Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfbcae82-6295-3923-976a-63e2aa66ff20.roa
File:                     cfbcae82-6295-3923-976a-63e2aa66ff20.roa (raw, json)
Hash identifier:          3QpkWcfFDHuA3DqdoSHZKS3tgJZWea7kWyUnGDtdWkQ=
Subject key identifier:   95:EC:D6:36:61:8B:6C:1F:0A:7C:4F:B5:B8:F9:84:BE:A9:05:47:87
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E0EECE182BB3FF027E180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfbcae82-6295-3923-976a-63e2aa66ff20.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.105.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:0e:ec:e1:82:bb:3f:f0:27:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=076fc03a-1ff7-4b8e-8a37-4241365b9f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:14:12:20:c7:a8:55:60:a9:06:c6:10:82:95:
                    f4:58:b0:78:b2:86:02:cb:54:85:9b:05:74:e1:8f:
                    ad:79:f1:2c:20:30:a3:9b:d4:0d:c4:0b:94:8e:4a:
                    ca:25:e9:63:37:d0:7d:9d:40:8f:b4:e7:9f:73:5b:
                    a0:88:99:fa:3b:de:8e:f3:15:0c:ed:cc:18:8d:66:
                    72:60:0f:2b:a3:ea:5b:d1:03:e8:7a:4b:09:51:06:
                    5f:4a:4f:22:93:4c:b0:f2:cc:1b:38:b6:b5:7c:27:
                    05:f1:55:4b:40:cb:c8:2f:12:c5:84:79:34:e8:cc:
                    ce:b7:f4:2d:cb:8d:b6:58:b4:68:b9:e4:5c:48:36:
                    0d:e6:70:30:04:5d:7e:db:74:74:79:f2:52:c9:db:
                    56:ce:79:9b:46:eb:7e:9f:f7:31:f9:4a:ba:29:3d:
                    df:0e:ea:cb:ea:a7:bc:9a:d3:ed:69:3e:0b:01:08:
                    8b:dd:2e:06:14:1b:3e:26:90:d1:5d:58:94:dd:e8:
                    28:8e:f0:50:f5:20:30:59:55:ac:ec:fe:db:e2:4d:
                    c2:41:04:99:2a:37:79:86:72:f9:87:a8:e9:c8:37:
                    6c:7b:ad:dc:64:22:57:b6:d1:54:54:63:57:03:cd:
                    d4:ea:c5:7a:31:69:bb:d3:9f:c4:37:bb:0c:ac:23:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EC:D6:36:61:8B:6C:1F:0A:7C:4F:B5:B8:F9:84:BE:A9:05:47:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfbcae82-6295-3923-976a-63e2aa66ff20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:07:4d:5e:70:49:bd:81:80:ed:7b:47:63:1a:1b:33:80:ef:
         80:52:9d:8d:57:ae:2b:b9:26:0f:0c:30:e1:94:39:cc:4e:70:
         4f:12:79:03:96:4a:ac:c9:30:f0:af:6f:3e:bf:1e:52:5c:89:
         7f:a3:5a:9b:f7:3e:8f:bb:f2:14:68:ec:54:6c:8b:9a:95:c8:
         4f:da:c0:01:18:a9:a9:7b:70:2d:09:45:9d:b1:33:45:36:28:
         76:77:84:04:a8:08:5d:7d:77:08:bf:4a:36:97:3f:eb:4d:f5:
         d1:76:ac:f3:56:4f:39:21:a8:50:24:22:df:cc:fc:ad:ea:de:
         77:d1:44:99:e6:c9:05:dc:d8:23:6a:0f:1e:05:88:b8:c9:18:
         47:5b:35:22:d9:5d:9a:4b:8d:a0:09:7d:69:df:ef:7a:18:63:
         2f:23:ed:d4:64:09:6f:1a:73:17:71:31:b3:5d:5e:f2:95:fd:
         74:cb:ce:5d:3b:47:8a:9a:4b:57:e8:67:ec:70:04:46:51:25:
         8f:6b:ec:fb:a5:4b:b8:bc:7d:bf:93:39:0b:50:34:b7:1e:9b:
         1d:7a:03:2a:ae:5f:9a:d6:91:9e:47:97:10:c5:c6:b2:90:4e:
         fb:54:f8:33:2c:dd:1c:33:b9:0e:d1:e7:ab:ee:2b:29:54:97:
         e7:2d:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org