Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1d7e399-35d6-3b47-9b2b-d9b9ebad3a7a.roa
File:                     e1d7e399-35d6-3b47-9b2b-d9b9ebad3a7a.roa (raw, json)
Hash identifier:          L6dACqIG6JOdBRfmNNwuBt242tbHg2JbdxxCfI8zJVY=
Subject key identifier:   A1:1D:F7:EA:B4:24:52:F2:78:9A:E9:81:F0:F6:32:42:F0:A5:AF:E9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E15CD0B2357A2B3884440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1d7e399-35d6-3b47-9b2b-d9b9ebad3a7a.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.106.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:15:cd:0b:23:57:a2:b3:88:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=1e47f7e8-e146-4319-99a9-c2a80f8f1d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:fc:70:bf:ea:58:c3:d0:21:3e:5d:23:cd:
                    ff:56:4c:42:c5:12:1f:08:f9:b6:c7:47:c0:33:e6:
                    ca:bf:ec:eb:69:01:b0:25:bc:af:8f:51:b5:01:2e:
                    3e:1d:cf:94:34:db:d9:93:42:2c:52:2f:51:4d:40:
                    7e:09:33:28:16:d3:5e:fe:9c:4f:65:42:f1:3f:b2:
                    92:02:62:d1:ae:a4:f2:3c:3f:ee:8e:d5:87:84:52:
                    5e:0e:df:02:5f:fa:0c:39:e6:f8:cd:a4:88:89:9c:
                    1d:f3:24:61:c4:8f:2e:98:bb:1d:73:8c:d0:06:d0:
                    51:e0:a5:b5:3f:78:d7:aa:a9:e1:26:11:1e:3b:50:
                    41:21:31:80:5f:f2:eb:c8:bc:08:e7:6c:47:04:6a:
                    d7:da:2b:29:f6:90:66:e4:b5:42:e2:d4:5e:fb:68:
                    2a:91:c4:43:a6:d9:67:02:f6:4c:d7:1f:14:48:ae:
                    05:46:a4:69:c1:7d:35:1f:d3:12:29:2c:a2:79:1d:
                    ba:1a:d7:31:ea:7c:42:44:03:ba:f7:b8:8d:0c:90:
                    8b:bb:fb:78:1c:e4:36:e3:7b:2f:1c:0d:7a:f4:7e:
                    a7:c9:48:8a:09:24:db:30:f7:bc:f3:f2:1c:50:3b:
                    e2:9a:31:b6:f0:1a:13:5c:68:85:fb:c7:40:ae:af:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1D:F7:EA:B4:24:52:F2:78:9A:E9:81:F0:F6:32:42:F0:A5:AF:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1d7e399-35d6-3b47-9b2b-d9b9ebad3a7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:7a:3b:fc:5f:51:5a:13:a0:69:c3:b3:60:34:f6:43:58:87:
         0f:68:57:48:36:1b:a4:91:d5:92:be:12:df:75:82:14:0b:4c:
         a3:3b:b8:55:20:a8:0a:c9:0d:44:de:45:54:f4:b9:01:cd:ba:
         cf:14:f9:b5:e4:57:58:c2:1a:c5:43:60:af:70:7a:d2:dc:73:
         3d:0e:4b:98:bb:d0:9b:6f:3b:c3:03:9f:25:84:86:19:b3:cf:
         54:72:82:20:4a:2a:66:e2:20:ec:1d:55:1b:ab:3a:89:b8:85:
         3c:a3:9b:19:9e:53:45:0b:47:89:f8:d0:70:b1:e4:a1:c0:54:
         a5:f9:b5:49:8e:52:7d:4e:63:a3:fe:af:c9:80:53:49:42:1f:
         fd:71:85:2b:7c:c9:53:bc:c6:07:a7:96:16:8c:5d:dc:d9:81:
         f3:bd:2f:05:5b:00:62:60:bd:14:6a:8f:73:90:b7:5f:5c:95:
         7d:f5:b3:10:07:cf:53:ce:56:7c:21:2b:b7:e8:ae:d3:da:19:
         47:57:7a:06:03:65:b3:b8:af:d1:74:0a:bb:95:b9:d1:e9:9d:
         81:a5:ea:99:c3:62:88:96:e6:10:df:da:36:b0:9c:81:f8:90:
         20:41:a0:72:1c:71:b6:b6:d8:25:a6:e1:09:70:79:43:0f:58:
         56:b5:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:11 2024 by rpki-client on console-fra.rpki-client.org