Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/054658a6-57bb-3029-9e8d-053985880b22.roa
File:                     054658a6-57bb-3029-9e8d-053985880b22.roa (raw, json)
Hash identifier:          E4YzNrp8v8Jr8mfpTKMLLDEpBLogs7RaN0jeiNIC8/Q=
Subject key identifier:   87:72:FF:5C:CF:29:C7:4E:87:0D:0F:03:A8:18:A8:07:71:0D:78:1B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DA6CD2E90BBC2445D2F30
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/054658a6-57bb-3029-9e8d-053985880b22.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.107.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:a6:cd:2e:90:bb:c2:44:5d:2f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=d977c8d6-8ed2-4b18-a17f-07135ce1a9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:53:19:2a:cf:b3:fe:c3:db:0b:23:53:f3:
                    32:6d:a8:6b:14:8e:64:a2:49:ee:43:bc:21:8e:82:
                    2a:08:b1:a1:65:85:8d:88:c0:17:01:55:ee:62:06:
                    9f:6a:f6:05:08:86:44:4a:44:7b:ab:5f:95:ad:70:
                    79:b0:b6:1c:9e:7e:0e:28:d4:e4:5f:91:7a:73:af:
                    16:fb:ad:0b:fc:78:48:b5:fb:87:a3:cb:50:a4:2b:
                    77:be:53:9b:cc:bf:cc:d4:39:59:70:3b:86:6c:a5:
                    d8:6c:e7:ec:93:66:e0:03:5a:bc:2b:21:49:6b:fb:
                    5f:f1:9a:88:8e:d7:e1:f5:bf:79:19:f8:8f:eb:d5:
                    85:c1:b4:2a:c5:fd:42:8d:19:6c:dc:7d:4b:95:de:
                    d5:e6:2f:73:08:76:05:41:a5:3f:bc:6c:cc:7f:bf:
                    5f:da:78:2e:34:d3:75:28:66:7b:c1:d1:25:15:16:
                    81:f2:d8:43:9e:5b:58:64:dd:89:d5:5f:77:ec:8c:
                    48:74:10:fa:98:c8:74:ff:50:ae:f1:e1:06:e6:d8:
                    81:03:f3:69:08:c2:80:d1:b1:02:87:cf:91:75:0c:
                    1f:5f:a8:b5:d8:98:c8:29:f8:1e:e2:66:de:9b:de:
                    13:d1:5f:17:8d:35:9c:ec:71:09:a1:26:55:7f:c0:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:72:FF:5C:CF:29:C7:4E:87:0D:0F:03:A8:18:A8:07:71:0D:78:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/054658a6-57bb-3029-9e8d-053985880b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:35:86:9e:15:89:42:28:10:52:00:d1:a7:c0:82:06:e8:1e:
         9a:78:ef:1b:6e:50:72:bb:c2:45:46:81:2a:a5:e6:a5:f5:a6:
         b1:79:ed:0a:60:cc:0a:7f:0f:99:ec:fd:93:9f:75:82:aa:50:
         cc:f9:6a:b3:a8:72:5c:80:79:9a:d7:ae:7d:94:0f:2b:bc:f4:
         ad:39:fe:cd:dd:88:e5:cc:aa:5f:04:ad:02:93:7d:47:99:a1:
         7e:bb:e9:43:1c:c0:29:e7:94:1b:e6:44:1c:59:a6:8f:58:54:
         a6:3e:6b:05:6e:ae:b1:4c:52:e3:d4:a6:c6:4c:1c:bc:ed:27:
         62:a9:a7:8d:79:21:98:4a:1a:a8:44:49:34:e8:bc:16:f8:6b:
         70:4a:5b:35:fc:da:aa:67:8c:94:ec:69:77:f9:dc:e9:5b:53:
         2e:96:ed:2e:8b:80:a2:f6:72:7c:b4:22:3f:4b:90:20:61:d6:
         ca:ea:d9:3e:74:59:c0:81:08:01:99:31:c6:82:f0:5b:2a:5c:
         b7:cf:12:23:38:ea:46:40:67:06:2e:15:0f:41:0b:79:24:7c:
         b7:00:a0:a3:2e:4e:e0:03:5a:e4:b9:52:c4:0b:2e:2c:44:5b:
         25:71:43:d6:bb:50:18:38:a3:73:c8:05:f4:82:e7:73:56:d4:
         75:17:18:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:31 2024 by rpki-client on console-ams.rpki-client.org