Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b6fcff51-1657-3193-a96a-db21285348ef.roa
File:                     b6fcff51-1657-3193-a96a-db21285348ef.roa (raw, json)
Hash identifier:          Zr6wlKIPSfk6mJ9A6vJGGqT72akHX+7qMWgg6CME/QA=
Subject key identifier:   3B:CF:4E:4C:01:63:92:44:CD:25:2A:E4:62:0B:81:F3:53:F1:B4:A9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AE2C3F19D0579A62E3C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b6fcff51-1657-3193-a96a-db21285348ef.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.106.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:e2:c3:f1:9d:05:79:a6:2e:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b99bfc9d-d7be-49ff-8815-f83129efb5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:76:d3:1a:d1:e2:a8:5e:fb:a7:95:4b:b2:
                    ff:99:b8:b1:32:a1:4e:e7:25:d9:e6:ba:a4:78:ed:
                    37:76:4a:32:ca:0f:87:82:ce:3a:7c:b9:2d:17:d6:
                    6a:9c:e3:00:7c:ee:08:fb:ae:62:6c:2d:cb:d5:71:
                    de:6b:73:6f:42:76:2e:59:57:7d:d0:4e:1f:8f:14:
                    a1:56:1e:7a:a0:2f:ea:9a:ef:51:0f:8d:b5:4c:8e:
                    3c:30:68:b3:ce:38:42:7e:06:d5:2f:f3:c2:6d:80:
                    ea:4d:e1:dd:57:3e:89:e9:1d:ff:72:b7:30:4f:16:
                    35:b6:a8:39:8c:73:9d:5e:54:40:45:46:ed:b9:5e:
                    ee:cb:dc:52:02:41:5b:c1:13:dc:44:2a:a5:67:de:
                    bd:af:c5:74:f1:3e:4b:78:12:41:73:4b:cb:26:d8:
                    63:b1:47:91:56:d0:7c:2d:2f:af:9f:24:a3:2e:e5:
                    18:24:59:53:9d:15:d3:9e:d2:9b:ee:4a:5f:19:0c:
                    5c:9e:d9:bd:2c:a5:87:49:f5:cc:b5:5b:5a:f8:cf:
                    b7:ea:7d:bb:2c:9f:b6:0b:8f:b6:dc:f1:49:92:28:
                    a5:4a:65:54:62:3a:a2:dd:a0:09:8c:21:c9:81:db:
                    fa:d0:9c:b2:34:f3:a2:41:76:b4:79:30:45:ae:cf:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CF:4E:4C:01:63:92:44:CD:25:2A:E4:62:0B:81:F3:53:F1:B4:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b6fcff51-1657-3193-a96a-db21285348ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:a6:87:12:b7:34:69:c3:89:9c:00:2c:01:3e:9e:8e:a6:
         cd:e2:0f:93:9b:51:9e:d9:05:01:d7:54:2c:22:53:2e:f9:d7:
         34:af:63:51:83:c6:80:72:77:fe:9b:27:73:03:ac:65:7c:dd:
         85:9a:5e:7b:e2:2d:3e:dc:5a:f0:67:33:69:62:38:1e:14:8f:
         d1:9e:4b:25:c5:27:42:4b:64:a0:1c:ab:c0:a5:85:77:f4:96:
         cf:7b:88:18:dd:d1:66:11:e1:36:08:58:24:ab:54:6e:a5:c0:
         8c:18:2c:c4:aa:b6:31:6e:c7:de:59:af:63:bf:fa:d3:97:54:
         a4:06:7e:7b:3a:4d:9b:ae:12:9f:22:29:e5:e5:8c:64:0d:63:
         0b:b2:08:fe:e1:cc:06:b8:65:d9:3e:b3:07:8d:9e:d9:93:01:
         72:27:d9:79:e0:90:f2:1d:4f:d1:20:90:77:43:ad:40:0f:26:
         21:43:2d:d9:7e:e8:85:79:45:4d:bb:25:e4:e2:bf:9f:b8:15:
         bf:a7:c0:70:03:fd:13:3e:a6:d8:f9:7b:a7:5c:f8:e9:d7:8b:
         c6:2c:31:1a:47:5e:4c:96:59:7a:85:7f:9b:18:68:e8:08:81:
         e9:f8:f9:79:ce:90:6f:d9:18:67:f2:1b:02:be:4b:6f:26:33:
         3f:21:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:30 2024 by rpki-client on console-ams.rpki-client.org