:1d:b0:eb:e8:d5:cd:e9:
         5a:33:e4:cf:fe:9f:a6:b0:a1:a8:ef:ba:5f:7c:5b:4f:9f:a3:
         02:e9:6a:98:cb:33:55:d3:8c:72:c2:79:59:ad:54:57:43:26:
         24:83:1c:80:d1:3d:e6:a1:25:38:63:6c:4b:82:ab:17:a7:68:
         43:3e:e4:9e:01:65:83:4d:56:05:70:db:8b:b9:02:f9:3d:e2:
         c1:52:5a:70:ec:94:af:cf:89:4e:f8:8b:d6:31:f1:30:ee:0a:
         70:8f:8f:b7:ee:07:8f:54:84:af:b8:14:59:f7:c6:51:20:e9:
         75:e3:7c:53:65:c5:8d:93:70:19:ef:9a:49:a1:6a:25:29:8e:
         e3:43:bd:58:d8:7b:83:21:c4:e7:0f:b1:df:47:cf:bf:21:82:
         90:27:b9:2c:7c:64:01:b2:8d:cc:59:47:87:4c:75:e1:ef:16:
         58:1f:2d:ee:5c:b6:fa:ff:5d:aa:4a:72:dc:14:81:b3:25:dd:
         fc:c3:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:51 2024 by rpki-client on console-fra.rpki-client.org