Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dee5fa36-d9ec-38fa-a3ea-8639c694e573.roa
File:                     dee5fa36-d9ec-38fa-a3ea-8639c694e573.roa (raw, json)
Hash identifier:          4IiCCW5v8dLV+li9rQXKdEVgjoGPMTWZ8Sg58HeDp6I=
Subject key identifier:   38:9E:8C:11:BB:03:5E:59:1F:2C:5F:CC:9C:E7:2C:42:AA:5D:0D:52
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847EE8A30D12A7FB537664CDC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dee5fa36-d9ec-38fa-a3ea-8639c694e573.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     7155
IP address blocks:        75.104.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:30:d1:2a:7f:b5:37:66:4c:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=34a3bc7d-f447-4dbe-963e-68313f807041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:36:28:96:ec:46:bb:ed:f1:70:0a:ad:58:21:
                    df:01:7b:7d:cd:2f:56:8c:fc:27:b1:c2:ad:96:c8:
                    72:16:ae:6b:a1:3f:22:2a:d9:0e:fc:9f:b2:ac:4e:
                    aa:62:3d:b2:92:db:5f:67:f4:3d:15:76:05:aa:28:
                    53:46:d8:e0:07:35:60:4b:06:30:a6:8e:2f:97:dd:
                    2f:8d:1c:bd:20:79:d0:46:73:4d:d2:38:2d:bc:aa:
                    b4:55:ab:77:74:b8:39:f0:6c:f4:fe:33:fe:23:54:
                    46:66:37:a6:54:d0:f3:a5:e8:dd:6b:62:98:d4:5a:
                    f5:da:6b:0d:16:dc:b7:d5:3f:e0:95:1e:00:6d:ff:
                    64:56:a0:b2:8a:83:f0:63:50:5c:63:cc:46:d2:12:
                    86:76:ad:5c:fe:44:15:aa:19:12:91:1f:ce:14:37:
                    b8:21:25:83:70:c6:01:1b:6e:13:ea:df:f0:59:03:
                    91:fc:bd:58:91:b3:16:ec:66:42:a2:e4:4c:64:60:
                    31:7a:c3:cb:d5:93:2d:8e:b1:ce:fb:b8:c2:6f:27:
                    5f:ee:ad:3b:fd:ff:c7:03:30:99:c4:68:2b:e5:6d:
                    5a:1b:4c:1b:b6:cc:8c:2a:ae:d1:f8:2a:a3:5e:ca:
                    5e:25:66:2e:85:f5:f1:7e:07:b1:74:39:77:ed:a3:
                    38:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9E:8C:11:BB:03:5E:59:1F:2C:5F:CC:9C:E7:2C:42:AA:5D:0D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dee5fa36-d9ec-38fa-a3ea-8639c694e573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:07:08:08:c1:e9:6a:fe:ee:c3:7e:25:f4:d6:7d:dd:10:8f:
         ed:30:7a:b5:10:1a:33:2f:00:24:a4:af:6f:aa:70:1e:9d:22:
         a5:58:aa:ac:84:6a:28:40:d7:35:4d:32:85:7b:ee:79:5d:9c:
         a0:70:d3:cd:ef:7f:51:f9:9a:60:91:1e:d3:95:db:3e:67:53:
         bb:6d:8d:e0:d2:eb:fd:93:5a:c5:82:cc:76:0f:c1:fa:93:88:
         46:f3:c6:c2:d6:8e:08:27:6d:d1:3b:b2:ae:a2:d0:2b:0a:b9:
         3c:78:98:1f:59:3e:fb:f0:a6:01:27:83:83:0e:3a:31:03:eb:
         dc:26:d0:00:1f:66:c6:22:20:64:18:3b:17:65:36:4c:0c:af:
         fd:15:df:ed:ce:a8:e9:8b:49:ab:c2:46:a4:be:88:46:f0:0c:
         b7:47:39:75:be:9b:17:a5:33:59:01:03:96:b7:0e:10:a3:23:
         4a:9b:a6:dc:e7:8d:91:f2:3f:77:a1:70:41:00:22:2f:bf:fa:
         9c:51:a5:9a:11:95:36:35:08:2c:d8:55:fe:ba:b1:dc:53:e6:
         cc:29:f3:72:6d:19:cf:8b:38:81:2d:19:e3:c3:3d:c1:34:a1:
         4f:a4:d4:19:4a:33:0b:4b:75:6d:5b:af:30:d3:69:ff:16:00:
         7f:36:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:58 2024 by rpki-client on console-ams.rpki-client.org