Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f639155a-407f-3ac9-856d-a41ee2dd2c1a.roa
File:                     f639155a-407f-3ac9-856d-a41ee2dd2c1a.roa (raw, json)
Hash identifier:          DKdwqKEIByzqhu6r++VBGp8xB5di9hpJVN99hVUjhfc=
Subject key identifier:   CA:53:B8:18:08:81:CF:2B:A1:96:9A:E3:47:17:EA:FF:8F:83:DD:9B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6C8B0E9FD77AFA7BDC980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f639155a-407f-3ac9-856d-a41ee2dd2c1a.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.244.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:c8:b0:e9:fd:77:af:a7:bd:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=e80b5a5f-b78b-4536-b8c1-199c31bc3647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:a1:11:23:05:c0:a0:36:23:0a:29:ca:83:
                    93:c0:c8:02:5e:d7:c3:d0:91:41:4c:f7:8d:87:36:
                    19:78:b8:a7:0d:b5:a5:3a:44:ce:d3:36:f1:3d:d8:
                    a4:73:09:b0:0b:26:6f:47:a3:c2:78:9b:c8:2a:3a:
                    b5:e2:f6:5a:53:7b:03:cc:a6:99:16:8c:cf:ba:99:
                    ef:4c:59:1c:43:5c:bd:93:b3:1d:15:d9:d3:e1:a3:
                    5d:b0:55:ca:a9:71:e1:e3:b9:d1:93:4c:61:78:0b:
                    7c:90:2d:b0:95:22:81:6c:a4:67:e2:cd:4d:8d:1c:
                    0a:05:62:82:69:50:d9:70:22:78:c9:02:44:57:2e:
                    1b:9d:ff:8e:96:1d:38:b7:28:5a:91:19:ef:43:d4:
                    87:c8:27:65:f5:27:6d:de:06:36:d7:64:71:55:22:
                    87:c8:8f:f2:34:97:e2:06:67:96:34:f7:f6:4e:a9:
                    5d:15:8a:ff:b7:48:26:8f:6d:d6:e3:1f:43:68:9d:
                    0b:10:ac:c5:94:06:97:fa:a9:4c:e1:36:d5:2e:e4:
                    ed:98:03:d0:38:a4:7a:29:42:88:ca:ad:ca:cc:9a:
                    44:97:3c:b9:42:fb:6e:6a:ab:f8:a0:8b:53:47:df:
                    02:9a:8e:da:5a:b5:c4:1d:d2:55:e1:cb:a9:5a:2f:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:53:B8:18:08:81:CF:2B:A1:96:9A:E3:47:17:EA:FF:8F:83:DD:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f639155a-407f-3ac9-856d-a41ee2dd2c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.244.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:09:f6:6b:b6:25:c4:f1:9b:aa:ce:7f:ad:86:de:1e:13:c3:
         7c:67:27:03:32:20:20:da:b6:21:41:13:3f:06:30:1e:c9:47:
         a3:7d:62:52:6b:71:aa:91:63:64:da:9d:c1:64:77:d3:3a:af:
         61:26:fd:be:62:ad:9b:0a:89:7d:c2:b8:53:01:19:1c:a9:8d:
         93:4f:9c:9b:af:2d:cb:3d:b8:94:81:7f:7f:74:f9:ec:7b:bc:
         1e:c8:c1:fe:f7:46:97:2b:85:02:c9:f1:6c:94:f7:f4:0f:4d:
         99:11:ee:ee:bf:8c:0b:5b:b2:30:be:1f:ec:4c:65:85:25:42:
         f6:ee:ed:70:95:9f:f7:e9:9c:bb:bf:8f:46:8e:ef:f9:7d:4f:
         04:ec:d8:5b:ee:e8:af:38:42:35:33:9e:31:28:c5:01:b4:8f:
         23:ea:c7:ed:6c:dd:f4:b4:da:c0:bb:b7:3b:32:79:fd:fb:5b:
         47:40:47:f8:67:c1:e4:46:9d:d0:a0:c4:6d:10:4f:83:3b:76:
         7c:7e:01:d1:27:03:53:93:f3:e6:d9:41:a7:19:b2:c4:f6:67:
         36:14:e8:97:46:11:60:6f:67:7c:17:2e:b3:1d:50:c3:0c:18:
         72:b7:00:d4:38:c9:a1:d4:49:71:c2:bc:a5:e2:e4:f4:9e:be:
         2e:d7:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:02 2024 by rpki-client on console-fra.rpki-client.org