Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a919caf-b15a-3e42-ab82-c9edb5f4faff.roa
File:                     4a919caf-b15a-3e42-ab82-c9edb5f4faff.roa (raw, json)
Hash identifier:          ysS7LeIsS1NHYgfyO6voV7O5Jgg45JOI98aZeYtsWaw=
Subject key identifier:   EE:1B:8C:02:95:BA:98:B4:24:B1:C6:46:50:D2:42:EB:90:51:54:70
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DA71DFDFD610AD2B24D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a919caf-b15a-3e42-ab82-c9edb5f4faff.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.107.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:a7:1d:fd:fd:61:0a:d2:b2:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f008eddf-ed7d-44aa-9551-87e5f10e9a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:be:25:73:25:f1:19:e8:83:d3:65:24:3b:
                    4b:a1:77:43:fe:39:46:6d:ef:99:c5:a7:2e:a4:7c:
                    1f:76:d5:bc:47:f0:92:78:20:4c:97:e9:e4:e2:fc:
                    b8:54:67:d4:26:ac:0a:78:d0:09:62:ce:0d:de:13:
                    e8:29:26:e7:bc:2c:8d:1a:d8:47:21:40:ca:16:99:
                    9e:33:95:12:8c:02:fb:70:82:ec:bc:54:df:bd:7f:
                    21:e3:fa:35:7c:e9:d3:0f:a1:e1:14:eb:ca:6e:f9:
                    5d:71:0f:f6:4d:9a:cd:ed:98:a2:7e:6e:16:e7:a2:
                    84:59:18:72:fc:70:26:c4:1b:57:ad:e9:de:7f:80:
                    f6:af:b8:d3:e9:e8:dd:61:2f:c9:9d:6b:b0:30:ba:
                    82:8f:ff:04:5b:12:3b:9b:23:07:6b:95:07:cd:3f:
                    5e:28:56:cc:d3:c9:f4:2f:f2:b8:bf:36:6a:b5:b5:
                    68:38:68:b5:c0:f5:2e:e8:80:6f:e2:cc:d3:3b:0b:
                    5a:9f:a8:a4:99:8e:b6:bb:2e:e6:3a:84:d8:25:98:
                    3b:82:1d:ee:3f:fd:61:42:e8:64:3d:81:8f:04:b8:
                    e4:3d:14:f1:e6:86:ce:a3:15:22:8e:69:36:c9:a0:
                    97:99:80:91:04:65:ae:fd:a5:da:61:54:b0:62:cd:
                    e5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1B:8C:02:95:BA:98:B4:24:B1:C6:46:50:D2:42:EB:90:51:54:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a919caf-b15a-3e42-ab82-c9edb5f4faff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5f:5f:1f:78:15:95:2b:ba:34:78:a4:9e:21:68:24:c0:96:
         73:82:aa:10:79:58:5b:5a:77:52:70:c9:9a:74:8a:65:c2:f6:
         7f:e2:7e:b0:6a:55:a6:24:63:31:64:8c:74:80:f8:28:aa:83:
         96:a3:15:f5:aa:09:8c:93:5f:89:e2:4a:67:be:98:6e:e2:14:
         4a:c3:30:29:1e:e9:8f:a4:e3:0f:28:a2:26:ab:b5:cf:ba:37:
         3c:d8:af:39:62:c9:c9:22:f5:65:0d:24:e7:da:da:bf:36:bf:
         98:67:c3:9e:66:0e:bb:52:d1:f4:c4:8b:f1:8f:b6:5b:32:12:
         c6:f5:70:31:b8:0e:7d:16:96:c4:07:01:5e:5f:6e:c0:93:be:
         85:4b:92:50:cc:bd:82:8e:8a:ed:b1:33:aa:3e:75:a5:27:5b:
         a9:79:39:f0:79:d7:e6:03:a7:b7:f0:3f:02:9d:fb:25:f1:89:
         5f:c0:2b:ea:d0:fd:71:ad:5f:9d:95:48:78:00:8f:3f:01:11:
         8d:57:69:89:1e:dd:95:e0:ce:f0:92:c4:82:6d:aa:a3:29:ec:
         b3:63:99:53:6e:2c:56:c6:46:0f:a3:2c:e1:02:e6:b4:f5:9d:
         4b:0c:d1:99:71:7a:25:57:f7:63:95:6b:2d:e2:a7:c5:cc:df:
         3f:4b:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:38 2024 by rpki-client on console-ams.rpki-client.org