Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21832ea7-55f8-31db-abf1-fba33b4cf099.roa
File:                     21832ea7-55f8-31db-abf1-fba33b4cf099.roa (raw, json)
Hash identifier:          c+O1tUGyi7gbIKbXbDVD45MbY75R4gsObAAiA861pGU=
Subject key identifier:   30:4F:42:0A:2F:96:BD:FB:EC:01:40:CF:5B:AB:B7:3C:84:48:29:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AD9DB541A8C7F3FEBB800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21832ea7-55f8-31db-abf1-fba33b4cf099.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.104.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:d9:db:54:1a:8c:7f:3f:eb:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b1657e01-7b4a-4c65-8aa4-823a6891a3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:b7:4e:69:f2:66:26:42:b2:70:a7:5f:f1:
                    0c:35:fa:66:eb:bb:37:a0:ce:b7:53:d7:f5:b5:65:
                    da:9e:0c:03:db:de:2c:5b:65:cc:c4:d9:53:72:78:
                    1f:d4:b8:55:3f:4a:9d:3b:96:90:e3:99:9f:14:31:
                    ce:58:48:a9:19:be:f4:f9:70:15:bb:51:a6:8e:24:
                    63:b5:5b:bf:fc:f8:7d:06:a1:e6:8f:dd:21:9b:3e:
                    33:79:5b:9f:6a:d0:52:03:45:4c:3a:59:4c:43:08:
                    36:58:57:2a:e8:aa:0a:67:92:36:2d:ed:cd:fe:12:
                    ed:d0:3f:0e:d5:74:62:e5:47:c9:ba:d3:82:e3:cf:
                    77:00:96:c8:44:af:d6:bf:0e:d9:82:35:e7:6a:fb:
                    80:46:3c:7a:58:45:50:b1:23:e6:ac:e2:52:0e:24:
                    cc:09:81:bd:bc:40:8d:76:d0:6f:22:f2:2d:ac:11:
                    32:9b:a0:fd:56:62:65:8b:ce:7e:f6:90:0c:4e:52:
                    6c:76:99:67:c3:ec:13:3e:f7:8c:e9:c3:d2:14:6e:
                    ae:15:d3:f2:a8:16:bb:d3:ad:7e:d6:10:ce:c7:7a:
                    d3:cf:8d:d6:c1:9f:4f:ea:47:2f:4b:b8:04:d1:ca:
                    24:37:48:24:45:65:f0:02:e1:f1:f1:ef:6b:9f:a8:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4F:42:0A:2F:96:BD:FB:EC:01:40:CF:5B:AB:B7:3C:84:48:29:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21832ea7-55f8-31db-abf1-fba33b4cf099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c7:f2:8c:ef:ec:f2:87:37:f1:5d:51:00:86:01:12:e4:b5:
         ff:e8:19:63:c6:65:3b:07:0d:8a:3d:dd:c1:3e:39:59:f1:ac:
         95:a9:48:a2:af:65:44:e4:5c:20:f8:b7:20:d5:9a:10:ae:45:
         20:b2:70:80:6f:c1:c6:bf:2a:ac:ec:ee:38:79:5f:b5:24:9d:
         2c:95:02:dc:89:5c:11:20:e7:ce:24:43:9d:c4:a1:b8:75:9f:
         86:f2:d7:de:58:5a:9f:bd:74:f1:2f:77:5f:a9:51:ac:66:e2:
         70:1b:9f:a9:93:66:ab:f3:d0:ff:ef:81:da:7d:20:00:d1:86:
         80:6a:09:e6:ac:bb:1f:9b:00:d5:66:61:d5:fd:d3:49:c1:c3:
         c1:e4:bf:2c:09:7d:14:1b:b2:aa:2c:48:fb:51:98:b0:1d:f9:
         3b:68:87:61:f2:0a:fe:2f:c1:f7:10:3f:61:68:57:17:a9:55:
         5a:c8:3e:2b:3a:77:1b:0f:42:3c:b1:28:fb:21:2d:12:d3:2c:
         82:43:2a:1c:f0:7b:6c:72:7f:50:e5:96:9d:0f:fc:c9:56:9e:
         b2:3b:ab:49:3c:82:cf:ac:0e:bf:3d:3c:65:ba:f6:c2:2d:d1:
         ab:fd:df:69:25:c8:3d:50:48:50:27:12:b7:4a:c2:e8:0b:27:
         76:31:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:08 2024 by rpki-client on console-fra.rpki-client.org