Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f30237ea-46de-33a9-bf2c-849ea9647553.roa
File:                     f30237ea-46de-33a9-bf2c-849ea9647553.roa (raw, json)
Hash identifier:          WNOLLZeLBw8B+R8+rvZNSjzuFDrsChREfur9pdznBGY=
Subject key identifier:   36:DE:08:A3:8E:76:42:4E:0A:2B:2C:18:E6:20:6F:B3:96:00:CD:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6C3156BBFF5D9CA92EF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f30237ea-46de-33a9-bf2c-849ea9647553.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.215.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:c3:15:6b:bf:f5:d9:ca:92:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=de2ec41e-4a7e-4450-92f8-fa3afe6c6037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:03:31:c5:34:09:94:f9:73:dc:64:87:c7:4b:
                    1e:86:0e:73:fc:a2:58:14:b1:dc:65:97:5f:e2:fa:
                    88:27:39:e4:17:cf:b1:b6:ad:ed:aa:f7:a1:4d:9b:
                    9d:0e:f3:e6:cc:73:aa:3d:02:d6:b7:73:98:6f:b4:
                    3f:17:92:53:a3:4d:e4:b9:a5:b6:e1:05:86:81:5f:
                    81:97:b7:93:7e:10:d4:f8:99:aa:0e:38:36:ca:69:
                    2e:78:d4:b9:84:8d:2d:aa:60:68:fe:14:77:7c:99:
                    ce:63:98:5e:33:f1:3a:99:4b:69:50:58:36:e9:d0:
                    01:96:77:29:76:b8:c2:8f:1b:67:31:15:d8:f1:c8:
                    51:a5:4d:5e:be:13:3e:5d:e6:97:c4:8d:63:96:69:
                    56:69:6e:2f:c5:ca:54:e9:cc:22:6c:e0:5a:7c:c4:
                    08:5d:6e:6b:b4:d5:9a:ae:50:15:67:b1:eb:65:2f:
                    19:0d:ec:7a:26:34:6e:df:68:40:c1:02:d1:98:54:
                    14:3f:c2:e2:b5:b5:03:2b:c0:62:bf:6b:f3:98:a8:
                    08:b9:fb:14:60:cb:da:d7:0d:0d:0f:8a:41:fe:2a:
                    9c:ac:af:84:00:9e:03:58:e6:53:a6:a0:c4:30:87:
                    93:f8:b0:a6:33:65:4d:24:91:bb:6d:5f:d6:d9:4f:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DE:08:A3:8E:76:42:4E:0A:2B:2C:18:E6:20:6F:B3:96:00:CD:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f30237ea-46de-33a9-bf2c-849ea9647553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.215.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6a:8e:bd:40:28:fe:12:cb:e6:4d:dc:6a:c7:71:d5:8d:a8:
         10:89:6a:30:6c:f0:b2:f6:b5:a2:1d:82:a5:bc:e9:81:ce:90:
         84:f5:49:75:19:68:6a:f6:97:fb:5a:1c:ed:23:ce:3d:dc:4b:
         cd:4e:4f:73:e9:8f:2b:2d:b5:8f:1d:66:db:08:8d:7d:14:c4:
         41:79:12:9a:e2:6d:63:5e:e9:ef:60:7d:de:c2:79:10:ed:8d:
         27:4f:42:8d:24:0a:65:16:71:3f:5d:77:37:a5:aa:23:fa:05:
         54:61:a4:6e:ea:47:c3:38:88:43:d7:ec:72:37:51:e5:75:ee:
         51:c9:8d:b3:9c:f4:f1:da:95:fd:bf:0a:8b:93:5f:61:ee:1f:
         d3:62:a7:a1:83:29:8c:90:51:89:bb:97:f4:ab:ee:59:0a:0a:
         8a:cd:a3:c1:68:38:15:f5:e6:34:87:20:88:d9:f9:7d:1d:90:
         7c:6e:94:a3:49:86:c7:71:3c:d8:62:b2:95:7c:42:28:bc:92:
         2c:86:de:26:7c:7a:c4:33:8d:4a:ad:16:72:ba:d2:9f:0a:b5:
         2b:4e:3f:c3:e7:30:9c:9b:04:fe:80:52:8a:d9:d6:26:4b:75:
         4a:81:0f:6c:c1:3c:7a:92:ba:41:77:cc:ab:24:a8:7e:33:08:
         d1:34:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:01 2024 by rpki-client on console-fra.rpki-client.org