Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/409f760b-f48a-3fd6-8845-0f1b3242a7c7.roa
File:                     409f760b-f48a-3fd6-8845-0f1b3242a7c7.roa (raw, json)
Hash identifier:          Eqb5ptkGkLDajyDjVYTSXpiNQbpiG2s3IsFaMSaGufM=
Subject key identifier:   AA:4D:A0:DC:85:BA:9D:EA:BA:C8:05:AA:D1:0A:9A:38:C5:52:50:2D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E190B0474E339085307C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/409f760b-f48a-3fd6-8845-0f1b3242a7c7.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.106.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:19:0b:04:74:e3:39:08:53:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=326bf630-1a49-4a75-8c20-85b726942821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:bf:27:cf:5e:0b:d4:70:bf:9b:69:59:d4:
                    81:98:e4:d1:b3:8f:ba:b0:a0:3d:b3:f8:5f:db:f9:
                    65:66:aa:cd:1a:50:35:6a:8b:f9:3c:37:c4:9d:38:
                    c7:18:58:b2:9e:18:8b:42:4f:e2:fd:0a:71:6f:7a:
                    6e:da:a7:0a:f4:51:8a:65:20:71:d7:31:c7:0a:b6:
                    36:fc:0c:33:ab:dd:44:29:31:4e:6a:47:39:06:91:
                    a0:16:12:6e:c7:f2:56:05:1f:7b:28:67:b2:7d:ed:
                    97:91:65:a1:71:e5:9e:31:0b:11:ef:86:a6:92:69:
                    0b:17:fd:a1:14:99:cd:4e:f5:9c:2e:43:a0:19:e5:
                    2d:67:be:60:b1:13:14:72:43:fb:3e:1b:af:06:8f:
                    0a:58:04:2d:33:77:03:e0:5d:c8:40:3f:4f:4d:fe:
                    06:df:d3:b7:d1:00:54:b9:6c:47:4d:3c:eb:dc:6d:
                    0e:66:42:87:64:e4:46:fd:75:70:4d:aa:97:8e:a2:
                    fe:4e:06:61:e4:30:0f:22:75:52:98:3b:ec:64:11:
                    e2:21:41:5f:b2:98:f7:84:8e:ae:5e:7c:fb:62:16:
                    2a:81:61:6a:65:89:30:3d:1e:0d:82:6c:87:f4:66:
                    13:5b:67:3c:ca:33:96:b4:90:3c:7c:2d:b0:fe:3a:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4D:A0:DC:85:BA:9D:EA:BA:C8:05:AA:D1:0A:9A:38:C5:52:50:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/409f760b-f48a-3fd6-8845-0f1b3242a7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:60:2f:27:92:07:26:71:70:5c:44:01:dc:2e:ba:df:bc:21:
         b5:a6:7e:d2:7d:8c:2f:e6:99:b1:b7:ab:5e:29:86:f7:d6:b8:
         c8:5c:3d:57:7a:e7:31:e9:a9:a6:c4:99:bc:80:9d:a9:0f:83:
         1b:af:8c:8d:32:31:aa:67:70:ba:79:f3:09:8d:44:22:70:27:
         9e:e5:d6:97:b5:37:a6:84:4b:bd:d5:ae:5e:f8:36:ee:ac:b1:
         b4:cf:88:bb:80:f7:1e:4b:46:03:86:6b:24:1f:a5:06:6c:aa:
         4c:c3:11:88:66:f5:70:34:96:e7:fa:92:52:2a:50:09:9c:a5:
         be:cc:0f:cc:fa:42:f2:6a:73:18:48:54:13:b8:7a:d0:20:91:
         79:d2:58:1c:a2:b4:14:82:52:c7:ae:5d:e0:2f:68:20:bc:4a:
         ff:71:9b:5d:74:60:31:39:e9:d4:05:df:b0:e2:c4:0d:85:51:
         26:fa:8c:fd:07:c1:12:bd:67:5e:37:c6:86:af:db:4a:8a:d6:
         90:f6:41:02:bb:1d:d9:7a:8a:d3:94:1e:46:f5:7f:9a:84:de:
         77:96:64:94:fc:8d:06:39:57:07:6c:be:57:08:a2:59:7e:a0:
         c9:e5:76:d3:d8:9e:74:ad:94:e1:3a:6f:9c:e4:cb:11:a0:9c:
         0d:e4:72:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:33 2024 by rpki-client on console-ams.rpki-client.org