Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de6a6984-1073-3a85-9fb5-8778dfd87089.roa
File:                     de6a6984-1073-3a85-9fb5-8778dfd87089.roa (raw, json)
Hash identifier:          TOsdz//qP6CAJWwsaMGWflwcIoaQLK1IvpLvnx6ruJY=
Subject key identifier:   12:4A:11:67:8C:D3:B0:8C:E2:4A:35:22:DE:9E:7C:67:C7:37:12:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6B368C7F27551118C7E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de6a6984-1073-3a85-9fb5-8778dfd87089.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.222.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:b3:68:c7:f2:75:51:11:8c:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=7d356ce9-fb1b-433b-95cb-aa48ada6c43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:c7:5f:81:38:91:0b:7a:0b:38:f8:5b:94:
                    1b:64:6a:71:22:d5:43:47:0a:fe:0f:bf:31:5e:e5:
                    14:e8:af:75:c7:99:10:62:52:9f:ae:32:a5:3d:a3:
                    cd:fb:c4:56:04:0f:d7:2f:b6:88:a4:1c:ba:3b:2b:
                    73:b0:00:31:87:80:2d:81:db:dd:e9:23:40:3f:56:
                    35:75:4e:8f:14:38:36:df:35:a8:a4:9d:b3:61:81:
                    79:3d:b2:60:d7:cd:8e:ea:3b:53:0b:35:8a:f2:e2:
                    da:02:12:90:18:2d:67:c7:98:8c:c6:47:19:dc:1a:
                    85:48:e0:77:79:ea:ea:67:ac:1c:05:79:54:42:d0:
                    d9:a8:ab:eb:2a:b8:db:0b:ce:4c:35:a6:f4:73:ab:
                    8d:d7:aa:9f:bf:62:51:7c:bd:e6:d8:d3:52:a1:af:
                    0b:e5:cd:72:70:e3:c8:ea:be:54:27:9a:d6:5f:e5:
                    15:59:ec:8c:03:91:9c:a0:6a:22:10:ac:2c:6c:df:
                    64:90:d5:64:b9:42:6f:09:b6:85:7f:92:35:d3:8a:
                    08:3c:88:70:4c:14:21:80:c3:bb:63:87:fa:55:84:
                    9a:68:be:ce:8a:bc:f4:2f:7b:a8:cf:8b:11:13:23:
                    90:c2:64:5c:eb:ec:d2:2f:ee:c9:67:e0:84:86:fc:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4A:11:67:8C:D3:B0:8C:E2:4A:35:22:DE:9E:7C:67:C7:37:12:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de6a6984-1073-3a85-9fb5-8778dfd87089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.222.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ee:88:8d:e6:8a:ce:76:73:74:2f:2f:0e:6c:bb:f6:76:b8:
         79:e4:61:b4:97:92:96:8d:e2:f7:be:29:0a:9f:7b:44:10:da:
         2c:92:ad:f3:b0:58:20:af:b5:79:93:6f:01:f4:fd:c2:ec:a2:
         fa:ce:19:91:62:e1:c7:23:b1:46:f0:2d:04:da:a4:f3:d3:96:
         bc:c9:a4:af:b5:4f:de:34:85:87:0f:39:78:fe:40:79:f8:b2:
         f2:9d:8d:c7:46:51:8d:18:fb:47:1a:76:de:98:37:ff:7e:b1:
         e4:2f:ee:6b:05:6a:5b:b5:a0:9c:66:73:74:34:a7:ac:df:86:
         4c:58:1f:9e:dc:39:b9:95:0e:78:36:b2:77:84:ec:1a:9e:df:
         bf:aa:93:37:8e:cd:7b:81:8a:c3:02:1c:0c:f3:05:c6:6c:d0:
         81:10:d0:4c:f6:15:38:b0:a3:bd:1a:43:ca:cb:29:7a:b8:f4:
         28:c2:58:2c:15:1f:80:a7:9b:08:2c:ce:c4:1b:68:6f:51:88:
         2d:41:6d:77:01:1c:0d:73:9f:90:f9:e9:be:2f:59:a9:cd:8d:
         d4:a5:89:78:27:23:54:37:5d:61:d7:a1:98:ad:e6:e6:35:65:
         aa:e0:ea:83:a2:02:67:bb:ca:40:03:42:c1:c0:54:77:e2:55:
         1c:30:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:58 2024 by rpki-client on console-fra.rpki-client.org