Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfd6bcfd-25fd-3e95-8091-889187faee38.roa
File:                     dfd6bcfd-25fd-3e95-8091-889187faee38.roa (raw, json)
Hash identifier:          agVcefAcX8KecaJpal3gwco3ZGRBtszaX6YbBR577so=
Subject key identifier:   E2:88:FF:C9:EA:46:23:BF:87:97:E7:E9:43:DB:CA:27:5E:F8:4C:46
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E1E0E2AEF29ECB41AD780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfd6bcfd-25fd-3e95-8091-889187faee38.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.107.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:1e:0e:2a:ef:29:ec:b4:1a:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=e2aecc1c-d12b-4ba6-b431-808b9d13d44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:ab:65:d4:53:24:08:ce:b4:4e:67:0d:88:
                    9f:bd:7c:7e:f0:1b:df:92:db:8d:c2:f0:91:d3:f7:
                    01:24:f1:6f:31:ce:65:d6:48:6b:ff:da:94:57:b5:
                    91:9c:e2:19:08:2a:c5:5e:88:94:59:42:aa:f0:75:
                    93:24:54:26:69:f2:e5:33:d1:81:aa:b1:b8:f6:f0:
                    a4:dc:fb:59:c4:77:b9:0c:f9:cd:ee:c2:d3:90:d9:
                    41:9c:be:16:8d:aa:e9:97:51:fa:87:2e:c6:6e:cd:
                    22:aa:82:cf:d1:50:c1:71:86:4d:04:fc:31:6f:14:
                    42:ca:1d:01:ea:f1:3e:bf:c3:3b:8b:d9:c0:fa:b6:
                    e8:96:5d:8d:98:98:1e:9e:81:04:41:24:9a:e4:a9:
                    35:b8:ef:7f:f6:00:1d:0b:d1:98:4a:b0:75:f1:73:
                    b8:90:8e:5f:13:a1:20:9b:b7:a0:6d:9b:d4:3f:1e:
                    f4:7e:fb:bd:83:09:4c:77:b5:ce:4b:f3:06:f4:95:
                    3c:73:bb:57:2f:d5:9c:da:14:a0:6f:30:42:38:87:
                    3e:4b:75:9e:38:87:58:ce:05:cd:17:be:59:3c:d9:
                    8c:52:02:53:b6:f1:7c:78:6a:4f:8c:ce:22:39:cf:
                    2c:2d:a8:2e:92:90:7d:f9:e2:06:cc:87:56:c0:15:
                    f2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:88:FF:C9:EA:46:23:BF:87:97:E7:E9:43:DB:CA:27:5E:F8:4C:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfd6bcfd-25fd-3e95-8091-889187faee38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:87:48:de:66:47:11:bf:ef:b8:d4:cf:47:94:a1:a5:1a:a9:
         e0:fe:c5:53:15:e4:09:15:df:f9:bc:c7:0a:fa:f3:d9:e7:11:
         72:94:b6:8c:dc:e5:95:2f:4e:26:9d:5b:6c:86:c7:6e:0e:ef:
         8b:a9:2f:2a:c9:e7:1e:bb:7b:4c:bb:16:ad:47:cd:64:bc:b8:
         32:8b:49:59:e3:4d:a9:ec:91:79:5e:52:23:2b:02:19:f5:cd:
         29:41:a1:90:b2:75:65:1b:c2:b1:47:b6:aa:da:0b:31:d5:85:
         9c:c3:e8:09:66:7a:40:4b:e2:b4:07:f7:90:9e:ac:4e:36:03:
         53:bf:c1:ec:f2:11:09:06:7e:fb:9a:12:30:f8:40:61:c2:e8:
         84:16:4f:c3:4b:e2:02:a2:d8:f3:94:1c:f6:63:0c:b8:29:9b:
         59:a9:c1:67:50:2f:c9:de:2f:5b:a4:b6:e5:7a:d1:29:6b:e1:
         20:76:cc:fa:f9:fc:20:8a:90:27:17:96:43:a4:d6:74:55:99:
         8a:51:52:48:a0:1a:d0:d2:df:7f:36:34:fc:76:6c:71:c3:fb:
         7e:34:23:54:fa:6b:db:5a:d6:f7:e3:71:f7:9a:6f:72:08:bf:
         19:a6:eb:95:5c:8d:00:99:c5:e2:8b:f1:c8:c3:bf:67:68:34:
         93:67:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org