Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/949e3dd9-83f3-3814-b3ac-ef8960273198.roa
File:                     949e3dd9-83f3-3814-b3ac-ef8960273198.roa (raw, json)
Hash identifier:          qJFs7V01T+S9W8LqvmpXuWfEorGaBlDWTW4YyUteASQ=
Subject key identifier:   E9:64:9B:3C:FE:07:35:A6:FC:C4:A8:03:94:36:7A:47:DC:C4:9A:47
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AE5E5AB1204259586BC18
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/949e3dd9-83f3-3814-b3ac-ef8960273198.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.106.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:e5:e5:ab:12:04:25:95:86:bc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ad55d41e-6927-4244-b6b8-b515a1433ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:c2:6b:ce:be:40:5f:ac:f1:76:e6:68:4a:
                    65:2c:ce:3d:cf:e4:95:23:a1:04:75:8b:1d:70:f0:
                    0e:cf:2a:aa:d1:30:af:75:0e:63:9d:77:40:8c:bb:
                    46:cc:85:b9:55:2a:b6:a1:2a:e7:de:56:c1:ca:22:
                    5f:f2:d0:f4:f0:ee:aa:f5:03:0f:fa:73:6a:6c:65:
                    e4:49:22:4e:0d:91:7e:21:11:64:47:ab:e7:0b:a5:
                    8f:2f:13:69:97:d2:d4:95:8a:c6:d0:81:18:31:6c:
                    56:22:6b:a4:a5:52:c0:33:ea:5f:56:31:bf:b4:62:
                    2a:28:54:1e:54:51:ae:f8:e3:e8:01:38:36:fa:60:
                    81:50:83:e6:78:1c:d4:ac:4f:27:9c:fb:a3:7f:c1:
                    f4:3f:07:0f:c1:f2:6e:b1:24:6f:ab:94:f2:71:d1:
                    6f:3d:8b:57:e5:8e:1e:50:13:44:64:72:a8:61:98:
                    41:45:5d:1a:af:c4:00:dd:73:3a:35:57:dd:7b:92:
                    c2:24:0b:ff:f7:fb:70:e7:b6:18:c4:c2:8e:f1:85:
                    f3:86:34:b4:e1:ad:46:06:fc:a3:27:05:59:ff:b8:
                    37:f7:8e:da:73:1a:9a:5f:d4:7d:ae:ef:88:1c:92:
                    e7:0f:52:9d:f5:0d:2f:ee:75:3f:4b:03:aa:f8:69:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:64:9B:3C:FE:07:35:A6:FC:C4:A8:03:94:36:7A:47:DC:C4:9A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/949e3dd9-83f3-3814-b3ac-ef8960273198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:1c:06:45:bf:86:61:98:f7:fd:12:0d:1c:b6:98:61:a9:2c:
         57:11:88:e6:40:19:c0:3b:f3:f9:fd:c2:ec:1f:48:2d:7e:3c:
         2b:82:ce:2a:a2:bf:20:84:36:5e:c7:f8:60:1e:b5:40:b9:42:
         fa:2a:8c:28:42:b2:bd:06:9d:02:b8:27:01:65:f8:3c:39:15:
         53:86:74:e2:60:fb:32:45:8e:e2:e3:49:bc:62:03:78:fb:0c:
         da:44:c1:30:f7:e2:09:62:93:24:4e:be:ec:d0:95:5d:cd:20:
         60:9d:28:a4:00:2b:f4:a9:9a:e2:08:fe:cc:35:83:eb:2e:52:
         34:8b:c1:2c:63:37:f6:6a:16:15:2b:bb:04:8f:39:f7:45:ad:
         c7:ea:b4:9b:11:40:ae:88:df:28:e7:9c:eb:64:4f:06:41:71:
         bb:1e:01:d6:00:19:c0:ff:f7:f9:89:a7:b2:75:c2:8f:bc:76:
         c2:d4:45:ba:fa:b9:3c:fd:ce:50:19:7b:bc:12:e1:f1:9d:40:
         ce:e6:82:5a:0d:83:44:01:3b:a0:1b:d7:1c:fa:a3:65:cb:a0:
         bb:d2:86:ec:0e:70:5f:da:27:41:39:a0:ac:12:77:1f:2f:c5:
         e4:f0:05:40:ea:94:ce:e4:40:bb:05:37:69:34:43:a8:43:38:
         e2:33:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:38:29 2024 by rpki-client on console-fra.rpki-client.org