Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12c9a5ae-52b9-3e36-b98b-8e5b65a201c9.roa
File:                     12c9a5ae-52b9-3e36-b98b-8e5b65a201c9.roa (raw, json)
Hash identifier:          M1x2+qdzhHVN0cY7Lc+g93DZmXKNt3+pA44V2MMcjZI=
Subject key identifier:   66:14:E9:8F:10:6E:1E:8B:71:A4:AB:35:5E:A0:87:54:FB:43:B1:D3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E0EDDA8823BC3B603DD90
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12c9a5ae-52b9-3e36-b98b-8e5b65a201c9.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.105.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:0e:dd:a8:82:3b:c3:b6:03:dd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=edf34e82-f733-45c7-8be6-376f891c2392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:e3:88:6f:38:24:7f:16:8b:b8:93:91:f0:
                    97:eb:28:65:ae:6f:c1:e9:68:18:73:25:c8:c2:bc:
                    4c:09:61:0e:71:eb:8f:8a:ad:72:70:f1:15:20:ff:
                    d7:01:ce:67:39:03:f3:f7:25:07:21:bd:84:57:31:
                    d2:8e:f0:8b:9f:fc:6b:b4:74:95:cd:7b:9a:26:ed:
                    27:8a:5a:6d:44:7a:65:0b:9f:b1:ed:bc:32:fd:5d:
                    ae:62:f2:9d:74:3d:f2:ba:ae:bd:df:a4:55:dc:67:
                    31:32:48:11:b0:88:aa:32:3d:0f:bd:02:3e:9b:bf:
                    c7:5d:6c:a4:fb:b2:25:38:91:b3:e9:e5:f2:97:33:
                    96:92:cc:40:db:e2:43:d0:91:2f:93:3a:c4:d8:4f:
                    ed:a3:67:a4:8b:a0:e0:8d:37:8c:63:3d:fa:1f:4d:
                    3c:27:a2:73:dc:74:2e:d0:97:d0:ad:ad:0c:18:ca:
                    70:57:80:ea:8f:9c:ea:bc:6f:09:1f:43:dd:e6:35:
                    d4:01:7a:80:2f:02:be:54:15:1d:02:30:9a:7a:e6:
                    76:e8:1b:3a:9e:7b:a0:c5:48:c1:1b:78:f7:22:c2:
                    ca:18:6d:f6:d4:52:8b:c4:e3:a4:e4:4f:fe:e7:ac:
                    e0:55:b8:cb:fb:49:13:5e:39:f1:f9:16:27:e7:d1:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:14:E9:8F:10:6E:1E:8B:71:A4:AB:35:5E:A0:87:54:FB:43:B1:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12c9a5ae-52b9-3e36-b98b-8e5b65a201c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:92:3a:49:0f:bc:4f:b1:a8:a6:4e:bf:99:2d:3e:3c:e1:b4:
         38:6f:5d:e8:56:23:57:52:cd:d9:a2:00:a6:ac:36:bb:27:d6:
         02:36:f7:e8:09:e0:b3:ff:69:e7:76:12:84:6b:27:38:6f:3e:
         d7:98:db:65:39:ba:1a:7c:49:73:32:48:4b:03:fd:af:03:9a:
         d3:23:ff:32:33:8c:f4:c8:60:53:66:cc:78:d4:1b:6d:f8:ad:
         31:f0:59:dd:64:4a:0d:90:d4:85:46:5a:72:18:44:fd:43:59:
         36:a5:f4:2a:95:03:d8:ca:a3:db:9e:6c:8a:2b:d4:b6:46:23:
         20:b2:5d:a8:78:db:03:39:97:06:ad:ef:f6:ae:82:90:f2:ef:
         ae:b1:e7:7b:f7:37:7b:be:17:f2:78:46:e8:92:69:a1:27:25:
         a8:47:92:4e:8d:c8:f6:96:3c:b1:0e:30:a3:98:cb:3d:1d:a2:
         64:c9:bc:93:75:e5:f7:a1:3b:8e:91:b9:ef:4a:c1:cb:32:f1:
         f7:81:79:58:10:d9:fa:b8:79:0a:99:67:29:c6:cb:2a:c2:a9:
         87:7c:7a:d8:89:c0:63:98:94:8e:20:24:e9:30:58:e9:cd:2c:
         3c:3f:bc:99:a5:f1:cc:57:eb:45:05:e6:74:b7:8f:06:7e:c2:
         38:90:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:32 2024 by rpki-client on console-ams.rpki-client.org