Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b995e288-53e8-3b22-b9c9-4d8646d3c448.roa
File:                     b995e288-53e8-3b22-b9c9-4d8646d3c448.roa (raw, json)
Hash identifier:          FHHTDARA8Vjqg1qiUAG/iVmA3D2OlZ2BY/Lqx/9TcAw=
Subject key identifier:   50:C5:4B:F6:19:B1:39:83:5F:97:9D:30:EC:28:64:BB:18:6C:7C:4B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E20664A2AD752C351C600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b995e288-53e8-3b22-b9c9-4d8646d3c448.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.107.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:20:66:4a:2a:d7:52:c3:51:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=90f4462c-1648-4baa-8399-42e6501ccaa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:0b:74:ac:90:16:77:18:c4:8c:aa:ba:bf:
                    5a:1f:ea:58:43:00:32:0e:05:85:81:dd:2e:82:9c:
                    88:f8:d9:4b:cb:bd:dc:49:89:1d:f1:d0:af:8d:3e:
                    56:ed:92:00:2d:73:d9:2b:cb:65:c0:ad:f0:3b:03:
                    00:33:64:c7:29:b2:87:66:9a:93:67:2e:f3:91:41:
                    39:0d:df:70:b2:f1:8d:ec:90:41:91:43:2a:43:66:
                    dc:a8:b9:80:98:6d:e5:85:21:c8:72:dc:a9:5e:e9:
                    1b:55:85:75:cb:59:82:5d:61:30:c5:f6:6e:cc:ec:
                    5a:7a:e2:c2:39:34:1f:1e:ab:10:f6:97:b4:0a:05:
                    cc:9e:72:90:0b:56:6a:af:dd:ee:e5:f8:28:b6:31:
                    d4:eb:05:73:ad:22:6d:de:80:6b:e8:e9:d9:e2:3e:
                    9f:fe:f9:22:af:6c:97:6b:ee:20:7f:cc:2a:de:c3:
                    18:d1:5c:5c:11:ea:3d:3d:de:fc:3f:a2:e1:92:67:
                    4e:94:df:1f:fe:0c:2c:dc:b7:dd:ca:5f:e4:d1:13:
                    c2:32:9d:53:d7:a8:7d:d0:d6:f3:71:2c:97:25:10:
                    fb:71:0a:21:9d:15:df:b8:ff:d9:63:6f:b4:32:74:
                    e9:78:c6:85:04:6d:61:61:1b:f6:1c:a8:56:e7:49:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C5:4B:F6:19:B1:39:83:5F:97:9D:30:EC:28:64:BB:18:6C:7C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b995e288-53e8-3b22-b9c9-4d8646d3c448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:d3:53:1e:5c:c2:4f:06:c0:08:17:bd:9a:03:a9:8a:59:5f:
         d7:7e:0f:ec:63:ef:7b:fd:21:4a:7a:03:f6:77:24:78:a3:1a:
         87:ff:d2:60:24:4a:df:b8:3b:a5:e5:af:85:d9:cc:59:4a:47:
         dc:a8:86:3d:09:05:7a:35:7d:db:9a:ac:14:67:4a:c7:20:1a:
         c3:a0:c9:b4:1c:f1:20:00:d6:a6:a9:69:b6:f5:5e:98:4e:ce:
         c3:a0:85:03:4b:a9:0e:8c:a8:aa:29:09:20:f3:71:9f:d3:25:
         d0:8f:03:c0:ae:61:50:ff:ce:11:06:1c:f3:08:43:21:53:66:
         5f:fe:33:8c:4e:df:bb:bc:71:c5:bb:19:af:28:bd:6b:f9:aa:
         fe:59:c5:3e:01:bb:12:1b:9c:24:63:e5:07:b0:e3:bc:f8:3d:
         5e:f2:27:ea:7e:de:30:15:8a:67:fa:ab:f2:01:5f:f3:4f:00:
         5a:b5:8f:e6:3b:92:c9:6a:48:48:96:36:28:80:06:66:e7:e7:
         fb:18:bf:53:50:5c:0d:d8:fc:82:3d:36:8e:1d:dc:ec:74:1f:
         98:c4:9e:59:bd:2f:4f:3f:e7:45:d1:79:da:45:5e:63:eb:8c:
         30:28:e8:8f:f6:11:65:45:9f:15:f4:33:b7:da:e3:dd:47:ab:
         fd:e5:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org