Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91ca6ba1-d817-38a1-937d-a128bd0487d7.roa
File:                     91ca6ba1-d817-38a1-937d-a128bd0487d7.roa (raw, json)
Hash identifier:          s9Jz4p1cjC8uC6v8HpFLxpOkdcclEjOAl2PeGdNKD4k=
Subject key identifier:   33:72:7C:73:DC:D4:56:03:77:6F:C1:2B:F6:52:C5:D7:AA:00:A1:34
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E196025DF349CD1D9F900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91ca6ba1-d817-38a1-937d-a128bd0487d7.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.106.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:19:60:25:df:34:9c:d1:d9:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=ba3c2925-e26c-4f3f-82f2-80b2f00e308e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b8:86:b4:1d:8d:a8:3b:68:5e:a0:08:ef:79:
                    04:72:51:0a:ac:e3:44:17:86:76:4f:04:3b:a4:e3:
                    52:ea:07:97:60:10:3f:09:f5:ba:8d:a3:aa:b4:67:
                    0c:81:68:49:ef:fd:61:8b:9b:31:9d:34:5c:64:1a:
                    e7:86:7a:c4:42:26:95:49:32:eb:33:3d:62:63:50:
                    19:85:7a:f1:b1:c7:fc:36:c3:56:db:b2:5e:40:6c:
                    f7:2a:7d:d0:f9:eb:af:b0:ef:f3:7f:39:62:db:7f:
                    7e:f4:6a:68:bc:d2:f0:01:a8:64:2e:40:82:7d:27:
                    bb:68:22:98:b9:ea:00:2b:68:4c:93:a1:89:70:64:
                    f9:43:89:43:6a:a0:62:db:a1:17:5b:9e:91:14:3a:
                    ea:a7:2c:d0:26:2b:21:f9:71:05:8b:0c:26:41:07:
                    80:c4:e3:56:1a:03:1e:c0:1b:13:a2:d4:48:a0:52:
                    65:66:5c:c3:61:2c:ab:40:e3:0c:86:84:3c:5a:2a:
                    0d:01:3f:ed:83:a8:30:6a:d9:25:f6:e7:60:9e:c3:
                    2e:fb:00:ee:bb:87:1d:6b:36:a5:c2:1c:0a:a6:32:
                    93:2a:49:50:3b:e3:07:c5:94:fd:06:56:46:49:89:
                    7c:28:e8:69:c1:02:a1:ed:65:68:7f:6c:be:c2:93:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:72:7C:73:DC:D4:56:03:77:6F:C1:2B:F6:52:C5:D7:AA:00:A1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91ca6ba1-d817-38a1-937d-a128bd0487d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:63:0d:4d:58:32:70:9a:97:ce:cc:86:c2:a2:91:a6:d2:15:
         e4:56:43:7f:5c:b4:b0:f2:8d:b2:d7:9f:21:ae:84:88:ed:9e:
         a3:cf:17:3c:fb:cd:77:17:79:bb:92:18:7e:38:44:68:fc:d2:
         55:08:6d:cc:22:eb:0a:89:59:10:66:3b:fe:b8:bc:ef:10:39:
         37:2a:39:37:50:dd:83:d1:cf:41:e3:c7:45:48:65:55:f1:37:
         8a:b5:06:39:eb:a2:af:3e:bc:d7:50:d1:1d:fc:da:51:2d:e5:
         5f:a4:bf:f9:3b:51:92:bc:a9:f4:a0:28:10:2d:c2:8c:09:55:
         0d:6d:b6:c2:96:9f:f0:cf:fc:0d:07:15:16:23:65:9e:94:b7:
         5f:ad:ed:93:2e:16:33:1f:fd:4b:a5:6c:80:4a:7c:08:f4:5e:
         f5:0a:eb:dc:40:b4:75:04:bd:27:66:af:16:50:43:14:67:32:
         91:22:e7:dc:09:4f:2e:0b:91:f7:07:07:35:2a:3a:dc:5c:18:
         5d:72:b1:22:2e:5a:68:6d:6a:a6:6b:9e:c3:64:b5:a1:fd:13:
         ad:e6:77:6c:eb:fa:fe:aa:61:7b:91:0c:2b:48:7e:10:44:21:
         0f:33:fb:96:24:fd:0e:70:64:c8:e7:94:50:5c:28:d5:4b:8d:
         3a:c2:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org