Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71c24915-63df-3257-99c4-59b3ba82ec67.roa
File:                     71c24915-63df-3257-99c4-59b3ba82ec67.roa (raw, json)
Hash identifier:          g9SS7Wh74RBwr0rsFWFHIWoNo9tM3uHwgICWky/imjg=
Subject key identifier:   4C:4A:CC:BB:61:83:1E:5A:8E:95:F9:68:98:88:9F:61:25:54:4E:B6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AED4E845544E28A38A900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71c24915-63df-3257-99c4-59b3ba82ec67.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.107.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ed:4e:84:55:44:e2:8a:38:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=c63cfc40-3cf0-49dc-8397-dbe3282e5984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8f:84:f4:32:99:fd:fb:b3:d0:6f:76:74:e4:
                    06:c8:70:c5:34:d0:e3:5f:45:3d:bb:db:0e:6e:a7:
                    59:13:f3:25:87:ba:70:41:62:a9:2f:aa:da:ec:38:
                    fa:7f:17:ba:aa:45:ac:21:f3:9c:e0:d6:b7:bb:08:
                    38:a6:a4:b7:ef:3f:ce:a5:c6:bb:e4:2f:0f:12:15:
                    bb:4a:e3:f6:13:25:87:78:cb:41:c5:ff:7a:0f:bd:
                    59:0a:e2:20:39:da:7f:60:44:d1:7f:55:32:d9:54:
                    6e:d2:1e:a6:4c:93:f5:15:95:6e:83:95:69:f5:ec:
                    92:31:ca:12:c9:f6:c7:e2:12:47:66:0a:d1:e5:13:
                    33:3d:c7:c2:53:9d:bc:a2:70:03:41:29:eb:11:34:
                    eb:a2:7f:da:37:59:c2:fb:a2:15:a0:9b:5e:a4:56:
                    aa:28:4f:67:5e:6f:12:6a:1a:c1:d6:3a:68:9d:8d:
                    02:b3:de:82:db:f7:8f:13:9f:0e:22:61:11:ae:1d:
                    c1:9f:98:4e:a0:8a:70:4e:24:a0:c3:8f:92:89:9e:
                    be:fa:d4:96:89:da:0d:11:92:3d:c9:e5:74:fa:83:
                    4f:62:4b:f7:5f:27:f6:d2:6c:44:34:49:8c:d3:01:
                    aa:21:0a:93:f2:f2:c2:28:cd:f8:65:e1:75:00:d1:
                    68:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4A:CC:BB:61:83:1E:5A:8E:95:F9:68:98:88:9F:61:25:54:4E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71c24915-63df-3257-99c4-59b3ba82ec67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ba:bb:25:74:99:df:e3:c5:b6:2d:bf:aa:0f:28:1d:97:82:
         59:09:c5:86:89:11:ee:99:66:a2:23:47:a0:b0:c3:3c:c8:17:
         a4:f7:53:f6:b5:80:53:51:4e:28:8d:52:fc:56:71:b6:a3:e4:
         5e:b1:c4:05:ba:b9:63:d2:47:48:03:1a:96:c2:6b:d0:70:21:
         05:4a:a3:61:9b:7c:7c:73:da:8f:1a:62:66:cd:da:9e:f8:4d:
         cc:7e:b2:05:cd:11:45:ed:84:09:68:62:9a:da:dc:81:af:af:
         31:ec:96:a6:51:86:1d:e6:96:ea:f6:a4:c9:8e:f1:3c:30:63:
         94:49:14:ac:5e:05:f1:25:f4:f1:e3:df:da:72:7d:48:25:f3:
         20:fc:bb:f6:20:f8:39:f1:c9:11:14:c5:f2:08:b8:8d:37:ed:
         25:a2:61:db:20:00:87:9f:f6:83:23:78:e7:35:f2:17:4e:f6:
         38:0d:82:93:e5:a9:76:88:fd:41:52:b7:23:a9:c9:b3:60:42:
         45:8a:4b:8d:d9:e7:6a:3a:95:3d:9b:4d:09:d1:51:7b:a9:c8:
         88:48:a7:3f:11:79:e4:79:75:2f:ad:c4:a8:22:2f:70:78:ca:
         62:39:7a:d9:c7:8e:7b:2b:1c:b1:d9:5d:04:a6:ae:80:bb:45:
         70:8e:1d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:58 2024 by rpki-client on console-ams.rpki-client.org