Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1925d74-ee13-3d60-85ec-3f00217f0abe.roa
File:                     a1925d74-ee13-3d60-85ec-3f00217f0abe.roa (raw, json)
Hash identifier:          S7mo7yqg82G++eSa0pbvnM3iBUNgPChNoUccZhlZ6DE=
Subject key identifier:   B3:4C:46:9B:42:27:8A:EB:14:B3:57:6C:1A:B9:21:0C:AB:7D:91:C9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DA7E607A734A3BDB86900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1925d74-ee13-3d60-85ec-3f00217f0abe.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.107.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:a7:e6:07:a7:34:a3:bd:b8:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=2cdc3500-4aa0-46e3-bb73-360f6da05c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d9:eb:32:0d:46:a3:f2:91:db:6b:7d:fd:d1:
                    f7:63:50:49:d2:0c:6d:c1:05:e7:29:ab:39:46:d2:
                    9b:3b:37:01:b4:c3:1e:21:d4:f2:7f:3d:a1:f7:91:
                    bf:fd:bb:90:91:51:c3:78:25:d7:19:6a:b8:0c:83:
                    99:1b:87:8c:23:73:c4:9a:ff:2e:d4:0b:7d:47:65:
                    c3:78:bf:58:83:8d:19:5c:ab:00:68:14:1b:ca:70:
                    72:3b:f4:1d:a6:57:78:25:f7:a5:c9:47:ed:c8:66:
                    14:c0:fb:87:75:fa:f0:72:ea:03:48:15:17:11:eb:
                    7e:aa:c2:92:e4:8f:81:bf:33:07:05:60:16:42:eb:
                    2b:28:49:e8:f4:a8:21:a5:80:d0:74:43:68:e8:42:
                    6d:ec:a2:fd:eb:66:5f:e1:c9:57:ed:71:e3:43:85:
                    1d:a4:11:26:75:d6:3e:58:38:26:4e:e8:3e:51:01:
                    0b:aa:55:81:07:ea:3c:b7:3e:f3:ac:ac:fb:cf:b6:
                    ba:22:3c:1b:b9:2b:1f:49:af:52:52:1d:12:1c:61:
                    ee:84:fd:e8:a5:55:b5:40:a4:f3:6e:6a:39:80:3f:
                    eb:bf:79:6f:78:fb:cd:74:50:99:79:8b:d4:28:9f:
                    80:6f:d7:9b:0d:03:96:16:db:aa:f1:03:68:2c:2d:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4C:46:9B:42:27:8A:EB:14:B3:57:6C:1A:B9:21:0C:AB:7D:91:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1925d74-ee13-3d60-85ec-3f00217f0abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:a2:3f:b5:a5:65:9d:26:90:9f:e9:5a:3b:57:94:7c:d7:1b:
         86:5e:f4:41:8f:20:34:f2:7e:2b:20:72:da:94:d6:a2:20:15:
         a3:10:30:ea:90:57:06:0e:b0:3a:47:8b:c6:d4:fb:24:5f:9c:
         eb:53:0c:8c:c7:c9:52:20:f1:68:c8:e4:ad:c6:8f:59:ac:2c:
         a7:5e:2c:a5:c5:3b:79:f5:bb:23:40:2c:f0:08:37:94:a8:d5:
         65:f4:cd:8b:71:fd:3b:55:11:86:ad:54:77:de:91:3a:b4:3b:
         16:6a:e1:c2:4b:be:8b:84:dd:30:64:33:02:db:b5:f3:3a:82:
         7a:11:d9:74:00:fa:aa:d7:2d:7a:2d:eb:f0:09:e7:6f:6a:7e:
         41:71:d2:e3:ed:ec:a5:1b:a5:e6:8a:c5:28:2f:a4:de:e1:fd:
         02:37:dc:56:78:95:a7:ee:fc:6b:ca:d8:88:77:0e:97:a9:ad:
         c0:a7:2a:0c:4d:83:9b:5a:a7:c9:42:09:3d:f4:81:bb:fc:e2:
         bf:a7:39:37:6f:19:ec:60:1b:b0:c4:67:97:a0:20:36:45:7a:
         24:fa:e4:ab:2e:d2:99:e8:5b:73:3f:b4:eb:57:8e:37:3e:3c:
         b5:de:35:17:e4:2d:c4:a4:ba:de:3c:3b:a1:c1:99:fa:c7:07:
         e5:75:35:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org