Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fe510d-4ee8-3487-b371-188581da182a.roa
File:                     85fe510d-4ee8-3487-b371-188581da182a.roa (raw, json)
Hash identifier:          pRokuapJwnduq3qpPHPRJRdGmut9/Eu8fC3QzRvvMjE=
Subject key identifier:   3C:95:8F:E7:EB:A1:DD:F1:0C:20:1A:D8:FB:F8:38:E3:99:2C:04:4C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D9710DA6082B25B75AFC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fe510d-4ee8-3487-b371-188581da182a.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.105.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:97:10:da:60:82:b2:5b:75:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=4794fbcb-62ce-42c2-8706-23b8ba060c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:79:9c:b4:92:9c:9a:47:00:7a:3d:8d:98:
                    48:48:bc:0e:58:50:ba:01:70:9e:fb:d9:dc:e9:39:
                    d5:db:d6:24:34:96:b9:80:0f:b1:c9:24:57:d5:52:
                    71:cd:12:67:e1:82:98:9f:f6:d3:9b:4f:43:bb:60:
                    a1:b7:39:5e:07:b0:63:fd:75:8e:f7:f9:53:1c:e5:
                    8d:a9:87:cd:8b:40:6d:32:1e:1f:5f:81:f4:1b:51:
                    b7:b2:07:ef:5e:05:b9:35:54:80:3f:ad:00:be:f9:
                    1d:c5:d4:01:b1:f2:e5:4d:54:c7:e1:4b:ba:79:8b:
                    98:18:c3:72:c4:3b:b2:8e:64:9f:a3:6c:c2:b4:e1:
                    78:31:88:cb:50:0d:99:12:78:37:67:01:bc:77:fa:
                    ef:5a:64:86:fd:5f:68:c0:02:13:50:31:d4:fc:d3:
                    a4:8f:4b:d8:7b:41:ac:e6:b6:00:7c:75:02:08:b0:
                    be:9b:8b:30:57:db:55:9c:05:15:c2:ca:99:5f:3a:
                    48:db:7c:b0:83:0d:b9:25:30:2e:67:0d:4a:86:ac:
                    28:1c:24:eb:14:37:c1:09:b4:c6:89:2c:74:bd:28:
                    6b:20:2d:90:85:cc:7c:e4:10:fd:43:3a:fe:0f:73:
                    20:01:48:44:ae:c8:76:d2:be:d1:7b:8b:2a:61:0b:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:95:8F:E7:EB:A1:DD:F1:0C:20:1A:D8:FB:F8:38:E3:99:2C:04:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fe510d-4ee8-3487-b371-188581da182a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:71:9c:44:5e:f6:34:8e:9d:e9:8e:a3:4e:e8:f0:22:d3:c9:
         52:da:d3:03:47:4b:9c:1e:63:77:0c:cd:de:9c:5f:92:b1:82:
         79:72:34:32:c3:12:5c:8c:36:2e:81:7f:b5:74:57:9e:e3:e3:
         00:97:1f:1b:17:3b:83:d6:e2:a1:42:ee:61:5d:50:bd:f6:a1:
         0f:0f:40:0e:b3:be:69:f8:27:4e:bf:a1:18:2b:62:9f:ac:b3:
         66:b6:d6:1b:31:72:1e:3c:f7:6e:14:50:70:5c:b0:ac:a7:40:
         46:d2:92:fa:b3:64:88:eb:80:d5:d7:1a:7b:30:61:87:7d:1e:
         45:2c:06:bb:61:f5:58:e4:38:47:f9:b4:87:b7:d1:86:85:c8:
         1f:c0:76:a9:1b:5d:41:e2:91:b2:9a:50:8a:2d:21:53:5f:b6:
         3a:2e:f5:77:a1:e8:64:ef:6d:fe:67:fb:50:a5:bd:40:f7:8b:
         29:c5:17:8f:5d:9b:40:84:71:ef:eb:d2:b0:02:2e:74:21:2b:
         26:2e:a5:f3:41:06:20:1d:77:b0:1f:86:59:3d:f8:94:2e:75:
         e3:8c:2e:0e:d1:2e:0c:73:52:e6:7f:dc:da:66:c6:dc:73:80:
         8d:bf:c9:1d:2b:98:83:7d:c2:34:16:01:ab:c1:0b:0c:87:8e:
         32:40:3d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:40 2024 by rpki-client on console-ams.rpki-client.org