Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/449091b6-bc68-39cb-9f21-212909ed0619.roa
File:                     449091b6-bc68-39cb-9f21-212909ed0619.roa (raw, json)
Hash identifier:          3nL781IlC/0wJt2oNgFssnhQPF2w3tN5MB8h2Xn8zk0=
Subject key identifier:   43:C6:E2:9F:72:72:15:B5:DB:6E:F5:E9:0A:48:D5:39:EF:65:7B:F5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ABE78DD1AEA17BF195D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/449091b6-bc68-39cb-9f21-212909ed0619.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     16491
IP address blocks:        75.104.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:be:78:dd:1a:ea:17:bf:19:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e280e416-0a39-42c8-8ddc-eda1a418e807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:82:a4:28:3b:42:70:b3:11:33:65:33:5d:19:
                    91:60:40:d6:49:25:31:43:25:95:1e:bb:15:16:00:
                    5f:c9:ae:65:2a:8f:2b:71:b5:2d:ed:5b:dd:79:13:
                    cc:d3:85:a6:8f:63:c5:e0:84:55:fb:4b:cc:6a:76:
                    e2:45:fc:a9:73:df:e8:9f:f4:f0:91:9b:4a:4d:df:
                    cc:a5:87:21:33:56:91:03:57:aa:9d:87:b8:fd:e9:
                    9e:12:97:86:71:68:62:dc:73:6c:d4:b3:a6:7b:c0:
                    5e:17:ec:ec:9b:5f:e1:f1:02:09:4a:fb:d0:6d:27:
                    bf:65:21:9b:09:2b:aa:d7:7f:f7:ab:60:71:79:4a:
                    d1:4a:5e:d2:69:6d:2c:e3:13:03:91:73:41:15:91:
                    bd:72:fd:f4:0c:ee:39:1c:c2:09:8d:74:64:e2:b0:
                    94:fc:e4:1a:2e:d1:f2:2d:d3:0e:6d:44:df:c8:7e:
                    81:44:92:24:cf:cc:f0:4f:8d:10:16:a9:20:a1:02:
                    79:5a:4a:bf:4a:e8:17:83:51:5f:d4:de:d2:7e:ae:
                    9e:aa:b0:96:e3:f5:e5:73:99:f3:e2:06:56:28:82:
                    3f:cd:dc:ed:4c:af:9a:04:55:ba:c7:1a:0f:9b:02:
                    18:07:72:04:b1:5e:08:f0:a9:16:dc:fb:63:fb:84:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C6:E2:9F:72:72:15:B5:DB:6E:F5:E9:0A:48:D5:39:EF:65:7B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/449091b6-bc68-39cb-9f21-212909ed0619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c1:45:7c:b4:a9:ca:66:ab:54:22:d4:f7:b1:17:c5:61:f1:
         1a:37:81:19:4e:3d:5f:b4:54:e7:7c:36:29:19:23:1a:0e:82:
         30:7c:11:ca:d9:5a:c7:6d:f0:3d:3b:69:e8:09:91:32:39:cd:
         b9:65:e5:ed:61:ea:0e:f8:6e:09:88:b8:81:2e:4d:56:30:a3:
         e5:90:ab:ed:ef:5e:e2:36:6a:0f:2a:36:bc:cd:44:24:17:af:
         6d:87:14:ac:1b:64:8e:92:47:88:30:0b:60:9a:8e:46:9d:12:
         44:80:14:dc:88:bf:7f:e5:32:0b:c0:27:36:de:93:3f:d8:4d:
         95:b9:89:8c:bf:6d:4b:73:f0:ed:87:d3:4a:cb:77:9b:80:c2:
         1f:14:73:b6:46:ec:00:c4:a5:a3:db:04:43:ab:95:db:e2:f7:
         12:3e:ba:23:3d:f1:8c:be:8f:0f:c9:2a:1e:2c:f7:4c:0c:20:
         a6:2f:9b:78:0c:16:e5:8a:68:de:67:a2:58:19:4e:91:51:44:
         24:3c:31:8b:49:a5:27:41:f5:79:8e:65:72:a7:26:ae:6e:d9:
         c7:65:3a:22:1e:a7:9a:43:08:d5:ad:bc:f3:f2:53:4e:11:1d:
         0f:22:2b:a9:01:f5:d6:f1:ab:2b:0e:a0:68:53:4f:d1:cb:37:
         26:4c:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:38 2024 by rpki-client on console-ams.rpki-client.org