Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eea7239-9c2e-3358-8990-147f10516947.roa
File:                     3eea7239-9c2e-3358-8990-147f10516947.roa (raw, json)
Hash identifier:          1bI0+Xpz/cA0BCJaMeTXzSU5NXP/QTpF5raDu0V4gb4=
Subject key identifier:   0D:84:34:8C:63:93:38:D3:EF:10:48:E1:DA:57:3A:7A:04:7E:2B:59
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AE3E5F0CC2DCA69D16700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eea7239-9c2e-3358-8990-147f10516947.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.106.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:e3:e5:f0:cc:2d:ca:69:d1:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d87c22c2-b595-46c5-ad09-ee98445d7897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:48:5c:57:52:59:ec:b8:05:00:81:f0:a8:d8:
                    01:34:ad:f8:d1:7d:49:c3:4c:7e:2f:49:fb:1a:94:
                    81:04:a4:d0:dc:46:71:2f:21:ed:ac:4e:a0:b3:1e:
                    7c:e6:8e:1a:de:fb:ba:7f:c4:6a:54:c0:83:62:86:
                    01:40:f0:33:15:4f:4e:18:21:d2:ed:1b:a0:c2:64:
                    a9:8a:8f:51:c0:00:e2:69:e1:ac:0d:eb:7e:1c:83:
                    08:4a:d8:da:72:c1:96:4b:d0:94:91:d2:56:2b:36:
                    e7:fc:f4:39:7f:80:4f:dd:a8:6f:ce:de:5a:2a:bf:
                    f3:41:39:1a:1e:04:15:64:17:ce:c8:60:17:60:6b:
                    59:5a:f6:49:f3:3b:bf:4b:98:a0:29:59:5f:5f:25:
                    0f:ad:bf:b9:4e:19:ea:c5:aa:5a:b7:54:21:6f:62:
                    fb:a5:ef:14:b5:65:21:0a:73:9b:27:a2:93:71:4a:
                    41:2a:ab:05:3c:d4:48:7a:ab:5d:78:3c:be:4b:65:
                    27:b7:17:a5:04:1c:64:4b:8c:19:a1:7f:23:32:f1:
                    c2:0c:78:b3:f2:03:47:e9:40:67:d7:ee:a0:8e:c1:
                    b6:31:be:24:c0:d5:22:66:75:d6:d5:78:e7:1d:e8:
                    33:e4:b7:b1:f8:bf:d5:1b:4a:81:8a:89:cc:c8:90:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:84:34:8C:63:93:38:D3:EF:10:48:E1:DA:57:3A:7A:04:7E:2B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eea7239-9c2e-3358-8990-147f10516947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a4:4d:07:d8:82:97:2d:eb:52:e9:21:5d:54:3b:a9:3d:6d:
         e6:31:e4:b9:c6:c0:b5:44:79:de:bc:45:65:da:7a:0f:2e:a6:
         5d:cb:f9:e2:b1:d2:f8:23:b5:a5:3a:dc:e6:8f:50:7c:94:c5:
         95:89:5a:55:08:a8:3e:96:d2:00:30:4c:a9:e1:c1:36:d5:a6:
         6e:04:75:59:ef:ed:de:51:cd:2b:03:22:6f:d4:a3:83:91:8d:
         0d:b9:cc:fe:f1:db:44:fa:80:70:7e:37:ad:ea:0a:6b:25:e8:
         59:a1:a9:2b:98:aa:7a:e3:f6:e7:8d:b3:04:1e:e8:f8:ea:71:
         35:27:ee:1d:d4:08:ad:49:e4:8b:a1:13:ed:2e:57:e9:bb:c9:
         36:d4:7b:bf:b0:16:98:f6:f2:bb:f4:1a:2a:a0:98:6d:cd:7e:
         7b:32:8c:59:7a:83:88:fd:11:13:e8:ae:4f:8e:06:a1:cd:a8:
         7d:fe:17:32:01:a5:60:04:f2:52:48:c1:1a:d7:da:c9:06:ca:
         d6:c9:1a:19:ce:7b:10:fa:0a:dd:65:f6:ed:7c:85:3f:95:9a:
         de:f2:4b:4d:07:85:10:09:e8:65:dd:0d:8c:09:94:8c:d3:cf:
         58:02:cb:59:0b:dc:be:58:45:52:ae:00:0a:e1:a5:39:7e:55:
         c7:ea:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:36 2024 by rpki-client on console-ams.rpki-client.org