Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/52898e70-eb6a-3cae-ac24-a2057e3e55bf.roa
File:                     52898e70-eb6a-3cae-ac24-a2057e3e55bf.roa (raw, json)
Hash identifier:          7g5p8g/v7rKp2QD3lvA7T7LorCAfc4qM+0Xtizb2ZuQ=
Subject key identifier:   2B:61:0A:44:7F:DB:41:02:1B:AD:F7:9F:56:85:4C:DA:71:9E:D6:04
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E1F6C624520E27B265180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/52898e70-eb6a-3cae-ac24-a2057e3e55bf.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.107.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:1f:6c:62:45:20:e2:7b:26:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=4216a06e-ccc9-4e12-a123-68c4034294de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:4e:77:82:77:6f:12:90:6d:c0:82:f4:69:
                    bc:6e:7f:72:5f:32:02:63:e2:79:a3:ab:89:cb:47:
                    ee:c5:80:4b:85:4a:51:fd:b3:89:a9:d9:8d:a0:9d:
                    55:d5:2d:63:d8:6f:47:1d:5b:a0:0e:31:a0:bb:6e:
                    51:f7:f3:eb:51:5b:b6:21:09:de:88:ff:ba:df:bd:
                    ab:17:e0:82:f9:79:e8:df:94:09:bb:09:e9:47:86:
                    52:36:40:cd:ec:16:74:5d:9c:3e:8f:41:fa:18:6d:
                    12:df:6c:43:3e:79:b4:f3:3d:29:25:00:b2:6c:e7:
                    f1:56:de:51:65:1f:70:24:e8:56:01:8d:4e:69:76:
                    d3:2e:5d:ca:6b:b2:b7:f6:9a:bb:69:d9:02:6a:a7:
                    83:38:d2:8c:9f:28:5c:d8:50:b3:5f:5c:f5:0a:6e:
                    08:ef:ff:1f:c2:2d:a3:4c:5b:b1:73:78:07:b5:01:
                    99:8f:bd:54:fd:2b:b7:d1:06:7b:af:c1:f4:33:cd:
                    eb:a1:2c:60:6c:96:49:82:09:a7:88:70:97:b6:e9:
                    77:61:d1:f0:38:93:ef:47:9d:b7:6b:ab:c1:e9:cd:
                    70:87:5e:69:f9:14:2d:3f:1d:8b:72:4c:5f:d8:7a:
                    20:d6:48:23:3c:d5:12:cb:88:f9:d0:d7:72:2b:cb:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:61:0A:44:7F:DB:41:02:1B:AD:F7:9F:56:85:4C:DA:71:9E:D6:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/52898e70-eb6a-3cae-ac24-a2057e3e55bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b5:37:14:70:2a:e8:90:1d:e8:b7:b7:d6:22:e2:0e:20:a7:
         ee:d3:ab:b0:82:ed:8b:ec:89:41:7f:a8:72:c5:b0:af:08:69:
         50:0d:93:db:90:9d:a0:dc:79:c3:46:42:14:60:bd:0a:31:0a:
         64:af:9b:23:4c:21:9a:15:63:87:6a:6a:84:76:86:0a:14:bf:
         8a:bb:ac:86:7b:0b:af:e1:29:6f:6b:58:e0:b8:87:db:d9:0d:
         17:76:53:f4:a4:b7:31:d0:f5:3c:7b:e4:92:ae:23:69:3f:35:
         3d:44:9d:14:31:dd:b0:b8:44:54:80:95:c3:da:53:c2:2d:89:
         39:70:a7:82:5d:48:86:ce:58:1c:ed:32:96:bb:38:b5:36:4d:
         9b:fe:c9:8b:ad:ac:47:bf:71:bc:22:a5:87:5d:d0:01:c9:a3:
         ce:2d:25:ff:e9:3c:c3:50:de:2a:47:30:1c:be:9e:fa:f5:dd:
         b8:30:00:83:73:ea:2f:89:73:e5:22:59:ee:de:d7:94:26:88:
         13:8b:65:c2:51:7a:43:da:af:30:80:ce:4b:a2:ee:f8:e6:fc:
         78:2a:d7:e0:7a:b6:b8:6d:60:ac:76:87:68:ca:f6:3f:49:2a:
         95:2b:12:75:bb:47:19:3b:37:ab:e4:de:8c:42:2d:87:e9:22:
         d1:0d:f4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org