Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a208115-21b3-3d5b-92f8-8888b70185b4.roa
File:                     5a208115-21b3-3d5b-92f8-8888b70185b4.roa (raw, json)
Hash identifier:          Knmi5hOSrJOnGRPoLX3A3rCK5Sn9xs5QS+gwxzGHdgI=
Subject key identifier:   72:26:42:E5:6D:10:0D:38:3B:DF:27:47:72:A1:03:F7:B6:30:2B:45
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AE4DFD521C7B4D49A9670
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a208115-21b3-3d5b-92f8-8888b70185b4.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.106.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:e4:df:d5:21:c7:b4:d4:9a:96:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=df9ef5ff-98e5-4c66-b3f0-027278267d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:84:4a:18:48:b8:4e:98:f0:fe:52:fa:48:
                    a6:78:45:7b:9e:6f:e2:8e:45:82:04:9e:80:da:b2:
                    89:13:3d:0b:aa:da:6b:1a:9e:a4:69:be:39:37:b4:
                    6d:ae:dc:19:d4:a3:45:db:72:f5:48:5a:19:0a:19:
                    94:97:c1:8b:ee:45:2f:e9:f3:8c:81:47:f4:c0:7e:
                    fc:e5:dd:08:a7:cb:66:bb:a3:6d:f4:3b:94:a9:17:
                    f1:85:3f:b6:09:51:a6:dc:89:6f:10:7c:e1:85:c2:
                    36:e4:6f:50:7a:3f:a7:ab:35:02:d3:89:b3:ea:b6:
                    3c:8e:0d:68:fb:45:64:5d:42:e0:83:86:cb:fd:7a:
                    0c:8f:cc:b1:43:c6:99:0c:17:8f:b1:3f:e8:85:3e:
                    ec:87:97:5c:5f:12:93:6d:82:d3:d3:fe:9b:30:cf:
                    50:8d:c7:15:c1:56:d1:c1:e1:db:90:b0:26:9e:99:
                    dc:d1:5a:5d:11:8a:b1:37:e9:ce:31:c5:94:80:cd:
                    11:c5:4d:7f:57:2e:15:fd:45:35:f2:0d:85:17:32:
                    44:e5:28:12:0e:82:75:40:5a:97:ae:89:87:aa:8a:
                    88:54:9a:8b:2f:7b:00:7b:18:1c:9c:5d:8c:7a:3f:
                    90:6f:3c:57:cc:83:d9:27:8a:53:90:54:56:3f:fb:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:26:42:E5:6D:10:0D:38:3B:DF:27:47:72:A1:03:F7:B6:30:2B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a208115-21b3-3d5b-92f8-8888b70185b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3b:ff:ea:d0:13:20:a8:40:b6:35:8d:2b:1c:a8:32:cb:05:
         e9:68:56:0c:36:01:70:bf:d2:77:c2:1f:03:3d:50:35:32:1d:
         87:38:8a:4a:2b:1f:e6:a4:33:1d:8d:f1:39:87:0c:b5:0f:48:
         8c:c6:9d:a9:cd:77:c1:90:f7:c0:61:a9:82:34:12:6f:49:66:
         a3:55:33:79:91:81:68:1b:27:35:dd:82:b2:56:6f:95:04:48:
         65:8e:3f:ac:16:03:b6:72:dc:5f:e0:30:22:8c:cb:a9:78:d4:
         a4:da:5f:91:91:81:6f:61:f9:74:9b:d1:b7:fc:65:18:d3:8a:
         90:dd:59:be:b7:f3:63:5f:92:1c:32:08:2a:0c:d7:16:5e:a6:
         06:3c:2c:65:65:41:7c:af:21:85:2d:74:ca:37:27:d2:7a:cc:
         2b:d4:08:3c:41:25:7e:92:a0:ce:1e:a4:b5:5c:5b:9c:57:33:
         9c:ea:1a:d9:d1:9e:4e:0a:95:7c:95:b0:49:5a:60:c2:fd:92:
         c4:ce:3f:8d:ee:cf:aa:01:5b:e2:0b:7e:9f:9c:49:bd:f5:9a:
         a5:c6:5b:af:a4:aa:34:2f:c0:cc:ac:77:99:ff:22:a3:a7:69:
         c7:39:c6:bc:1a:8c:7c:38:2b:90:07:95:b9:2a:13:ff:14:ce:
         8a:22:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:17:17 2024 by rpki-client on console-fra.rpki-client.org