Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9f6e312-4b82-3771-824f-314879b86245.roa
File:                     a9f6e312-4b82-3771-824f-314879b86245.roa (raw, json)
Hash identifier:          pzS6+lBF2ecche8aGWLwPt/Mcx+ZzSEv3F28YAeDIFo=
Subject key identifier:   1E:EF:2B:50:D8:2E:5A:1C:F3:B1:0E:16:4E:E5:48:AD:C8:96:70:68
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D99B7923FF27E9BD69980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9f6e312-4b82-3771-824f-314879b86245.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.105.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:99:b7:92:3f:f2:7e:9b:d6:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=982b22d5-6c6c-40d4-8b95-5fe503e12f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3c:c4:c9:84:dd:c0:d4:85:af:ea:64:5e:ba:
                    62:5a:79:0b:93:d3:08:6c:10:e7:81:07:2b:15:e3:
                    28:78:01:58:0f:41:71:ee:3a:c0:b6:6e:6c:88:21:
                    37:8a:06:ca:6d:3c:88:4f:6d:d7:3c:99:ea:19:f4:
                    7f:26:8b:50:61:eb:ff:73:9b:f2:ca:ae:94:f8:6f:
                    b7:c3:cc:fc:fa:9f:c7:27:a1:85:d5:72:96:12:1d:
                    61:4f:57:2a:6d:d0:08:1d:bb:5c:94:9e:59:b2:ab:
                    5f:0b:8f:73:ee:7a:89:27:c4:79:6f:02:23:2f:a2:
                    a8:9f:7b:37:80:13:15:c3:b9:4e:07:35:a7:4c:4a:
                    7c:44:f6:36:fd:dd:83:76:1c:85:5a:ee:96:ea:04:
                    b6:db:82:0c:34:87:cf:16:18:8a:ed:25:44:8b:7f:
                    2e:f2:71:80:c4:af:34:e5:db:bc:42:90:8b:23:71:
                    24:e9:bd:0f:81:f1:ea:cb:f1:ce:e2:12:5e:fb:8c:
                    6b:89:ee:0d:c0:c2:da:bb:ce:b1:04:24:bf:78:a7:
                    58:1e:39:1c:81:65:d5:d5:9c:63:07:67:41:0b:08:
                    0f:c8:05:be:6d:91:78:88:22:7e:8f:44:3a:de:d5:
                    34:75:1b:e6:51:50:0b:b5:a0:8e:22:0c:67:6f:0f:
                    8c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EF:2B:50:D8:2E:5A:1C:F3:B1:0E:16:4E:E5:48:AD:C8:96:70:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9f6e312-4b82-3771-824f-314879b86245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:ae:b6:68:d6:c1:d9:96:a4:53:5f:ed:8a:e2:e1:d5:99:72:
         be:7e:0f:3e:17:12:95:81:62:bf:1d:3a:e2:6e:15:89:6b:f3:
         41:f4:d1:b3:22:4b:4c:80:08:f0:f6:50:4f:a2:39:2c:7c:14:
         30:5b:f6:32:71:3e:a9:03:78:ca:8a:98:09:84:65:df:e8:a1:
         cd:8d:50:95:78:5a:c5:40:a5:f2:61:90:24:84:92:4a:2f:c2:
         d7:7a:db:ff:b7:c2:d6:17:53:4f:12:b7:91:a2:69:6f:d0:a1:
         ab:62:62:10:7e:79:3b:bd:74:69:ea:11:50:ec:54:9c:44:78:
         e8:78:cc:3b:b8:b7:77:23:64:08:f5:43:7f:33:26:6f:ea:9f:
         b0:81:96:d5:46:12:f4:d9:a1:c7:59:59:c0:72:9e:28:93:c9:
         a1:c7:50:03:be:3a:00:2c:b3:b0:9d:b7:3e:e2:ae:fb:18:0a:
         df:fe:c3:8d:f9:f0:32:5d:2b:b1:76:2d:80:55:19:86:db:8e:
         70:19:74:fc:75:f5:82:69:26:ba:5c:64:c1:46:19:c6:71:6d:
         c5:80:d3:ee:03:f5:c3:77:ec:ff:63:21:4b:ff:e5:ee:70:ae:
         10:d2:cd:e6:7b:2e:ef:26:da:51:78:de:f1:e6:2f:08:13:3d:
         2b:3f:80:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:47 2024 by rpki-client on console-ams.rpki-client.org