Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d11ea852-544c-3366-b560-a888f455b931.roa
File:                     d11ea852-544c-3366-b560-a888f455b931.roa (raw, json)
Hash identifier:          w8XGRCJ5E2/ZiJZ3vKVzcOptjx0MU8baoTPZLbIx7kw=
Subject key identifier:   E8:9C:16:DB:59:DA:40:41:74:72:05:61:5D:59:74:AB:BE:4E:B0:4F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AE1E40726496244975F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d11ea852-544c-3366-b560-a888f455b931.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.106.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:e1:e4:07:26:49:62:44:97:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d35bd515-e63d-4802-9374-d558480b1209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:96:9d:4a:db:15:45:41:e2:9b:9a:21:54:
                    25:7e:b9:80:58:ee:8c:ac:7b:be:74:1a:02:a8:3e:
                    b5:90:ef:f0:30:a6:5b:47:a2:4d:3b:05:d8:a3:0c:
                    09:ee:70:a3:bf:5d:fc:25:64:aa:ce:f4:27:95:90:
                    e8:6f:05:99:aa:70:5a:b7:33:28:f6:fd:81:55:3c:
                    92:c1:64:3e:0a:4e:fe:96:65:f7:03:cc:fc:08:3b:
                    3e:d1:7a:79:27:37:70:2d:df:a8:44:e9:25:94:fb:
                    6b:7e:7b:01:23:56:50:46:43:00:2f:76:44:b9:bd:
                    f6:f1:ce:55:80:a9:d7:ca:45:ca:1b:8e:03:aa:f3:
                    a0:bf:e3:11:0b:d1:d1:77:f3:2c:cd:b5:d8:7a:96:
                    7e:5f:b1:fc:b7:bc:d7:34:bb:48:b9:6d:3a:df:1c:
                    df:f7:3b:4d:4b:22:2d:53:68:a7:56:bb:0e:68:ba:
                    46:29:2c:52:45:48:96:7f:a7:e5:69:c6:ab:c5:42:
                    ff:87:ad:e6:7d:5d:7a:cb:d8:d2:2c:da:cb:16:4c:
                    13:d1:18:8c:21:51:d8:ce:f7:81:37:96:5d:fa:af:
                    20:87:27:48:49:0e:c8:94:25:e4:2a:89:fb:43:f4:
                    73:a4:64:00:de:65:85:1d:f7:b4:b5:44:8f:13:dd:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9C:16:DB:59:DA:40:41:74:72:05:61:5D:59:74:AB:BE:4E:B0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d11ea852-544c-3366-b560-a888f455b931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6c:da:f5:4f:9e:98:8a:21:c3:e8:8d:14:79:a2:df:17:89:
         5b:8e:c9:4b:78:a9:3d:3f:7d:36:3a:59:8e:7f:53:9f:61:da:
         bb:1d:83:31:56:43:45:da:ff:8a:3e:31:6d:da:92:74:43:d8:
         12:30:f4:70:c7:8d:90:8b:cd:1b:ae:0a:95:6e:ad:03:19:fd:
         cc:91:76:a0:9f:ec:a1:4b:df:fa:e4:51:79:ed:1e:fe:61:ac:
         a8:30:48:ef:16:ec:42:88:1e:b4:94:61:cf:db:82:c2:13:81:
         df:32:43:6a:64:08:b9:3b:da:5a:e0:10:54:de:ca:fd:c7:57:
         2c:6a:d4:2e:8c:c3:42:6b:28:53:ac:9f:98:46:41:c6:c4:9e:
         23:26:a6:88:b6:5a:cd:93:0f:00:cb:74:d4:48:f8:bd:97:84:
         b5:9e:1b:5e:56:e9:fa:df:ad:f1:69:19:5e:59:a4:a2:08:f5:
         79:28:4f:b3:83:be:a6:ac:aa:8f:ac:27:fa:67:63:0d:60:0d:
         91:d1:de:1b:5c:82:3f:62:de:11:28:24:2f:c0:7e:2a:6c:02:
         75:98:6e:10:d1:3b:45:3b:d9:61:94:4a:c0:d3:51:62:97:12:
         b0:b6:66:df:31:29:a3:8c:c0:ac:d6:d3:f0:58:73:b8:51:ab:
         72:1d:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:28 2024 by rpki-client on console-fra.rpki-client.org