Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/680d0eb9-dd38-35fb-a0d3-6eab9013ffec.roa
File:                     680d0eb9-dd38-35fb-a0d3-6eab9013ffec.roa (raw, json)
Hash identifier:          lj4E3IUIZWw8lfMR5dZB03DVZsJXzzTunYN22DKfJ4c=
Subject key identifier:   09:E5:A1:0D:D7:5F:61:53:8B:17:B4:37:CC:0C:46:60:4F:B7:73:99
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A5B743619ABB2F033D140
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/680d0eb9-dd38-35fb-a0d3-6eab9013ffec.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.107.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:5b:74:36:19:ab:b2:f0:33:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9abdd692-46c1-4664-852c-339720311e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:14:e0:30:b8:42:71:8b:46:cc:54:a1:30:
                    a6:8d:25:3d:28:8a:92:16:41:65:25:c8:51:33:67:
                    f6:66:78:0d:df:ee:85:78:65:ff:59:04:75:d6:42:
                    7c:66:4a:60:ed:f5:b2:d8:2e:d5:60:d4:85:95:a3:
                    32:b1:4b:c2:98:97:0b:90:2c:aa:20:01:b9:2a:cd:
                    79:76:f6:eb:1c:13:c2:56:87:a0:5d:f6:5b:f4:27:
                    91:7e:7c:61:fb:46:78:08:68:79:55:15:24:bd:f8:
                    f2:5a:3a:09:57:cd:7d:d9:6e:c6:8f:07:ff:53:ad:
                    fb:ca:6b:2d:c1:5f:5b:96:54:5b:01:e1:d0:0d:f9:
                    37:c9:95:5b:f0:d3:62:e8:9c:05:b7:00:ca:11:97:
                    6c:0b:44:63:db:55:84:a5:90:5f:ba:f9:14:d3:77:
                    64:99:02:77:9b:32:f8:f7:86:bc:c2:2e:8a:24:cf:
                    2c:22:01:af:a4:60:62:7b:34:fd:23:f5:7a:ea:71:
                    87:24:47:90:c3:d7:42:bd:76:3e:b9:3d:1e:ae:54:
                    9f:9b:e7:3e:f7:21:64:79:8f:56:e5:99:4a:1d:31:
                    66:3c:ea:f5:0d:74:b5:49:20:b5:6a:61:9a:93:e0:
                    15:d8:64:93:00:0f:39:dd:55:2c:dc:1a:04:d8:a8:
                    eb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E5:A1:0D:D7:5F:61:53:8B:17:B4:37:CC:0C:46:60:4F:B7:73:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/680d0eb9-dd38-35fb-a0d3-6eab9013ffec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:80:ff:31:ab:9a:e3:1c:28:b5:38:35:0c:83:6a:35:53:25:
         b3:cd:dd:1d:53:a2:cc:a6:ba:69:26:32:29:ed:f0:12:5d:35:
         d0:60:c7:a3:2e:a9:24:6a:ca:c6:ea:4d:c7:b7:f1:5c:ff:a7:
         12:49:7d:b7:8d:2e:67:75:47:56:25:84:63:27:92:68:c0:6f:
         b4:fc:ce:2d:d6:29:35:25:32:6b:f8:48:f1:f8:a4:71:ee:c4:
         70:77:7f:8b:5c:09:e8:b7:da:53:d5:f9:30:21:c6:fd:9e:c5:
         f7:a0:18:b3:e8:71:34:4f:c2:8b:94:fe:2b:3e:f0:0b:06:b0:
         68:0f:9e:be:ce:d8:00:32:38:1c:83:fc:8f:d9:29:e6:0d:5f:
         ce:cc:45:6c:84:bf:ce:e4:f9:7c:ec:f4:22:6c:e5:c8:9f:fd:
         f0:29:e5:6d:99:75:3b:cd:6d:59:f7:fe:03:cf:b8:98:1b:36:
         22:c9:9c:b3:bf:74:d0:33:79:30:00:42:10:cd:60:b9:33:10:
         b0:3a:ca:c5:1d:90:2a:c7:55:f9:8f:78:48:7b:79:42:62:b2:
         1c:28:49:50:35:81:b5:f3:ee:74:b4:63:7f:39:9f:a4:c5:0e:
         d4:2f:22:23:aa:8e:4e:ad:b3:b4:da:78:3f:e4:cd:c0:e6:eb:
         49:0b:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:41 2024 by rpki-client on console-fra.rpki-client.org