Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90ba9edd-f9fa-3d24-98fc-e8aa1b1eccfa.roa
File:                     90ba9edd-f9fa-3d24-98fc-e8aa1b1eccfa.roa (raw, json)
Hash identifier:          VW7Z4s9nvtaCnI0c9R7gooCx/REkzenj0xSkOpJLvuo=
Subject key identifier:   1B:2C:6E:64:FC:D9:3C:B5:3E:AC:A4:D5:F0:65:28:F6:59:97:2A:23
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DA984BEDE634A492A7000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90ba9edd-f9fa-3d24-98fc-e8aa1b1eccfa.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.107.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:a9:84:be:de:63:4a:49:2a:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=523f04be-8e39-49ed-a5f6-3561e4be6a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:a2:06:ce:aa:d9:73:d8:86:d9:fc:32:2e:
                    c5:b7:a9:3e:61:a6:9a:8a:60:83:e3:de:c9:4c:8a:
                    ce:a0:b0:8e:d6:24:c1:c5:a7:12:75:9e:3e:0b:3f:
                    6a:2b:9e:1e:82:38:42:b9:43:b3:c1:f2:70:17:d9:
                    25:2a:05:4c:11:fe:ce:cc:63:0b:c8:b4:c9:04:c0:
                    86:02:36:9d:0e:3a:22:c0:6e:6a:38:a9:85:a2:19:
                    67:92:b3:36:5f:20:ca:67:30:c4:f2:05:d4:c7:d2:
                    30:a8:ac:ef:4f:fd:5b:b9:47:18:a2:0f:fe:25:bf:
                    a1:5e:4c:4a:78:a0:ad:d5:fe:ee:d2:db:43:a9:03:
                    e2:23:79:24:b8:b7:18:b8:68:7b:99:47:1f:8e:1f:
                    bf:87:7b:b5:7b:bf:24:40:ed:22:b7:4c:0d:b5:ca:
                    7e:66:1b:18:c9:d3:b5:74:4c:af:fa:2a:61:c8:3e:
                    78:f3:0a:07:94:4c:8b:29:f7:c5:4f:0f:4a:a6:1a:
                    dc:ca:a5:ea:bb:92:33:2b:d3:2c:e1:a7:6d:39:94:
                    39:1d:de:2f:d6:7c:58:a8:4a:5e:b9:b8:26:9c:41:
                    b6:84:4c:55:f7:f4:dc:94:9e:19:58:d6:ac:71:70:
                    f6:ea:53:8d:30:8e:b1:bb:60:34:c7:4f:a6:40:28:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2C:6E:64:FC:D9:3C:B5:3E:AC:A4:D5:F0:65:28:F6:59:97:2A:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90ba9edd-f9fa-3d24-98fc-e8aa1b1eccfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:33:52:17:1b:32:8c:0b:e9:73:a8:25:ae:ae:16:55:30:9e:
         80:6f:55:39:d4:6e:5f:53:b1:74:23:56:de:34:8a:8e:68:ee:
         74:0a:13:41:11:99:61:57:b5:f0:6c:d9:7d:3b:6c:ee:c6:ed:
         a0:c2:83:0a:b7:dc:94:bc:ac:4b:d8:e3:9d:11:63:fb:b0:46:
         9a:a6:93:1a:55:af:4f:e9:9c:99:95:25:da:c5:ed:e1:45:f5:
         88:ee:9a:d4:d9:f8:f2:a0:04:37:88:46:aa:48:0a:13:82:b6:
         99:b3:ba:ff:93:06:7c:53:f7:b5:73:8d:8d:7a:c8:29:de:d5:
         c4:61:1f:cc:22:ed:8f:89:ef:0d:13:51:ce:f2:5e:95:fb:02:
         cc:6f:e7:f5:53:8d:da:1b:1e:5b:75:3c:f7:7a:38:25:42:d9:
         c4:dd:80:03:dd:44:68:dc:4b:34:2b:52:02:47:77:cf:1b:20:
         ad:3e:10:47:89:37:32:c1:e3:52:f3:5b:9b:35:d2:9f:d8:6f:
         55:26:d0:e0:a0:b7:14:a6:85:0d:98:47:04:0b:e9:9c:2c:19:
         e2:ad:25:bb:60:ac:1d:2f:dd:6f:6e:3d:91:65:c4:a2:f0:60:
         31:52:e6:ce:03:25:3e:1b:fb:02:4c:b0:6f:1f:cc:fb:11:2f:
         7c:50:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org