Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c739986-e18c-3d80-a7af-fae5e7c583ac.roa
File:                     7c739986-e18c-3d80-a7af-fae5e7c583ac.roa (raw, json)
Hash identifier:          NHe5eKTQrt1IoTBqxIWBv7HLw3h2ruUoxnYxjQ17WWg=
Subject key identifier:   88:74:42:9B:AD:A9:D2:70:1B:26:59:CD:73:98:6E:83:68:EA:3B:F9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A5C811633B8BE20D44E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c739986-e18c-3d80-a7af-fae5e7c583ac.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.107.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:5c:81:16:33:b8:be:20:d4:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a375272d-b99b-4b48-8087-bbd1cfdb99a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7e:18:a1:d4:62:63:f6:a9:bb:c7:78:15:7b:
                    d6:e4:78:93:75:77:3a:62:c8:76:7f:da:5d:2a:d7:
                    98:2c:d1:a3:ed:90:14:74:5c:a2:3c:f4:f0:09:5f:
                    bc:18:fc:c9:31:63:34:a9:fb:00:61:ef:88:38:20:
                    ef:c6:f7:c4:73:e7:5a:3f:ff:47:f0:f5:44:94:9f:
                    1f:2d:8a:2d:2a:59:3a:e4:8b:6c:25:a7:c8:2d:13:
                    f7:eb:4f:37:4e:5f:c9:b5:2d:54:b2:cf:7f:7b:9b:
                    b5:06:cd:d4:84:71:af:f1:01:6b:2c:8f:a2:94:9a:
                    21:4d:ee:1a:46:92:08:51:3b:1f:64:e1:d3:4c:35:
                    94:65:79:3f:a2:d2:ab:a6:86:24:96:97:6e:6c:07:
                    ed:59:b6:b0:e2:8c:d0:54:6e:bd:35:78:8e:36:f6:
                    b5:de:36:e7:fb:4c:29:a2:cc:be:a8:81:68:f5:03:
                    89:38:6c:40:dc:22:b3:4e:ce:95:b1:85:31:be:05:
                    39:fb:92:69:09:bc:72:19:09:e6:ca:69:56:9c:86:
                    45:dc:3f:ef:92:55:4c:0c:00:26:a9:fd:f5:2f:4d:
                    24:87:91:ea:64:63:c3:ca:56:30:98:d2:23:01:2a:
                    6d:56:ac:a2:c0:06:06:76:6c:80:6f:b0:fd:65:b7:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:74:42:9B:AD:A9:D2:70:1B:26:59:CD:73:98:6E:83:68:EA:3B:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c739986-e18c-3d80-a7af-fae5e7c583ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8a:2b:86:ef:a5:ca:0b:c2:09:d6:59:97:89:f2:65:b2:0c:
         7d:b3:97:32:bf:8a:92:9b:54:f7:8b:97:d3:da:46:d9:1b:41:
         27:c0:c5:e0:43:79:e3:a2:b1:38:43:14:f7:f7:dc:53:09:a0:
         02:30:b0:e8:9a:54:c6:74:22:28:ff:6d:37:a0:65:aa:05:8a:
         36:e2:df:eb:1c:66:d6:f3:8a:1c:c4:b9:a4:08:70:4b:22:29:
         15:5e:6f:07:f5:20:82:e6:af:f9:c8:3c:23:b5:c1:fc:8c:13:
         27:df:e7:c1:5c:a0:97:61:bd:46:1b:65:f2:41:1d:e3:7f:58:
         b4:b4:44:49:85:ed:ab:c4:06:6d:b8:44:ce:54:77:b3:18:3d:
         08:df:02:b7:fb:b9:a8:a1:95:af:b9:e3:2a:21:3d:08:d2:b7:
         4b:c4:f2:48:ad:23:ce:06:2a:17:ed:48:3b:63:1a:cc:10:4e:
         76:71:e3:71:3d:68:42:5f:cd:28:93:9f:95:1e:6f:21:56:0d:
         39:c8:a1:78:79:81:70:09:a8:4e:03:b7:c0:40:d8:d9:f9:ae:
         f7:31:e7:17:ee:78:a0:44:61:bc:c6:37:90:47:5f:57:fa:91:
         34:fc:4e:8e:dd:b9:8a:a8:af:93:bb:96:a5:a0:db:d2:5d:aa:
         23:34:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:50:26 2024 by rpki-client on console-ams.rpki-client.org