Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb5b3667-6959-3aab-a964-830f4bcb79bb.roa
File:                     cb5b3667-6959-3aab-a964-830f4bcb79bb.roa (raw, json)
Hash identifier:          HFqGS8dtB2ezWsjMY9ZoKv4VkoXMnhUW2a7lXoM35lI=
Subject key identifier:   3B:6F:8B:E2:03:E6:42:9A:17:42:16:94:ED:D8:A5:49:DA:F6:7E:55
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D9D31258C17E1356AA240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb5b3667-6959-3aab-a964-830f4bcb79bb.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.106.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:9d:31:25:8c:17:e1:35:6a:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=9b14d4a7-f188-4bb1-88f5-048fe1d76cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:07:76:e2:53:74:7f:06:9b:c8:d5:7a:23:
                    b0:81:95:ab:59:b4:4e:d4:87:b8:a1:09:c4:f2:61:
                    c2:93:6d:4c:51:5d:2c:cf:fb:5b:e6:ce:a7:f5:af:
                    09:06:82:f7:c7:a1:8d:79:ae:03:9a:48:c5:ed:5b:
                    40:a3:2d:34:02:bf:0d:f5:24:61:fd:ac:fd:8d:58:
                    57:8e:cd:62:3b:54:b8:b2:b4:37:36:63:9f:7b:58:
                    e3:f9:5d:71:c3:57:24:db:46:cd:3e:1b:69:e5:a6:
                    ef:6a:98:0e:8c:bc:08:1f:f2:89:3f:b5:d3:54:ac:
                    69:b4:1b:ff:41:6a:82:a1:d8:03:e2:92:ad:3d:d9:
                    48:8f:4a:2d:e8:c2:94:d9:94:1f:d7:3a:4d:ee:08:
                    bb:4b:8a:1d:74:d3:36:52:ee:a0:e4:4f:68:7a:b1:
                    94:0a:59:cc:c7:b6:ad:7d:e6:7c:50:96:ee:15:e0:
                    f9:7e:0f:97:4f:69:c7:19:3a:87:75:9a:81:d0:5f:
                    fe:c7:5f:83:6c:86:dd:07:58:d4:66:77:4e:cb:49:
                    59:ad:95:75:af:45:f5:23:bb:67:71:37:a4:60:90:
                    d2:d9:db:d9:27:50:87:d1:71:44:94:50:9b:83:60:
                    1f:f5:ce:49:98:6f:5c:3a:81:80:48:83:9f:03:41:
                    d1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6F:8B:E2:03:E6:42:9A:17:42:16:94:ED:D8:A5:49:DA:F6:7E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb5b3667-6959-3aab-a964-830f4bcb79bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e4:3f:89:c5:1d:d0:72:22:bd:c4:8d:5b:38:41:1a:68:79:
         55:46:61:38:58:c5:32:87:25:a6:ff:82:3c:c2:aa:5d:08:69:
         ff:5a:d4:89:7e:24:3f:ad:3c:8a:1e:55:dc:fe:16:39:a4:a2:
         0e:3c:7c:3c:9a:a1:cc:8b:da:e9:7f:69:19:5a:ae:23:97:bc:
         e5:a1:2a:d3:f7:4b:bc:61:0e:bc:9f:63:cb:7e:1a:16:f8:02:
         0c:e3:46:28:7a:71:18:ad:81:3b:9a:c8:9f:be:15:68:12:8c:
         1c:ef:ad:24:81:c9:fd:8a:31:a1:9c:a7:7a:8c:bf:f1:93:4d:
         1e:2e:3c:82:32:e7:43:35:76:2f:d3:e8:b2:12:02:f4:41:a0:
         41:7f:e6:f8:e0:b7:02:31:94:8d:ae:c7:5f:7c:86:2d:d7:ad:
         cf:a2:24:be:09:c1:1e:20:34:87:c0:52:b5:d9:39:05:d9:a9:
         ba:d5:b7:e4:6f:4b:d8:e4:29:f9:fa:cc:af:9c:1f:29:79:c8:
         87:6f:55:29:17:6b:da:35:e5:e4:53:fb:84:83:11:69:94:c6:
         3e:cd:55:00:a2:33:2e:3b:d6:d1:f9:a3:14:1c:13:0c:30:35:
         0f:8f:b4:4e:9d:e2:05:bf:bd:c7:f5:07:2b:22:16:e7:e0:2f:
         3d:be:bf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:10 2024 by rpki-client on console-fra.rpki-client.org