Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/70faf072-daad-3184-a87c-8de8894bfc9f.roa
File:                     70faf072-daad-3184-a87c-8de8894bfc9f.roa (raw, json)
Hash identifier:          t+dJcmcjn15C74M+SzDyzMYPBQ1bAmsJ3dGfPSq022E=
Subject key identifier:   40:7F:9A:CD:6D:FE:32:28:F2:E7:C0:1A:51:50:3D:65:DD:61:D5:94
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D9778EEDB71ADE65D78C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/70faf072-daad-3184-a87c-8de8894bfc9f.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.105.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:97:78:ee:db:71:ad:e6:5d:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=b620e56f-9f7c-427e-acff-6e8652b2a2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:06:7c:39:90:86:9e:0e:bf:c9:a8:bd:45:
                    1d:5d:91:6e:f2:ea:d1:0d:ab:3c:57:69:79:1c:0b:
                    53:43:b2:4d:59:eb:43:46:89:c9:1a:a1:a2:2e:7d:
                    50:18:69:70:f2:21:30:1c:c2:d2:ef:38:18:f0:a4:
                    0f:b7:99:fc:36:7a:86:6e:3a:25:9a:5d:3c:31:c5:
                    10:0f:c5:e4:58:dc:fe:43:64:c0:6e:5d:a1:5a:d4:
                    d3:1c:60:f6:6c:be:a2:a0:e3:e7:a5:5d:3f:23:8b:
                    34:61:1d:ce:8c:b6:fb:bd:90:85:93:25:06:10:92:
                    7f:97:23:fe:6b:63:d3:d7:35:ae:58:ef:0c:d1:b4:
                    0b:8f:92:28:16:8b:db:9c:0f:16:08:f2:84:7f:f9:
                    8e:a8:c2:c9:5b:da:85:e8:78:c0:4b:87:83:b6:46:
                    2a:02:5a:ad:85:02:cd:73:bd:a0:e1:89:59:e6:27:
                    d2:71:2d:11:60:f3:1c:e9:36:02:34:08:b2:e9:1d:
                    3e:68:5d:91:17:46:04:f3:ca:9f:05:57:01:14:7a:
                    47:83:78:7c:7e:0f:0c:07:3a:52:c4:6a:fa:44:2d:
                    1f:36:46:0f:13:d4:fe:43:9a:91:68:20:13:c4:3d:
                    0d:23:05:50:c4:eb:66:49:62:3f:7f:55:42:5c:ce:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7F:9A:CD:6D:FE:32:28:F2:E7:C0:1A:51:50:3D:65:DD:61:D5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/70faf072-daad-3184-a87c-8de8894bfc9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:86:00:df:20:d4:52:e2:da:5d:28:44:f1:c3:4c:d7:a3:
         78:0d:d6:4b:ef:c8:30:a3:c8:0e:29:f4:60:e4:1d:1f:e7:4e:
         97:f5:97:75:1f:62:0c:28:60:c2:27:6b:34:96:6e:d7:f1:b0:
         a0:5f:bf:b5:a5:8a:5d:1a:ea:61:51:9d:38:fa:03:91:9e:62:
         a1:b1:6a:09:f1:d3:6f:18:ce:ac:f9:20:ab:e8:73:d1:21:08:
         ef:db:93:9a:99:e5:24:8b:51:40:48:58:67:a3:82:04:03:94:
         c4:88:5a:f0:2d:34:7b:23:76:4a:ee:4a:30:fe:21:99:49:68:
         66:4a:f9:5c:dc:5e:4a:52:38:08:38:d8:2e:22:2e:f1:3e:b8:
         15:e4:f0:bd:cf:dc:49:ba:6c:ea:f1:7d:de:3c:ec:5e:db:5c:
         5e:e3:3c:bf:f4:c5:09:f4:f0:3e:f9:28:21:8f:45:86:21:7c:
         ac:2e:a8:30:87:44:b5:f1:21:17:ed:d6:36:fb:6f:56:da:2f:
         9c:55:ad:c6:15:3e:6b:bd:44:4d:d0:bc:22:fd:4c:af:a9:5a:
         79:5b:48:20:da:61:0f:98:cf:6b:4e:da:e5:19:bc:6e:37:2d:
         9c:cc:98:e9:41:aa:a1:a2:b9:8f:7e:da:d4:1a:f2:a1:96:3f:
         ae:92:73:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:35 2024 by rpki-client on console-ams.rpki-client.org