Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b152911d-ea47-3f47-8b36-8a46a4cfe690.roa
File:                     b152911d-ea47-3f47-8b36-8a46a4cfe690.roa (raw, json)
Hash identifier:          IU0eY9aBWTYM5WnEFOueFVQOg/xU3wNq7ygVG0b4e2Q=
Subject key identifier:   D7:66:72:73:A1:93:55:3A:67:89:76:2A:30:A3:71:95:BE:65:8C:3D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AEC36C9C3CC16EA890C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b152911d-ea47-3f47-8b36-8a46a4cfe690.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.107.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ec:36:c9:c3:cc:16:ea:89:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ee699739-6b4d-4aef-aa1e-bc8a0b7af215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6f:fc:ed:9f:66:ff:cd:0f:5d:68:9b:bf:50:
                    b9:0e:4e:e3:a3:5d:1c:17:b6:4d:80:34:8d:92:14:
                    af:a2:a9:7c:ec:b7:19:ec:83:1b:5a:05:78:db:42:
                    96:83:87:43:34:44:31:16:4b:5a:41:c4:82:6a:8e:
                    9f:de:04:34:5f:37:ff:59:76:66:04:05:bd:64:c6:
                    48:8b:0b:8a:3d:10:72:f6:7a:fd:9a:e6:f6:81:c0:
                    6b:1b:07:5e:97:a1:b5:d8:62:0d:36:43:64:a1:f9:
                    8d:23:bc:d6:0d:ec:23:b0:ab:8c:68:b5:47:b8:46:
                    93:d3:b1:f4:43:1a:f9:31:f4:64:67:41:43:ff:36:
                    3f:fd:ff:fd:86:63:57:46:4d:c1:22:69:f6:75:7a:
                    64:49:43:41:e6:e4:c5:4b:ac:b1:45:49:a0:7c:bd:
                    2f:8a:b1:63:ce:89:f4:60:44:b3:74:c6:bd:db:59:
                    80:83:2b:b7:02:18:f4:16:de:ea:88:49:88:a3:1d:
                    3a:1a:bd:1a:ad:8b:35:a3:8c:af:27:31:83:6f:5f:
                    3e:c1:78:63:cf:07:ca:a0:a7:2e:d9:e6:ec:cf:ef:
                    32:f7:7a:3d:14:16:7b:94:52:37:41:b8:c2:6f:d6:
                    62:85:e3:d2:b8:51:50:85:6f:bd:98:93:d4:5c:37:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:66:72:73:A1:93:55:3A:67:89:76:2A:30:A3:71:95:BE:65:8C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b152911d-ea47-3f47-8b36-8a46a4cfe690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e8:0d:b9:1f:25:b9:44:4f:f3:5f:f7:76:29:7a:d1:12:da:
         16:9a:e2:9a:b0:aa:41:e4:53:81:03:48:47:ea:ee:5e:88:ba:
         06:6a:c9:9b:e6:e5:6c:47:ec:f9:f5:78:81:c8:13:90:57:7d:
         51:d8:39:df:0d:ac:40:19:52:be:02:dc:e1:0f:f9:38:2c:d4:
         fa:f8:05:5a:67:c7:b8:07:ce:f5:c1:f2:60:fb:ab:ca:a1:0d:
         39:a3:eb:cc:a6:b7:cb:3c:c8:6a:c3:99:71:bd:f6:a1:e4:b5:
         60:6f:ee:90:53:e7:d9:d8:b6:9c:17:f7:b2:a8:12:6e:b7:71:
         4e:16:91:21:90:c0:7d:75:91:33:9e:3d:cd:5e:d0:46:fc:dd:
         6c:ff:e3:d2:17:f4:04:d6:a1:92:99:63:11:25:fe:a3:1b:f4:
         7c:af:c9:3a:d0:36:61:0f:4c:95:af:89:ef:ae:be:c5:a0:35:
         0e:b4:c7:15:35:3b:38:7c:79:2c:17:1a:ed:a1:64:e0:e0:66:
         77:8c:ba:de:a4:2f:b0:26:42:d3:18:95:69:86:72:e8:a0:1f:
         16:bb:42:95:32:c3:de:c8:93:b5:34:28:3f:b7:ee:4f:77:7e:
         0c:10:d5:6d:ce:f3:93:cc:22:6d:7f:b2:e0:a9:ab:03:06:c4:
         44:49:0a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:55:43 2024 by rpki-client on console-fra.rpki-client.org