Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2d3d17e-84ab-39fa-ac2b-3ebc54607f4d.roa
File:                     d2d3d17e-84ab-39fa-ac2b-3ebc54607f4d.roa (raw, json)
Hash identifier:          HCBy+7OAEjX0PYC+Ea2jp9bwxIwI0iK6EAyOC03zDVo=
Subject key identifier:   37:63:A8:BB:CD:A2:04:99:04:89:32:B4:3A:65:33:AF:F5:25:9D:35
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D9F657D27EDC31C4D7700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2d3d17e-84ab-39fa-ac2b-3ebc54607f4d.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.106.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:9f:65:7d:27:ed:c3:1c:4d:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=3c63304e-7c46-4991-82d8-c0eb8638539f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:b3:b1:58:8a:7e:6e:24:79:5d:63:bc:9b:
                    a7:fc:02:08:16:fa:24:f6:7e:3f:30:a2:b7:49:e3:
                    78:f0:b8:a9:0f:d2:90:6a:7e:cc:76:cc:7b:a2:e7:
                    70:f1:e6:4c:75:e6:45:ba:3f:40:93:ec:40:08:78:
                    05:2a:f4:64:84:3e:b9:48:a6:49:cc:f7:c5:5c:8a:
                    00:3b:35:f2:4c:a4:eb:6f:39:f4:c5:09:7c:6f:07:
                    e3:b4:90:69:6c:e0:7f:40:db:2c:ad:ab:10:b7:28:
                    ce:a2:23:80:a8:cd:63:1c:2b:43:0f:e5:28:01:e9:
                    e9:44:ea:13:03:41:8e:ec:81:48:53:81:fd:4c:ac:
                    0f:d6:5e:2c:ed:13:94:e4:57:98:00:ed:3b:29:3f:
                    cd:d8:3d:66:8f:2e:61:0d:2c:71:8e:40:64:42:29:
                    f3:32:e5:31:af:31:24:39:a4:9d:fc:b8:72:bc:e0:
                    68:ff:53:90:d3:21:21:fe:3a:13:9e:d6:f2:ef:9d:
                    be:c4:74:ca:95:c2:2b:76:0f:56:4f:b7:a3:41:dd:
                    a1:5a:3a:e1:19:2a:45:ae:3e:32:11:ca:0e:e5:37:
                    b6:43:82:55:25:20:83:3b:77:eb:28:17:89:14:a2:
                    ea:8c:27:7c:35:85:c7:be:24:98:d6:f0:e9:e8:83:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:63:A8:BB:CD:A2:04:99:04:89:32:B4:3A:65:33:AF:F5:25:9D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2d3d17e-84ab-39fa-ac2b-3ebc54607f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8f:6b:6b:4f:4a:0e:a6:30:82:87:26:27:75:1a:c3:5c:2e:
         ee:82:73:58:8a:7e:8a:db:ea:83:b4:19:37:bd:9a:ea:57:35:
         c9:97:00:23:4d:4d:b8:0b:b1:2b:67:11:b4:7f:3b:d4:aa:d0:
         af:56:4e:7a:8e:23:f1:45:55:e6:de:6a:9b:db:16:c1:72:e9:
         74:8a:41:d6:d8:f2:ac:11:97:74:58:4a:ff:99:e1:c3:4c:2d:
         42:fd:4c:44:cd:1a:69:d6:9b:1b:67:01:38:5a:46:2b:87:3d:
         80:40:8f:7c:fd:d2:8c:70:10:a8:b0:16:73:2b:d0:c2:67:86:
         fc:c6:54:9c:cc:6e:72:c0:a7:a1:af:8c:49:13:1d:d2:6d:4c:
         a7:2e:8e:16:cf:18:1b:8b:6d:9d:53:c5:52:dc:08:56:63:a1:
         56:a3:f9:ee:b2:22:d2:9e:0b:a8:8a:8d:fa:a5:fc:78:76:cc:
         85:a6:e0:2b:2c:b5:b1:81:e7:ef:62:ec:f2:14:3c:fa:42:f6:
         d7:2e:c5:70:3b:e2:99:db:ee:e3:ca:d9:3c:54:ef:09:f7:42:
         51:51:d3:1b:29:2d:44:91:04:40:3f:f1:ce:0d:0b:e9:8a:80:
         2b:3f:35:c0:a4:71:58:24:b4:38:f6:fa:d4:a4:e9:aa:73:93:
         49:79:d5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:47 2024 by rpki-client on console-ams.rpki-client.org