Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3494ac2c-d7a5-3e43-9a06-1fded93413ea.roa
File:                     3494ac2c-d7a5-3e43-9a06-1fded93413ea.roa (raw, json)
Hash identifier:          5rpItLbe1d/M8+bO0lfOrl5aBSpYqMo699DDmYw9bIY=
Subject key identifier:   03:3D:10:D3:F1:17:89:E8:AE:30:B1:15:BC:1F:01:C1:B4:09:03:85
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AD9C4898A888BD773D380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3494ac2c-d7a5-3e43-9a06-1fded93413ea.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.104.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:d9:c4:89:8a:88:8b:d7:73:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=5edcdec1-08ea-4991-b486-62f290ac238b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bc:8e:99:1d:86:0e:1a:54:de:fc:85:ee:ae:
                    31:6d:d3:e4:27:bd:43:ab:63:a6:62:86:e0:ac:94:
                    73:4c:23:65:cd:a3:05:38:42:1e:d0:ad:ac:35:2f:
                    59:84:65:5c:7a:0f:0d:b3:a5:a4:9a:f5:23:5b:51:
                    c7:4d:7f:0f:db:ae:ee:36:99:98:f0:98:40:6c:f2:
                    ed:30:7a:12:ed:73:d4:8e:49:d0:d5:0d:53:d6:13:
                    65:d4:71:69:11:90:5a:b0:70:90:af:a7:bd:9f:46:
                    ae:72:db:85:7f:c1:10:c3:c9:b7:01:0a:87:df:a6:
                    2b:d0:ea:f9:b9:c6:b3:bd:0d:83:bf:f4:e4:b4:dc:
                    71:bb:f9:4b:97:7d:17:48:20:2a:3a:7f:8f:b0:e7:
                    a7:dc:84:af:b1:d2:61:c3:a8:9c:27:d2:e5:e8:98:
                    30:97:2e:7b:cb:43:8c:ac:eb:1b:48:86:2b:c0:7f:
                    5c:ca:7d:3e:4d:a0:ce:c4:58:49:f9:d7:db:f6:a3:
                    0b:c1:6c:c0:e9:04:1d:d3:b1:66:35:08:95:a8:49:
                    af:1f:c2:40:29:d9:26:40:8e:f8:60:12:7e:c1:c7:
                    41:31:fe:b4:83:db:5e:38:71:65:a2:67:9e:8e:8e:
                    05:cc:e0:d9:9b:41:71:53:78:a2:4a:be:50:d1:b9:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3D:10:D3:F1:17:89:E8:AE:30:B1:15:BC:1F:01:C1:B4:09:03:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3494ac2c-d7a5-3e43-9a06-1fded93413ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:49:60:f7:df:22:b1:3c:34:44:f8:93:37:5d:25:91:cf:a6:
         10:86:3e:0d:c4:f3:47:1c:04:85:d8:ca:44:66:56:4e:e5:f9:
         1c:df:ba:69:7a:12:c6:aa:9f:cc:94:eb:3e:b4:0e:37:fb:2c:
         b0:b4:df:7c:04:94:6f:a0:d5:ba:fe:bb:62:25:fc:14:5d:f8:
         3e:29:b4:f5:2d:43:50:6b:ad:97:6f:f2:96:4b:fd:8c:00:13:
         ee:9f:09:bd:8f:b1:66:99:ab:6f:61:56:56:e9:8f:30:04:05:
         ac:1b:eb:5d:1d:95:1b:dd:e3:fd:c4:75:57:de:df:f1:e2:eb:
         a0:b6:01:74:bb:75:8e:9d:27:e3:01:cf:ae:b5:7b:f7:b7:7d:
         b3:54:56:a7:7d:a2:cf:51:31:33:9e:ec:92:11:a1:e3:6d:91:
         9a:24:b4:a4:2b:66:8a:04:de:85:b1:47:b2:82:e5:9a:ee:45:
         78:00:c3:0b:fd:73:59:72:0a:35:46:05:3d:cb:76:6e:ff:80:
         e2:7d:f5:00:15:d4:c5:bc:0d:3e:25:a2:ce:fe:2f:44:33:33:
         12:bb:ce:40:b1:69:f0:da:df:77:5e:ff:a4:84:59:3b:66:3b:
         98:68:77:18:9c:68:c9:c8:b8:d6:45:48:7f:15:d6:2f:28:91:
         ac:86:1a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:32 2024 by rpki-client on console-ams.rpki-client.org