Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de86ec05-3706-315b-9445-7db630429eaf.roa
File:                     de86ec05-3706-315b-9445-7db630429eaf.roa (raw, json)
Hash identifier:          2evZHdY/9SoDwtrwTEzKFbOO0tVtjw960YDor7KK38s=
Subject key identifier:   5F:5F:0D:52:A1:4D:6F:68:02:59:CE:12:86:2B:96:81:1A:E6:2E:0E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DA9361C92341445DA6640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de86ec05-3706-315b-9445-7db630429eaf.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.107.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:a9:36:1c:92:34:14:45:da:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=0b2d86b4-6b92-4eb1-96dd-77b016b5eaea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:1c:1e:77:91:2b:43:bd:af:ad:0a:50:a2:
                    61:fe:5c:d8:a0:7b:c0:e4:5e:60:7b:56:3f:55:d5:
                    12:d9:45:18:af:eb:ea:fb:37:0c:15:36:a5:0e:80:
                    d0:dc:8c:1a:93:1e:3f:3c:b0:41:cc:39:76:79:e1:
                    82:cb:f6:c6:12:07:85:fc:c3:44:47:1c:4d:b0:e5:
                    c6:a7:63:09:aa:e6:a9:f1:54:77:4d:b9:f5:e3:5b:
                    10:96:53:68:26:96:a4:14:28:05:59:82:38:1f:aa:
                    e8:65:6b:a3:7a:c4:01:ff:47:d1:a5:20:c6:65:7d:
                    fb:ed:75:fe:cc:6b:0e:2f:12:8f:49:05:59:2f:e1:
                    c0:1a:69:85:20:7a:40:f1:77:13:03:0e:f2:31:b8:
                    e2:35:a8:1f:5e:e5:f5:de:a3:1b:6b:f1:69:65:0a:
                    5b:4e:7c:7a:a9:c2:23:77:98:33:4f:82:9b:50:01:
                    dc:71:4e:b5:c7:2a:b0:43:43:3b:85:44:a3:c9:d0:
                    86:13:28:ad:cf:81:9b:02:72:8c:56:3b:52:be:49:
                    bb:c8:67:f0:02:f7:01:0d:e4:b3:6b:be:3a:18:28:
                    1b:a6:31:15:c7:1c:29:b6:52:88:d0:84:4a:dd:ee:
                    0a:04:0a:2d:ca:fe:41:8c:fb:38:6e:69:10:f1:6c:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5F:0D:52:A1:4D:6F:68:02:59:CE:12:86:2B:96:81:1A:E6:2E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de86ec05-3706-315b-9445-7db630429eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:27:7d:f6:e3:e8:a0:a8:f0:31:dd:55:8b:28:1e:c9:50:
         d9:4b:ec:97:a7:41:e4:1b:a9:ac:df:e1:7e:e1:2e:b0:08:7c:
         3f:7a:89:95:37:f4:b9:cd:19:cb:18:3c:59:1b:a0:41:a5:16:
         b2:cb:9b:78:78:af:ee:95:95:91:c6:60:e3:b2:b6:b9:16:f4:
         21:69:42:d6:83:81:94:8f:20:aa:7c:37:89:4d:1c:10:0c:62:
         45:30:99:dd:33:0d:88:fc:7c:04:f8:d1:8f:ef:b4:06:66:25:
         62:96:63:6b:18:ea:9e:7b:42:bf:2c:73:3e:8e:2f:55:c3:18:
         70:d3:e6:5f:43:0c:88:ad:a4:9a:93:74:ea:aa:48:60:6c:86:
         42:49:ae:41:1f:bc:df:76:d0:9a:0d:b9:29:60:f7:28:9a:87:
         b3:30:c9:21:43:f9:03:b5:63:d2:de:8e:1f:10:4e:1d:22:b2:
         f2:68:86:71:c8:d5:72:0c:c0:90:f7:ce:7d:93:a3:71:d5:9f:
         d8:50:0a:6a:b2:98:6b:d4:45:65:90:2d:94:f1:44:e3:68:5b:
         22:5f:21:3f:4d:6b:3f:eb:df:65:77:64:a1:2e:d5:fa:94:17:
         fb:d2:61:39:91:40:34:bd:43:e0:ce:65:03:c9:df:92:24:08:
         09:2a:78:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org