Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c487d9af-3e5f-39e3-9cbd-cf953e4fe733.roa
File:                     c487d9af-3e5f-39e3-9cbd-cf953e4fe733.roa (raw, json)
Hash identifier:          9yAMM7Dc9jCTXNgx1j6TGkdxUwOTf1P4CL1W/kgtWO0=
Subject key identifier:   4B:A5:D9:60:75:A4:72:89:41:93:AB:55:B7:EC:34:7C:48:55:B5:A5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6C3240CB476CB5CF3F640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c487d9af-3e5f-39e3-9cbd-cf953e4fe733.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.215.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:c3:24:0c:b4:76:cb:5c:f3:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=44aa5da7-d4f3-45f5-a192-12128711a049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:a5:54:93:39:d5:31:d0:8a:2c:c0:94:99:
                    e3:9b:d3:62:9d:5a:56:96:9c:e3:5d:90:b3:e2:e7:
                    a2:2d:5e:13:06:ae:76:9f:c0:fd:8d:76:3e:15:9e:
                    e1:2c:c9:2c:e8:0e:d9:e6:ec:06:4a:20:dd:f0:ef:
                    2a:4d:39:40:5c:5f:fe:d9:bb:35:f0:1f:15:00:54:
                    c4:f9:15:9d:b8:77:60:f2:c3:74:18:fa:ac:a5:48:
                    5d:93:7d:01:dc:6d:18:9a:1f:3f:67:a7:fd:65:33:
                    93:c0:35:f8:28:ae:bc:bb:4b:1b:c0:82:dd:7d:6a:
                    f5:84:3c:e7:ce:94:f5:b5:c9:0f:00:7a:fc:d2:22:
                    13:35:ce:8f:24:0b:32:6c:ff:8e:1b:95:19:29:c6:
                    57:f6:bc:d3:4c:df:b7:cb:25:a9:93:8b:ab:f0:0c:
                    77:04:db:a2:d3:de:3c:00:37:ed:c1:0e:0a:32:22:
                    39:0b:f1:6a:90:d7:b8:49:7d:6c:30:c2:ac:06:e8:
                    ac:77:b7:ee:9f:f1:c9:74:6d:6b:ae:5c:29:a5:db:
                    55:a1:b9:e7:73:07:b4:2a:b6:e1:57:22:e2:47:78:
                    06:28:9f:49:56:de:a7:1f:d0:f2:09:23:77:28:97:
                    03:76:2f:3f:da:68:80:de:03:88:2c:f4:0d:8b:d9:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A5:D9:60:75:A4:72:89:41:93:AB:55:B7:EC:34:7C:48:55:B5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c487d9af-3e5f-39e3-9cbd-cf953e4fe733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.215.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f5:48:ab:5b:67:a7:e9:6c:50:e4:5d:d3:99:89:77:a7:6f:
         b1:81:25:b1:6c:1c:db:4f:35:7b:18:5c:bb:29:6b:81:7b:1d:
         4f:df:37:58:fe:40:94:9e:3a:ae:d0:e6:d7:41:3c:b0:bf:69:
         91:bc:11:ab:12:58:bf:1f:2f:07:12:75:a3:10:8b:77:56:97:
         28:d6:9e:a3:19:4b:fc:c1:7b:90:3d:c6:9c:0c:9a:f3:fd:79:
         32:80:47:69:10:a6:d0:13:1c:20:ef:bc:07:28:45:67:cc:04:
         4e:18:e5:c3:73:90:de:22:93:0f:b4:c5:e6:5d:35:86:82:1b:
         2f:fa:ca:7b:a4:b4:81:11:9a:30:8f:46:3e:dd:de:e3:e1:8f:
         21:07:08:6e:46:7e:5e:71:70:f9:d8:bb:ec:d2:7c:00:1f:3c:
         69:30:35:74:a6:67:ad:6c:b5:ce:c0:93:f0:93:02:6a:bd:10:
         3b:fb:84:fa:7d:5b:df:61:e6:2a:29:20:1e:0d:e0:29:c0:34:
         0b:58:bf:3d:9b:ed:87:40:83:be:80:19:c1:d6:be:94:32:2d:
         36:c1:86:7c:a5:cd:c6:b2:26:3b:1c:1d:ae:09:1d:af:4e:16:
         34:bb:ac:61:8d:e3:26:39:15:73:63:ab:08:fe:67:7a:bb:3a:
         c4:4c:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:52 2024 by rpki-client on console-fra.rpki-client.org