Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48b7804c-f8f2-3c4e-bd41-f827eb2937de.roa
File:                     48b7804c-f8f2-3c4e-bd41-f827eb2937de.roa (raw, json)
Hash identifier:          4ywl34kEwTN1eDqoZugRE9IFXR5L71u39N3SfSdikXU=
Subject key identifier:   F0:E8:49:CC:78:3E:E7:CD:41:BA:3D:78:61:5C:C2:9D:60:37:31:93
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AE9312EB11B6DE7095A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48b7804c-f8f2-3c4e-bd41-f827eb2937de.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.107.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:e9:31:2e:b1:1b:6d:e7:09:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a4ba1ab8-84ea-480a-8f6b-a0ad9589dd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:af:41:d4:2b:86:60:30:5b:23:19:7f:e3:
                    5d:c7:54:59:ee:20:0d:73:b7:0b:d8:46:2c:71:31:
                    f9:67:e3:90:90:77:35:05:bb:c6:f5:a4:65:85:16:
                    7e:c2:2b:96:7c:6d:11:1f:4a:b9:1a:70:df:9f:bc:
                    3c:2c:ea:7e:47:7c:54:f5:ba:a2:3a:2a:96:9c:bd:
                    45:0a:34:96:14:24:ba:e6:ab:2a:aa:fe:de:e9:4a:
                    a9:88:31:03:01:4c:1e:f4:03:88:9c:d4:d9:93:c8:
                    a6:38:32:16:0b:5b:24:3f:00:ff:1c:a7:a5:95:f7:
                    37:d0:7e:52:14:21:27:97:5e:33:8a:ec:58:a7:85:
                    c8:27:96:5f:17:aa:5b:63:19:d5:7b:c2:9c:28:e8:
                    c1:de:20:c0:35:be:71:39:f6:af:af:f4:86:09:e1:
                    6e:0f:55:69:95:17:be:f3:ec:d6:23:e3:e6:0a:1b:
                    51:94:b6:a7:84:af:73:6f:54:2c:42:f8:f7:a7:bc:
                    e3:c6:7e:3c:65:cf:6c:66:d9:cf:2c:d0:c5:d0:5b:
                    59:a6:84:16:09:10:78:78:8a:14:4a:94:4d:66:b8:
                    c9:c0:0a:be:0e:19:94:79:0a:fe:5a:51:26:6c:62:
                    9d:21:bb:1e:d5:50:61:1c:c0:57:84:7f:84:21:eb:
                    73:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E8:49:CC:78:3E:E7:CD:41:BA:3D:78:61:5C:C2:9D:60:37:31:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48b7804c-f8f2-3c4e-bd41-f827eb2937de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:52:f0:7c:8f:96:3b:86:00:30:f7:e3:7b:19:01:4d:fb:8b:
         90:95:c3:dd:32:b2:4c:bf:94:cf:f5:1e:e1:77:dd:92:76:c5:
         ce:93:be:ad:77:49:30:28:3c:0a:b3:b2:36:78:ab:19:c0:a3:
         12:db:46:6a:da:e7:a8:8f:d1:1f:7b:3d:f5:c8:62:c7:8b:5b:
         a9:11:42:ea:84:52:51:d0:e3:10:65:77:4e:19:20:50:71:ec:
         62:7a:04:11:1f:9a:d9:4c:60:9d:1b:2b:a5:fb:bc:60:ba:4a:
         56:48:f1:55:dc:98:01:b6:3a:b8:dc:b3:b9:48:b2:f9:e9:4d:
         1f:bb:9a:f4:2a:15:dc:8e:16:ae:58:32:68:98:c3:53:9d:d6:
         84:b1:f7:e1:2f:c5:40:e3:54:6f:11:c2:35:8c:d8:21:46:4a:
         2d:36:dd:a3:c4:33:7e:1e:f8:30:1e:33:a0:a6:b1:c7:33:05:
         e7:dc:fd:bf:ef:fb:38:62:89:04:dc:f6:9d:e0:9b:d8:d9:e3:
         fb:5a:6c:b8:fc:42:f4:f4:11:2f:97:b9:3f:d7:f2:e4:c7:3c:
         34:71:52:85:b7:49:0e:e4:0b:1a:5a:15:11:69:65:42:54:f1:
         41:63:53:d9:07:05:73:a0:36:b9:40:80:ed:e5:cf:eb:62:66:
         b7:9b:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:27 2024 by rpki-client on console-fra.rpki-client.org