Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a57e9add-eed1-3a36-8bfa-27b089f42d44.roa
File:                     a57e9add-eed1-3a36-8bfa-27b089f42d44.roa (raw, json)
Hash identifier:          cA/KV55pEILPkupPzWBv0lWo1gzKzWOnwW2fjl3qXWA=
Subject key identifier:   B9:F8:39:A9:46:3C:DB:92:1E:70:5F:15:C1:2D:4B:FE:87:3A:84:BB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E1B783DB12FDD0B1955C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a57e9add-eed1-3a36-8bfa-27b089f42d44.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.107.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:1b:78:3d:b1:2f:dd:0b:19:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=b88e4da1-dd64-4d34-a170-ace41d924ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:12:46:34:30:12:2a:1b:03:14:69:96:ab:
                    cc:bd:03:d4:ad:ae:65:0d:de:1e:09:22:00:bb:01:
                    8e:7d:25:b7:70:7d:b9:ab:f4:42:39:30:0d:81:f1:
                    a1:84:18:44:11:a2:9e:f9:cc:cf:3c:38:f1:c5:25:
                    01:7b:e6:d1:10:ed:8f:20:06:db:53:a7:4c:55:44:
                    99:1e:89:5f:54:ca:46:04:b0:c3:6e:46:73:f6:59:
                    d1:bd:57:61:ab:ff:6b:e0:69:c9:58:d1:69:62:7f:
                    56:56:20:0f:22:47:24:28:d4:d1:1b:f6:29:a6:91:
                    81:69:5a:6b:d8:85:a6:96:54:4a:22:80:9d:6d:be:
                    dc:11:ea:0c:99:a1:b2:6d:4d:dc:1f:91:ce:6a:8e:
                    ed:aa:06:60:2d:1c:b0:11:fd:bf:17:86:90:98:5f:
                    33:a8:72:2e:c5:b6:5f:68:52:97:49:1f:7e:86:63:
                    04:ed:8c:88:80:ac:15:86:e1:87:5a:95:7f:b4:ee:
                    4e:8d:a0:c2:62:08:82:13:1e:fa:34:a9:4a:a9:36:
                    0e:b8:f3:eb:f9:0b:56:bf:25:5d:5f:a6:57:de:d9:
                    5c:d1:a3:73:0d:4b:00:c1:76:bd:96:55:d6:91:56:
                    16:a1:8c:87:36:c6:a5:92:69:56:28:8d:bc:62:11:
                    4a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F8:39:A9:46:3C:DB:92:1E:70:5F:15:C1:2D:4B:FE:87:3A:84:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a57e9add-eed1-3a36-8bfa-27b089f42d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8b:1a:7d:3b:f2:c9:24:a4:be:5e:da:d9:ea:04:05:5b:5c:
         8d:e8:65:6a:c2:4b:8d:4f:1e:47:e2:2e:74:d3:da:62:88:7a:
         c8:64:2a:12:31:f3:6b:29:43:3f:79:d4:12:08:6b:5a:d2:3c:
         f5:c0:27:2f:23:3f:58:64:58:e3:46:68:e6:5d:db:76:d3:db:
         be:c9:28:df:e0:98:6a:f0:7d:fe:ac:3c:cf:48:66:ea:82:47:
         72:f2:e3:cd:43:a4:87:83:44:21:23:5d:db:e2:19:0f:26:a0:
         ef:e2:49:a5:8e:23:7e:25:bc:f9:ae:9e:17:0b:14:b9:11:67:
         a1:e5:ef:c8:f6:48:9f:aa:a4:f8:d0:c0:41:33:5b:6b:af:e3:
         a7:86:61:3d:72:9b:02:a3:e9:05:eb:7e:19:6a:06:ce:c5:d3:
         c3:04:ce:0c:bd:e2:46:d7:6c:e7:76:de:22:98:8b:1e:3f:69:
         29:a4:30:19:96:a0:b2:1b:ad:02:57:73:fc:2a:20:64:2e:c4:
         98:09:dc:25:32:8c:f0:87:6b:a4:f9:da:0e:68:95:58:14:db:
         85:48:8e:10:1a:00:64:58:3c:61:20:e9:4c:fa:50:04:92:e5:
         27:fb:a2:7a:28:ba:4d:df:77:73:e8:42:ba:9a:fb:83:d7:46:
         fc:04:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:40 2024 by rpki-client on console-ams.rpki-client.org