Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c125b0a8-3dc2-3d97-9246-1d369b5d62b6.roa
File:                     c125b0a8-3dc2-3d97-9246-1d369b5d62b6.roa (raw, json)
Hash identifier:          5lyzlLafMkxP818c32HGFAz2sTqlh6m+cFW4LIAtkvI=
Subject key identifier:   2C:68:FF:BF:DB:5A:10:C6:6F:FD:BA:42:99:00:74:D4:16:EC:8C:5A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0F8C329211012E9A44660
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c125b0a8-3dc2-3d97-9246-1d369b5d62b6.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        75.131.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:f8:c3:29:21:10:12:e9:a4:46:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=e7c83ac5-f433-475b-ac08-dc1ad1d592d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:de:6a:f6:b4:d8:23:00:e6:16:f0:06:9f:
                    1e:6a:f9:52:4c:b3:0e:4d:07:d8:28:a6:9e:b0:27:
                    b8:60:9c:34:6a:4d:72:0d:b0:9d:bf:13:3b:ae:9c:
                    16:d8:8a:16:9f:94:04:8d:95:2e:2c:0f:08:37:91:
                    d8:74:37:eb:5f:ee:3b:0e:f0:87:8c:c0:df:dc:f7:
                    c0:96:77:25:25:b9:e4:88:1c:ef:a0:66:5d:97:17:
                    bf:d7:a1:6d:7f:3d:86:db:00:38:1e:e5:66:80:08:
                    8b:ac:06:c9:4d:21:68:1f:8a:82:df:03:b0:02:84:
                    45:a5:33:16:2f:0b:37:cb:71:61:0d:20:d4:67:a9:
                    56:c8:04:dd:7a:b7:53:0d:aa:98:62:de:7c:38:ee:
                    53:1b:19:5b:85:19:42:6a:cf:ad:88:0f:0c:de:90:
                    85:e6:77:40:5e:b0:e5:a8:4f:b9:de:38:65:50:67:
                    cd:9b:5c:77:76:2a:30:12:38:35:b8:d5:f6:ca:34:
                    e6:31:3f:92:90:d0:92:50:b9:13:25:19:be:8d:8b:
                    c7:80:a3:ff:61:b4:99:6b:48:ac:c4:05:ac:ad:da:
                    8d:2f:c7:99:61:0b:87:69:d9:9f:28:a4:f2:26:9b:
                    9d:ff:c9:3d:5b:6e:5c:cb:d3:b1:a4:38:fd:37:0e:
                    75:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:68:FF:BF:DB:5A:10:C6:6F:FD:BA:42:99:00:74:D4:16:EC:8C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c125b0a8-3dc2-3d97-9246-1d369b5d62b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.131.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:41:42:55:74:3c:a3:57:e2:6d:92:48:0e:74:db:51:c3:a5:
         2a:17:85:16:82:97:1c:c7:9e:80:1b:f4:fc:05:b2:a0:33:2d:
         11:68:47:ee:6b:b8:78:13:4c:22:42:cd:c2:dc:53:1f:d2:60:
         f0:03:f8:99:7a:eb:93:6f:15:da:14:5d:10:87:d9:82:57:54:
         19:23:da:a4:7c:1b:60:8a:d9:55:f6:40:82:f6:48:d0:bf:8e:
         e4:42:cb:70:0e:51:a6:53:a8:60:6c:75:fa:fe:0a:cf:4b:5d:
         18:fa:e8:4b:af:aa:db:2d:08:b2:de:5b:e8:26:c1:90:ca:ab:
         d5:33:43:90:3f:b8:8f:de:f0:7c:55:1a:c6:00:32:c9:e9:2b:
         db:a0:9d:94:31:bf:45:99:5d:f9:7d:cc:c6:af:4a:7c:77:57:
         8e:28:be:2c:93:fc:c1:0e:2e:fb:48:9d:75:30:04:53:d9:09:
         16:66:5e:1a:40:7b:0f:9b:50:b2:61:d2:1b:ca:e1:68:7f:cf:
         73:d8:ed:9d:36:38:99:19:e2:d0:3a:1e:45:61:74:82:64:7b:
         97:c8:20:b3:b0:bb:d7:34:76:de:d0:1f:10:7c:bf:ca:c9:ec:
         7b:7e:9a:29:69:3b:f4:f2:1f:a8:d4:d3:d1:cd:e6:71:a9:67:
         d8:16:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:19 2024 by rpki-client on console-fra.rpki-client.org