Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4cba7ece-c4a0-3541-859c-814ae47d389d.roa
File:                     4cba7ece-c4a0-3541-859c-814ae47d389d.roa (raw, json)
Hash identifier:          D+i2q74te8qGX8v428tdsXQ5bPAOEta+vHKaqTup1U0=
Subject key identifier:   E6:A3:11:4C:37:C1:FB:C8:30:47:99:45:C4:E4:E1:22:51:AB:86:50
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0FF4E3FA6820B37E6D270
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4cba7ece-c4a0-3541-859c-814ae47d389d.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        75.128.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:ff:4e:3f:a6:82:0b:37:e6:d2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=ba1d99d7-38c6-48bc-9c5b-7589d4bfff8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:d3:43:d3:38:61:c0:16:84:4d:4c:3e:5f:
                    9d:2c:de:6f:72:8f:be:0b:96:03:8f:ab:31:dc:b0:
                    63:2a:47:2e:01:93:cf:30:5c:f2:20:46:6d:3b:30:
                    ac:ce:ef:59:e7:68:d9:47:2a:29:8e:53:26:21:04:
                    ed:90:ef:aa:b4:52:b7:6b:c9:35:e2:4c:51:4f:1a:
                    a0:6f:42:d4:10:95:12:44:d6:0c:e5:a5:11:91:18:
                    2a:4d:f4:b4:6b:b4:23:6a:20:a0:6d:f7:34:68:ab:
                    a0:09:6a:b4:11:fd:73:cd:cf:62:3d:44:83:d2:14:
                    ea:46:f8:c4:0f:35:bd:81:3d:ad:5d:c9:e9:40:4f:
                    bc:c3:bf:f2:12:dd:8a:f3:52:d0:2c:c8:fd:45:21:
                    a1:36:b4:0d:93:74:a3:8f:0c:51:ae:64:71:7f:c6:
                    ef:de:e2:09:64:74:fa:86:36:9e:fe:2d:b6:7c:a8:
                    c6:81:f3:07:15:81:09:26:e4:c6:f0:9e:a6:69:0a:
                    5b:92:7d:7c:b9:5b:a8:67:16:be:8b:6c:50:3d:07:
                    29:06:ce:35:fb:42:6a:73:9e:47:e0:ea:2a:39:6e:
                    c1:de:08:4c:d4:49:63:df:bd:7e:5b:e5:9b:04:5c:
                    07:37:2d:eb:45:4d:27:8c:d6:6c:66:3e:b0:79:da:
                    f3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A3:11:4C:37:C1:FB:C8:30:47:99:45:C4:E4:E1:22:51:AB:86:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4cba7ece-c4a0-3541-859c-814ae47d389d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.128.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:d6:64:19:21:2f:2a:0e:c5:e1:bf:32:e1:af:b9:04:5b:84:
         e8:50:63:83:4f:fe:4b:1a:59:17:84:70:2f:6f:1a:c2:a0:a9:
         74:10:f4:d0:1a:ba:34:0f:27:0f:4a:bc:d7:11:33:74:ff:15:
         51:53:28:51:37:51:bb:78:90:fa:36:a8:05:ea:c1:4a:a6:f3:
         4f:bf:11:c4:50:9d:21:78:66:a1:21:33:83:d1:5f:a6:aa:38:
         34:4b:d9:d2:09:83:d0:81:19:e2:ae:33:63:35:32:b9:ec:8b:
         d1:99:f7:e1:79:01:4f:71:2f:2b:35:52:9f:e4:59:7f:90:d7:
         22:73:84:d0:33:45:8d:d7:c0:91:dd:40:9c:88:c5:f3:e8:b5:
         6b:8e:23:38:d6:b9:2d:58:e4:d1:02:2c:17:2c:c3:4a:e0:0d:
         90:a5:f9:7d:c5:8d:83:32:db:cf:9b:76:82:41:54:ff:15:bb:
         7e:b1:be:e2:b0:c8:21:6e:8f:f2:13:bd:18:74:75:0b:00:ba:
         6e:b6:f9:86:7f:49:c0:7e:9d:af:a9:27:a0:76:fb:13:d7:fd:
         31:45:4b:7f:45:61:ba:b2:37:d0:79:81:14:ac:25:c7:0d:07:
         ba:8c:8b:64:cf:83:19:a3:a3:ef:d1:19:3c:e8:f6:e4:fb:31:
         29:8e:f1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:07 2024 by rpki-client on console-fra.rpki-client.org