Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d08f103c-ce4e-3b78-abfa-75281eeceb31.roa
File:                     d08f103c-ce4e-3b78-abfa-75281eeceb31.roa (raw, json)
Hash identifier:          WWAkZcuAmoZ27hMhnnVBWSQhRY5os/pXagXhqsdYkPo=
Subject key identifier:   9D:B4:EB:7A:EE:B3:5A:20:C6:33:4C:C9:65:74:DA:16:0D:36:48:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D99C7D484FC20B0F1F800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d08f103c-ce4e-3b78-abfa-75281eeceb31.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.105.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:99:c7:d4:84:fc:20:b0:f1:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=ef2f6217-bbc8-445b-a903-cff667ac5c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:f8:b5:bb:4d:b5:5f:e4:d3:13:60:e4:79:
                    da:d0:a4:73:b6:77:0a:9f:05:47:d6:2b:05:21:35:
                    1a:0b:7d:5b:b0:fc:42:12:21:82:6b:98:b6:3a:a6:
                    82:17:e2:87:73:94:ca:96:4c:02:80:c6:ee:08:fd:
                    e8:66:b6:f4:24:b3:f6:8d:89:fb:8a:fb:dc:92:7e:
                    fc:9d:41:a5:e0:db:49:fd:32:7a:2f:d8:4b:d2:ec:
                    d5:73:49:1b:42:10:05:12:c6:ad:ac:fd:7b:49:60:
                    a6:8c:43:0f:d9:74:0e:1f:68:12:0d:fb:1e:ed:f8:
                    aa:95:c6:e1:35:88:62:ff:4d:b9:5c:fe:70:cb:54:
                    ad:d3:c3:4a:54:33:38:8f:ec:a8:7e:a0:43:0f:fc:
                    09:9a:9e:4b:b0:75:08:15:05:82:3d:dc:cb:48:ed:
                    67:cb:7a:0a:56:cb:8e:af:7a:6c:7a:3b:8f:02:1b:
                    5b:6f:2c:08:f2:3d:07:d0:98:9b:81:b9:48:35:fa:
                    7d:fd:54:02:36:84:ba:ad:1f:cb:06:7d:0e:33:a1:
                    f7:1b:d5:81:68:90:ae:34:6c:e5:79:c3:f7:31:c8:
                    8d:24:a5:95:39:9d:30:7e:64:ac:ef:46:91:ac:af:
                    66:2c:bc:48:ff:a6:2a:37:89:5a:28:42:95:d0:9c:
                    ba:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B4:EB:7A:EE:B3:5A:20:C6:33:4C:C9:65:74:DA:16:0D:36:48:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d08f103c-ce4e-3b78-abfa-75281eeceb31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:fb:a0:04:5a:b4:f1:05:c1:d2:b7:35:2a:73:8a:e1:95:d3:
         46:78:9c:d3:b2:5c:e0:fe:4b:72:07:21:c6:a8:e9:93:eb:94:
         63:36:6e:76:85:d1:24:08:8e:da:b3:f1:7c:4a:4c:09:e3:b3:
         f6:93:71:62:56:e7:43:b3:0d:93:8e:25:44:9f:33:88:37:8e:
         71:13:cb:d9:a8:f0:c0:50:75:94:2d:cb:e9:42:f7:cc:29:5a:
         a1:17:ab:1e:e2:18:8c:a5:d0:2c:1b:2d:19:8f:fe:44:8e:b2:
         ac:a6:07:67:6f:4a:c4:5f:33:bc:ef:52:a5:db:59:ed:c9:3e:
         d5:9a:81:94:e7:69:b9:56:c5:89:7b:12:ef:dd:f1:6e:1f:07:
         04:5b:77:9a:27:eb:56:69:ae:2e:45:ac:f9:8e:f9:d9:37:94:
         6e:c9:a0:09:31:dc:1a:05:7e:8e:c4:a6:e9:6d:de:ab:7f:8a:
         5f:07:15:ae:c1:34:8f:bf:be:81:e8:ee:b4:b0:9a:f0:40:ed:
         76:1c:f2:99:a4:29:27:db:e9:55:25:51:14:9f:de:4a:07:09:
         5d:57:23:d3:f4:ea:8d:ef:2c:31:6b:47:6d:7c:de:96:bf:0f:
         04:46:f7:b6:ba:ce:51:2f:e4:1c:de:b0:ec:11:1f:9b:bf:6e:
         18:21:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org