Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8ba00cc-3fb4-3b8e-ba5a-098b697aa2c1.roa
File:                     a8ba00cc-3fb4-3b8e-ba5a-098b697aa2c1.roa (raw, json)
Hash identifier:          Il61sXBUVtvhHgnY12lu+V6Eba5d+RkpkzcD1Ms7y9Q=
Subject key identifier:   83:73:4A:A1:C3:4B:C8:A5:40:5E:16:2F:97:66:F1:D0:48:A0:7C:DD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DA02C6778CB08F8F278C8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8ba00cc-3fb4-3b8e-ba5a-098b697aa2c1.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.106.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:a0:2c:67:78:cb:08:f8:f2:78:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=b3f0ba6d-2ffa-4fbb-b487-8aa017ec54db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:3d:3b:56:b1:64:40:00:bf:d0:5b:e8:f3:
                    7c:01:5b:a6:cb:55:d4:ae:50:89:ba:b9:a2:b3:76:
                    28:b8:5d:33:cf:db:65:18:55:c2:89:f8:0f:fb:2e:
                    01:06:a1:29:06:bf:12:5a:ac:0a:70:3c:d0:37:3a:
                    32:fc:4e:f5:16:d7:2a:c5:dc:ca:92:1d:c4:a8:0f:
                    fc:a1:00:ba:6d:df:b2:c2:c8:3c:c1:0e:62:44:0a:
                    e6:84:0b:1e:3d:54:16:c7:bd:54:63:f8:98:83:13:
                    0b:70:34:8f:58:14:1b:40:53:15:82:64:66:89:e7:
                    3f:98:9a:e1:b8:10:2e:ff:64:6d:e2:d7:0e:e7:79:
                    36:fb:79:14:0f:3a:e9:fa:1f:0d:81:55:a4:b8:45:
                    91:fb:dd:d4:e3:c6:a1:d3:a5:9d:0b:58:b0:c4:ba:
                    55:ca:a4:2d:69:29:fe:05:0d:8c:7e:b2:89:ab:10:
                    79:85:15:90:2b:78:fa:d2:56:10:02:e0:19:b1:be:
                    34:54:17:40:42:18:7d:41:3c:73:83:59:03:9f:24:
                    2c:d6:43:14:9b:3b:5e:01:62:9c:60:88:56:23:4f:
                    73:4c:80:88:50:05:7b:e1:39:74:5b:36:d6:18:46:
                    e4:07:82:9b:0d:76:5a:da:cb:9e:f0:2c:21:90:9d:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:73:4A:A1:C3:4B:C8:A5:40:5E:16:2F:97:66:F1:D0:48:A0:7C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8ba00cc-3fb4-3b8e-ba5a-098b697aa2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d0:3e:88:1f:87:ca:61:f1:22:c5:83:30:1d:d8:a1:c0:f9:
         bb:92:68:85:2f:1f:e0:02:78:b9:ca:d4:d3:1c:01:bb:7a:84:
         e3:79:af:34:f0:b7:61:09:67:e9:78:6f:b5:78:c4:22:31:0a:
         cc:81:b7:00:84:4b:fd:b5:63:55:1c:2c:c3:11:50:ad:72:1e:
         b9:ab:2e:cf:6f:ba:c1:99:b9:a5:80:99:74:38:76:99:5d:b3:
         59:e7:ff:61:98:fc:97:67:15:4a:e3:9f:36:05:9c:cf:2f:d2:
         9b:f3:32:4e:02:38:94:a6:b6:0c:f8:15:7b:20:28:0e:14:cb:
         23:25:8c:db:21:d6:d4:ee:17:0a:bf:48:fd:b3:b8:c9:55:0c:
         04:50:b9:9f:36:e5:d4:b1:c2:e2:d8:32:aa:a5:24:98:a8:c3:
         ad:d0:ea:bc:a7:ce:ba:d6:ec:6b:23:02:b9:68:51:d6:83:28:
         0e:ec:78:ac:55:27:7c:dd:3d:4e:ba:ca:db:e7:3f:96:01:62:
         68:51:63:54:01:d0:df:cb:3c:96:b6:95:b6:f5:56:32:4d:09:
         79:d4:35:33:1a:d5:f0:9a:d8:28:74:71:6b:6b:5f:15:4b:3f:
         bf:24:48:d8:d6:15:9f:a7:f9:fc:29:13:33:d3:01:c1:1d:3b:
         21:71:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org